TROJ_DLOADR.AG


 ALIASES:

TrojanDownloader:Win32/Carberp.C, TrojanDownloader:Win32/Dofoil.D (Microsoft); Generic BackDoor!dxl (McAfee); ARC:RAR, [MSh34kS.exe]:Backdoor.Win32.VB.pln, [MSh34kS.exe]:Backdoor.Win32.VB.pln, [xSkSjs4.exe]:Tro (Kaspersky); Trojan.Win32.Generic!BT (Sunbelt); Trojan.Downloader.JOVX (FSecure)

 PLATFORM:

Windows 2000, Windows XP, Windows Server 2003

 OVERALL RISK RATING:
 DAMAGE POTENTIAL:
 DISTRIBUTION POTENTIAL:
 REPORTED INFECTION:

  • Threat Type: Trojan

  • Destructiveness: No

  • Encrypted:

  • In the wild: Yes

  OVERVIEW

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

It modifies files, disabling programs and applications from properly running.

  TECHNICAL DETAILS

File Size:

429,431 bytes

File Type:

EXE

Memory Resident:

Yes

Initial Samples Received Date:

04 Jan 2012

Arrival Details

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Installation

This Trojan creates the following folders:

  • %System Root%\DOCUME~1
  • %System Root%\DOCUME~1\Wilbert
  • %User Profile%\LOCALS~1
  • %User Profile%\Microsoft\HTML Help
  • %Application Data%\Microsoft
  • %Application Data%\Microsoft\Windows Media
  • %Application Data%\Microsoft\Windows Media\9.0
  • %User Profile%\Microsoft\Dr Watson

(Note: %System Root% is the root folder, which is usually C:\. It is also where the operating system is located.. %User Profile% is the current user's profile folder, which is usually C:\Windows\Profiles\{user name} on Windows 98 and ME, C:\WINNT\Profiles\{user name} on Windows NT, and C:\Documents and Settings\{user name} on Windows 2000, XP, and Server 2003.. %Application Data% is the current user's Application Data folder, which is usually C:\Windows\Profiles\{user name}\Application Data on Windows 98 and ME, C:\WINNT\Profiles\{user name}\Application Data on Windows NT, and C:\Documents and Settings\{user name}\Local Settings\Application Data on Windows 2000, XP, and Server 2003.)

Autostart Technique

This Trojan adds the following registry entries to enable its automatic execution at every system startup:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}
Version = "9,0,0,3250"

HKEY_CURRENT_USER\Software\Microsoft\
Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}
Version = "9,0,0,3250"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Active Setup\Installed Components\{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
Version = "9,0,0,3250"

HKEY_CURRENT_USER\Software\Microsoft\
Active Setup\Installed Components\{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
Version = "9,0,0,3250"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Active Setup\Installed Components\{44BBA848-CC51-11CF-AAFA-00AA00B6015C}
Version = "9,0,0,3250"

HKEY_CURRENT_USER\Software\Microsoft\
Active Setup\Installed Components\{44BBA848-CC51-11CF-AAFA-00AA00B6015C}
Version = "9,0,0,3250"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Active Setup\Installed Components\{2179C5D3-EBFF-11CF-B6FD-00AA00B4E220}
Version = "9,0,0,3250"

HKEY_CURRENT_USER\Software\Microsoft\
Active Setup\Installed Components\{2179C5D3-EBFF-11CF-B6FD-00AA00B4E220}
Version = "9,0,0,3250"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
DontAsk = 2

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
Version = "9,0,0,3250"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
Stubpath = "%Windows%\inf\unregmp2.exe /ShowWMP"

Other System Modifications

This Trojan modifies the following files:

  • %Start Menu%\Programs\Accessories\Entertainment\Windows Media Player.lnk
  • %Start Menu%\Programs\Windows Media Player.lnk
  • %Application Data%\Microsoft\Windows Media\9.0\WMSDKNS.XML
  • %Application Data%\Microsoft\Windows Media\9.0\WMSDKNS.DTD

(Note: %Start Menu% is the current user's Start Menu folder, which is usually C:\Windows\Profiles\{user name}\Start Menu on Windows 98 and ME, C:\WINNT\Profiles\{user name}\Start Menu on Windows NT and C:\Windows\Start Menu or C:\Documents and Settings\{User name}\Start Menu on Windows 2000, XP, and Server 2003.. %Application Data% is the current user's Application Data folder, which is usually C:\Windows\Profiles\{user name}\Application Data on Windows 98 and ME, C:\WINNT\Profiles\{user name}\Application Data on Windows NT, and C:\Documents and Settings\{user name}\Local Settings\Application Data on Windows 2000, XP, and Server 2003.)

It deletes the following files:

  • %System%\drivers\etc\hosts
  • %Start Menu%\Programs\Accessories\Entertainment\ActiveMovie Control.lnk
  • %Desktop%\ActiveMovie Control.lnk
  • %Start Menu%\Programs\Accessories\Entertainment\ActiveMovie File Types.lnk
  • %Desktop%\ActiveMovie File Types.lnk
  • Windows Media Player.lnk
  • %Start Menu%\Programs\Accessories\Entertainment\Beta Windows Media Player.lnk
  • %User Profile%\Quick Launch\Beta Windows Media Player.lnk
  • %Start Menu%\Programs\Beta Windows Media Player.lnk
  • %Windows% Media Player.lnk
  • %Application Data%\Microsoft\Windows Media\9.0\WMSDKNSR.XML

(Note: %System% is the Windows system folder, which is usually C:\Windows\System on Windows 98 and ME, C:\WINNT\System32 on Windows NT and 2000, or C:\Windows\System32 on Windows XP and Server 2003.. %Start Menu% is the current user's Start Menu folder, which is usually C:\Windows\Profiles\{user name}\Start Menu on Windows 98 and ME, C:\WINNT\Profiles\{user name}\Start Menu on Windows NT and C:\Windows\Start Menu or C:\Documents and Settings\{User name}\Start Menu on Windows 2000, XP, and Server 2003.. %Desktop% is the current user's desktop, which is usually C:\Windows\Profiles\{user name}\Desktop on Windows 98 and ME, C:\WINNT\Profiles\{user name}\Desktop on Windows NT, and C:\Documents and Settings\{User Name}\Desktop on Windows 2000, XP, and Server 2003.. %User Profile% is the current user's profile folder, which is usually C:\Windows\Profiles\{user name} on Windows 98 and ME, C:\WINNT\Profiles\{user name} on Windows NT, and C:\Documents and Settings\{user name} on Windows 2000, XP, and Server 2003.. %Windows% is the Windows folder, which is usually C:\Windows or C:\WINNT.. %Application Data% is the current user's Application Data folder, which is usually C:\Windows\Profiles\{user name}\Application Data on Windows 98 and ME, C:\WINNT\Profiles\{user name}\Application Data on Windows NT, and C:\Documents and Settings\{user name}\Local Settings\Application Data on Windows 2000, XP, and Server 2003.)

It deletes the following folders:

  • %Start Menu%\Programs\Accessories\Entertainment
  • %Start Menu%\Programs\Accessories\Entertainment\

(Note: %Start Menu% is the current user's Start Menu folder, which is usually C:\Windows\Profiles\{user name}\Start Menu on Windows 98 and ME, C:\WINNT\Profiles\{user name}\Start Menu on Windows NT and C:\Windows\Start Menu or C:\Documents and Settings\{User name}\Start Menu on Windows 2000, XP, and Server 2003.)

It adds the following registry keys:

HKEY_CURRENT_USER\Software\WinRAR SFX

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}\
Default MidiOut Device

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}\
Default DirectSound Device

HKEY_CURRENT_USER\Software\Microsoft\
Multimedia\ActiveMovie\Filter Cache

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Setup\UserOptions

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\RunOnce

HKEY_LOCAL_MACHINE\Software\Microsoft\
Windows\CurrentVersion\Uninstall\
MPlayer2

HKEY_CLASSES_ROOT\WMP.DeskBand.1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMP.DeskBand.1\CLSID

HKEY_CLASSES_ROOT\WMP.DeskBand

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMP.DeskBand\CLSID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{0A4286EA-E355-44FB-8086-AF3DF7645BD9}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{0A4286EA-E355-44FB-8086-AF3DF7645BD9}\ProgID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{0A4286EA-E355-44FB-8086-AF3DF7645BD9}\VersionIndependentProgID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{0A4286EA-E355-44FB-8086-AF3DF7645BD9}\InprocServer32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{B6DD1ED6-573F-40FD-99A1-F28D8BF23916}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{B6DD1ED6-573F-40FD-99A1-F28D8BF23916}\1.0

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{B6DD1ED6-573F-40FD-99A1-F28D8BF23916}\1.0\
FLAGS

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{B6DD1ED6-573F-40FD-99A1-F28D8BF23916}\1.0\
0

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{B6DD1ED6-573F-40FD-99A1-F28D8BF23916}\1.0\
0\win32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{B6DD1ED6-573F-40FD-99A1-F28D8BF23916}\1.0\
HELPDIR

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{0A55922C-3B1F-469B-8D0D-B15060499A52}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{0A55922C-3B1F-469B-8D0D-B15060499A52}\ProxyStubClsid

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{0A55922C-3B1F-469B-8D0D-B15060499A52}\ProxyStubClsid32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{0A55922C-3B1F-469B-8D0D-B15060499A52}\TypeLib

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Health\{C426A1A3-4A13-4558-BCC3-9995D52C061B}

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\DropDown

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences\ProxySettings

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences\ProxySettings\
MMS

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences\ProxySettings\
HTTP

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences\ProxySettings\
RTSP

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences\EqualizerSettings

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Player\RecentFileList

It adds the following registry entries:

HKEY_CURRENT_USER\Software\WinRAR SFX
C%%DOCUME~1%Wilbert%LOCALS~1%Temp = "%User Temp%"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
MediaPlayer
MP2.SaveDir = "%Program Files%\Windows Media Player"

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}\
Default MidiOut Device
FriendlyName = "Default MidiOut Device"

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}\
Default MidiOut Device
CLSID = "{07B65360-C445-11CE-AFDE-00AA006C14F4}"

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}\
Default MidiOut Device
FilterData = {random values}

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}\
Default MidiOut Device
MidiOutId = ffffffff

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}\
Default DirectSound Device
FriendlyName = "Default DirectSound Device"

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}\
Default DirectSound Device
CLSID = "{79376820-07D0-11CF-A24D-0020AFD79767}"

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}\
Default DirectSound Device
FilterData = {random values}

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}\
Default DirectSound Device
DSGuid = "{00000000-0000-0000-0000-000000000000}"

HKEY_CURRENT_USER\Software\Microsoft\
Multimedia\ActiveMovie\Filter Cache
0 = {random values}

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences
AcceptedPrivacyStatement = 1

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences
MetadataRetrieval = 3

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences
SendUserGUID = {random values}

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences
SilentAcquisition = 1

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Setup\UserOptions
DesktopShortcut = "no"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Setup\UserOptions
QuickLaunchShortcut = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayCDAudioOnArrival
Action = "@wmploc.dll,-6503"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayCDAudioOnArrival
Provider = "@wmploc.dll,-6502"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayCDAudioOnArrival
InvokeProgID = "WMP.AudioCD"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayCDAudioOnArrival
InvokeVerb = "play"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayCDAudioOnArrival
DefaultIcon = "%ProgramFiles%\Windows Media Player\wmplayer.exe,0"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSRipCDAudioOnArrival
Action = "@wmploc.dll,-6506"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSRipCDAudioOnArrival
Provider = "@wmploc.dll,-6502"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSRipCDAudioOnArrival
InvokeProgID = "WMP.RipCD"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSRipCDAudioOnArrival
InvokeVerb = "Rip"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSRipCDAudioOnArrival
DefaultIcon = "%ProgramFiles%\Windows Media Player\wmplayer.exe,0"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMPBurnCDOnArrival
Action = "@wmploc.dll,-6505"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMPBurnCDOnArrival
Provider = "@wmploc.dll,-6502"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMPBurnCDOnArrival
InvokeProgID = "WMP.BurnCD"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMPBurnCDOnArrival
InvokeVerb = "Burn"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMPBurnCDOnArrival
DefaultIcon = "%ProgramFiles%\Windows Media Player\wmplayer.exe,0"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayDVDMovieOnArrival
Action = "@wmploc.dll,-6504"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayDVDMovieOnArrival
Provider = "@wmploc.dll,-6502"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayDVDMovieOnArrival
InvokeProgID = "WMP.DVD"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayDVDMovieOnArrival
InvokeVerb = "play"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayDVDMovieOnArrival
DefaultIcon = "%ProgramFiles%\Windows Media Player\wmplayer.exe,0"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMDMHandler
Action = "Transfer Files"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMDMHandler
CLSIDForCancel = "{91778246-9BE4-4713-A651-E833B853CC30}"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMDMHandler
DefaultIcon = "%ProgramFiles%\Windows Media Player\wmplayer.exe,0"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMDMHandler
InitCmdLine = {random characters}

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMDMHandler
ProgID = "Shell.HWEventHandlerShellExecute"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMDMHandler
Provider = "@wmploc.dll,-6502"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wma
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wma\OpenWithProgIds
WMAFile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
wmafile
PreferExecuteOnMismatch = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
wmafile
EditFlags = {random values}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
wmafile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
wmafile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wma
Content Type = "audio/x-ms-wma"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wma
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wma
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wax
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wax\OpenWithProgIds
WAXFile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WAXFile
PreferExecuteOnMismatch = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WAXFile
EditFlags = {random values}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WAXFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WAXFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wax
Content Type = "audio/x-ms-wax"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wax
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wax
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-ms-wma
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/x-ms-wma = "wma"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE17 = "audio/x-ms-wma"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/x-ms-wma = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\User Trusted External Applications
"C:\PROGRA~1\WINDOW~2\wmplayer.exe" = "Yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\User Trusted External Applications
%Program Files%\WINDOW~2\wmplayer.exe = "Yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\User Trusted External Applications
"C:\Program Files\Windows Media Player\wmplayer.exe" = "Yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\User Trusted External Applications
%Program Files%\Windows Media Player\wmplayer.exe = "Yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-ms-wma
CLSID = "{cd3afa84-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-ms-wma
Extension = ".wma"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-ms-wma
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-ms-wax
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/x-ms-wax = "wax"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE16 = "audio/x-ms-wax"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/x-ms-wax = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-ms-wax
CLSID = "{cd3afa83-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-ms-wax
Extension = ".wax"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-ms-wax
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wmv
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wmv\OpenWithProgIds
WMVFile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMVFile
PreferExecuteOnMismatch = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMVFile
EditFlags = {random values}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMVFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMVFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wmv
Content Type = "video/x-ms-wmv"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wmv
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wmv
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wvx
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wvx\OpenWithProgIds
WVXFile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WVXFile
PreferExecuteOnMismatch = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WVXFile
EditFlags = {random values}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WVXFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WVXFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wvx
Content Type = "video/x-ms-wvx"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wvx
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wvx
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-wmv
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/x-ms-wmv = "wmv"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE29 = "video/x-ms-wmv"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/x-ms-wmv = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-wmv
CLSID = "{cd3afa94-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-wmv
Extension = ".wmv"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-wmv
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-wvx
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/x-ms-wvx = "wvx"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE31 = "video/x-ms-wvx"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/x-ms-wvx = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-wvx
CLSID = "{cd3afa95-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-wvx
Extension = ".wvx"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-wvx
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.asf
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.asf\OpenWithProgIds
ASFFile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
ASFFile
PreferExecuteOnMismatch = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
ASFFile
EditFlags = {random values}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
ASFFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
ASFFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.asf
Content Type = "video/x-ms-asf"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.asf
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.asf
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.asx
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.asx\OpenWithProgIds
ASXFile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
ASXFile
PreferExecuteOnMismatch = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
ASXFile
EditFlags = {random values}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
ASXFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
ASXFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.asx
Content Type = "video/x-ms-asf"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.asx
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.asx
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.dvr-ms
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.dvr-ms\OpenWithProgIds
WMP.DVR-MSFile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMP.DVR-MSFile
PreferExecuteOnMismatch = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMP.DVR-MSFile
EditFlags = {random values}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMP.DVR-MSFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMP.DVR-MSFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.dvr-ms
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wpl
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wpl\OpenWithProgIds
WPLFile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WPLFile
PreferExecuteOnMismatch = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WPLFile
EditFlags = {random values}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WPLFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WPLFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wpl
Content Type = "application/vnd.ms-wpl"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wpl
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wpl
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wm
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wm\OpenWithProgIds
ASFFile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wm
Content Type = "video/x-ms-wm"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wm
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wm
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wmx
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wmx\OpenWithProgIds
ASXFile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wmx
Content Type = "video/x-ms-wmx"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wmx
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wmx
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wmd
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wmd\OpenWithProgIds
WMDFile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMDFile
PreferExecuteOnMismatch = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMDFile
EditFlags = {random values}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wmd
Content Type = "application/x-ms-wmd"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wmd
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wmd
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wmz
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wmz\OpenWithProgIds
WMZFile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMZFile
PreferExecuteOnMismatch = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMZFile
EditFlags = {random values}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wmz
Content Type = "application/x-ms-wmz"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wmz
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wmz
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
application/x-mplayer2
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
application/x-mplayer2
CLSID = "{cd3afa8f-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
application/x-mplayer2
Extension = ".asx"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
application/x-mplayer2
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
application/vnd.ms-wpl
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
application/vnd.ms-wpl
CLSID = "{cd3afa95-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
application/vnd.ms-wpl
Extension = ".wpl"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
application/vnd.ms-wpl
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-asf
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/x-ms-asf = "asf,asx,wm,wmx"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE26 = "video/x-ms-asf"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/x-ms-asf = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-asf
CLSID = "{cd3afa8f-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-asf
Extension = ".asx"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-asf
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-asf-plugin
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/x-ms-asf-plugin = "asf,asx,wm,wmx"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE27 = "video/x-ms-asf-plugin"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/x-ms-asf-plugin = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-asf-plugin
CLSID = "{cd3afa8f-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-asf-plugin
Extension = ".asx"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-asf-plugin
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-wm
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/x-ms-wm = "asf,asx,wm,wmx"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE28 = "video/x-ms-wm"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/x-ms-wm = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-wm
CLSID = "{cd3afa92-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-wm
Extension = ".wm"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-wm
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-wmx
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/x-ms-wmx = "asf,asx,wm,wmx"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE30 = "video/x-ms-wmx"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/x-ms-wmx = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-wmx
CLSID = "{cd3afa93-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-wmx
Extension = ".wmx"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-wmx
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
application/x-ms-wmd
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
application/x-ms-wmd
CLSID = "{ee4da6a4-8c52-4a63-bbb8-97c93d7e1b6c}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
application/x-ms-wmd
Extension = ".wmd"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
application/x-ms-wmd
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
application/x-ms-wmz
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
application/x-ms-wmz
CLSID = "{cd3afa71-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
application/x-ms-wmz
Extension = ".wmz"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
application/x-ms-wmz
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Protocols\
mms
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MMS
Source Filter = "{6B6D0800-9ADA-11d0-A520-00A0D10129C0}"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Protocols\
mms
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Protocols\
mmst
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MMST
Source Filter = "{6B6D0800-9ADA-11d0-A520-00A0D10129C0}"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Protocols\
mmst
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Protocols\
mmsu
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MMSU
Source Filter = "{6B6D0800-9ADA-11d0-A520-00A0D10129C0}"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Protocols\
mmsu
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Protocols\
msbd
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MSBD
Source Filter = "{6B6D0800-9ADA-11d0-A520-00A0D10129C0}"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Protocols\
msbd
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.cda
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.cda\OpenWithProgIds
CDAFile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
cdafile
PreferExecuteOnMismatch = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
cdafile
EditFlags = {random values}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
cdafile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.cda
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Devices\
AudioCD
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AudioCD\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Devices\
AudioCD
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mp3
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mp3\OpenWithProgIds
mp3file = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
mp3file
PreferExecuteOnMismatch = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
mp3file
EditFlags = {random values}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
mp3file\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
mp3file\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mp3
Content Type = "audio/mpeg"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.mp3
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mp3
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.m3u
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.m3u\OpenWithProgIds
m3ufile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
m3ufile
PreferExecuteOnMismatch = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
m3ufile
EditFlags = {random values}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
m3ufile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
m3ufile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.m3u
Content Type = "audio/x-mpegurl"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.m3u
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.m3u
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mpeg
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/mpeg = "mp3"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE5 = "audio/mpeg"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/mpeg = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mpeg
CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mpeg
Extension = ".mp3"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mpeg
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mpg
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/mpg = "mp3"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE7 = "audio/mpg"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/mpg = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mpg
CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mpg
Extension = ".mp3"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mpg
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mp3
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/mp3 = "mp3"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE4 = "audio/mp3"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/mp3 = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mp3
CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mp3
Extension = ".mp3"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mp3
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mpeg
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/x-mpeg = "mp3"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE13 = "audio/x-mpeg"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/x-mpeg = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mpeg
CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mpeg
Extension = ".mp3"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mpeg
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mpg
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/x-mpg = "mp3"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE15 = "audio/x-mpg"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/x-mpg = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mpg
CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mpg
Extension = ".mp3"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mpg
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mp3
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/x-mp3 = "mp3"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE12 = "audio/x-mp3"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/x-mp3 = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mp3
CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mp3
Extension = ".mp3"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mp3
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mpegurl
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/mpegurl = "m3u"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE6 = "audio/mpegurl"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/mpegurl = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mpegurl
CLSID = "{cd3afa78-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mpegurl
Extension = ".m3u"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mpegurl
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mpegurl
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/x-mpegurl = "m3u"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE14 = "audio/x-mpegurl"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/x-mpegurl = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mpegurl
CLSID = "{cd3afa78-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mpegurl
Extension = ".m3u"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mpegurl
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.avi
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.avi\OpenWithProgIds
avifile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AVIFile
PreferExecuteOnMismatch = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AVIFile
EditFlags = {random values}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AVIFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AVIFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.avi
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.avi
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/avi
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/avi = "avi"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE20 = "video/avi"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/avi = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/avi
CLSID = "{cd3afa88-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/avi
Extension = ".avi"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/avi
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/msvideo
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/msvideo = "avi"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE23 = "video/msvideo"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/msvideo = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/msvideo
CLSID = "{cd3afa88-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/msvideo
Extension = ".avi"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/msvideo
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-msvideo
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/x-msvideo = "avi"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE32 = "video/x-msvideo"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/x-msvideo = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-msvideo
CLSID = "{cd3afa88-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-msvideo
Extension = ".avi"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-msvideo
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wav
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wav\OpenWithProgIds
soundrec = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SoundRec
PreferExecuteOnMismatch = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SoundRec
EditFlags = {random values}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SoundRec\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SoundRec\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wav
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wav
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/wav
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/wav = "wav"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE8 = "audio/wav"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/wav = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/wav
CLSID = "{cd3afa7b-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/wav
Extension = ".wav"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/wav
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-wav
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/x-wav = "wav"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE18 = "audio/x-wav"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/x-wav = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-wav
CLSID = "{cd3afa7b-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-wav
Extension = ".wav"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-wav
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpeg
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpeg\OpenWithProgIds
mpegfile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
mpegfile
PreferExecuteOnMismatch = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
mpegfile
EditFlags = {random values}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
mpegfile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
mpegfile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpeg
Content Type = "video/mpeg"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.mpeg
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpeg
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpg
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpg\OpenWithProgIds
mpegfile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpg
Content Type = "video/mpeg"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.mpg
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpg
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpe
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpe\OpenWithProgIds
mpegfile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpe
Content Type = "video/mpeg"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.mpe
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpe
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.m1v
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.m1v\OpenWithProgIds
mpegfile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.m1v
Content Type = "video/mpeg"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.m1v
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.m1v
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mp2
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mp2\OpenWithProgIds
mpegfile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mp2
Content Type = "video/mpeg"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.mp2
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mp2
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpv2
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpv2\OpenWithProgIds
mpegfile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpv2
Content Type = "video/mpeg"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.mpv2
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpv2
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mp2v
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mp2v\OpenWithProgIds
mpegfile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mp2v
Content Type = "video/mpeg"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.mp2v
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mp2v
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpa
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpa\OpenWithProgIds
mpegfile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpa
Content Type = "video/mpeg"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.mpa
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpa
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/mpeg
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/mpeg = "mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE21 = "video/mpeg"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/mpeg = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/mpeg
CLSID = "{cd3afa89-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/mpeg
Extension = ".mpeg"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/mpeg
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-mpeg
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/x-mpeg = "mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE24 = "video/x-mpeg"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/x-mpeg = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-mpeg
CLSID = "{cd3afa89-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-mpeg
Extension = ".mpeg"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-mpeg
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-mpeg2a
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/x-mpeg2a = "mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE25 = "video/x-mpeg2a"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/x-mpeg2a = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-mpeg2a
CLSID = "{cd3afa89-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-mpeg2a
Extension = ".mpeg"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-mpeg2a
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/mpg
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/mpg = "mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE22 = "video/mpg"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/mpg = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/mpg
CLSID = "{cd3afa89-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/mpg
Extension = ".mpeg"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/mpg
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mid
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mid\OpenWithProgIds
midfile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIDFile
PreferExecuteOnMismatch = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIDFile
EditFlags = {random values}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIDFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIDFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mid
Content Type = "audio/mid"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.mid
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mid
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.midi
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.midi\OpenWithProgIds
midfile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.midi
Content Type = "audio/mid"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.midi
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.midi
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.rmi
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.rmi\OpenWithProgIds
midfile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.rmi
Content Type = "audio/mid"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.rmi
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.rmi
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mid
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/mid = "mid,midi,rmi"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE2 = "audio/mid"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/mid = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mid
CLSID = "{cd3afa74-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mid
Extension = ".mid"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mid
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/midi
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/midi = "mid,midi,rmi"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE3 = "audio/midi"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/midi = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/midi
CLSID = "{cd3afa74-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/midi
Extension = ".mid"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/midi
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mid
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/x-mid = "mid,midi,rmi"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE10 = "audio/x-mid"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/x-mid = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mid
CLSID = "{cd3afa74-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mid
Extension = ".mid"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mid
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-midi
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/x-midi = "mid,midi,rmi"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE11 = "audio/x-midi"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/x-midi = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-midi
CLSID = "{cd3afa74-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-midi
Extension = ".mid"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-midi
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
midi/mid
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
midi/mid = "mid,midi,rmi"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE19 = "midi/mid"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
midi/mid = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
midi/mid
CLSID = "{cd3afa74-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
midi/mid
Extension = ".mid"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
midi/mid
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.aif
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.aif\OpenWithProgIds
AIFFFile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AIFFFile
PreferExecuteOnMismatch = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AIFFFile
EditFlags = {random values}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AIFFFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AIFFFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.aif
Content Type = "audio/aiff"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.aif
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.aif
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.aifc
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.aifc\OpenWithProgIds
AIFFFile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.aifc
Content Type = "audio/aiff"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.aifc
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.aifc
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.aiff
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.aiff\OpenWithProgIds
AIFFFile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.aiff
Content Type = "audio/aiff"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.aiff
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.aiff
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-aiff
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/x-aiff = "aif,aifc,aiff"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE9 = "audio/x-aiff"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/x-aiff = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-aiff
CLSID = "{cd3afa72-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-aiff
Extension = ".aiff"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-aiff
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/aiff
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/aiff = "aif,aifc,aiff"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE0 = "audio/aiff"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/aiff = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/aiff
CLSID = "{cd3afa72-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/aiff
Extension = ".aiff"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/aiff
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.au
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.au\OpenWithProgIds
AUFile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AUFile
PreferExecuteOnMismatch = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AUFile
EditFlags = {random values}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AUFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AUFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.au
Content Type = "audio/basic"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.au
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.au
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.snd
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.snd\OpenWithProgIds
AUFile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.snd
Content Type = "audio/basic"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.snd
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.snd
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/basic
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/basic = "au,snd"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE1 = "audio/basic"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/basic = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/basic
CLSID = "{cd3afa73-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/basic
Extension = ".au"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/basic
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
MediaPlayer\PlayerUpgrade
PlayerVersion = "9,0,0,3250"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
MediaPlayer\Preferences
MyPlayLists = "%User Profile%\My Music\Sample Playlists"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{0A4286EA-E355-44FB-8086-AF3DF7645BD9}\InprocServer32
ThreadingModel = "Apartment"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{0A55922C-3B1F-469B-8D0D-B15060499A52}\TypeLib
Version = "1.0"

HKEY_LOCAL_MACHINE\SOFTWARE\Clients\
Media\Windows Media Player\InstallInfo
IconsVisible = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Setup\
Oc Manager\Subcomponents
wmpocm = 1

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Setup\CreatedLinks
AppName = "%Program Files%\WINDOW~2\wmplayer.exe"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Setup\CreatedLinks
Shortcut2 = "%Start Menu%\Programs\Accessories\Entertainment\Windows Media Player.lnk"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Setup\CreatedLinks
Shortcut4 = "%User Profile%\Quick Launch\Windows Media Player.lnk"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Setup\CreatedLinks
Shortcut3 = "%Start Menu%\Programs\Windows Media Player.lnk"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences
LaunchIndex = 1

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Player\Tasks\
NowPlaying
InitFlags = 1

HKEY_CURRENT_USER\Software\Microsoft\
Windows Media\WMSDK\General
UniqueID = "{E093AE47-8983-45BD-A0C7-472EAA1C9F1D}"

HKEY_CURRENT_USER\Software\Microsoft\
Windows Media\WMSDK\General
ComputerName = "WILBERT-68E5850"

HKEY_CURRENT_USER\Software\Microsoft\
Windows Media\WMSDK\General
VolumeSerialNumber = 68adfd

HKEY_CURRENT_USER\Software\Microsoft\
Windows Media\WMSDK\Namespace
LocalBase = "%Application Data%\Microsoft\Windows Media\9.0\WMSDKNS.XML"

HKEY_CURRENT_USER\Software\Microsoft\
Windows Media\WMSDK\Namespace
DTDFile = "%Application Data%\Microsoft\Windows Media\9.0\WMSDKNS.DTD"

HKEY_CURRENT_USER\Software\Microsoft\
Windows Media\WMSDK\Namespace
LocalDelta = "%Application Data%\Microsoft\Windows Media\9.0\WMSDKNSD.XML"

HKEY_CURRENT_USER\Software\Microsoft\
Windows Media\WMSDK\Namespace
RemoteDelta = "%Application Data%\Microsoft\Windows Media\9.0\WMSDKNSR.XML"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences\ProxySettings\
MMS
ProxyPort = 6db

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences\ProxySettings\
HTTP
ProxyStyle = 1

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences\ProxySettings\
HTTP
ProxyPort = 5

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences\ProxySettings\
RTSP
ProxyPort = 22a

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Player\RecentFileList
File0 = "%User Temp%\video78634.avi"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
DrWatson
NumberOfCrashes = 1

It deletes the following registry keys:

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\MUILanguages\
FileVersions

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wma

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\audio/x-ms-wma

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wma

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\audio/x-ms-wma

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wax

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\audio/x-ms-wax

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wax

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\audio/x-ms-wax

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wmv

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\video/x-ms-wmv

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wmv

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\video/x-ms-wmv

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wvx

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\video/x-ms-wvx

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wvx

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\video/x-ms-wvx

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.asf

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\video/x-ms-asf

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.asf

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\video/x-ms-asf

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.asx

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.asx

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wpl

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\application/vnd.ms-wpl

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wpl

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\application/vnd.ms-wpl

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wm

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\video/x-ms-wm

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wm

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\video/x-ms-wm

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wmx

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\video/x-ms-wmx

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wmx

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\video/x-ms-wmx

HKEY_CLASSES_ROOT\WMDFile\shellex\
ContextMenuHandlers\WMPPlayAsPlaylist

HKEY_CLASSES_ROOT\WMDFile\shellex\
ContextMenuHandlers\WMPAddToPlaylist

HKEY_CLASSES_ROOT\WMDFile\shellex\
ContextMenuHandlers\WMPBurnAudioCD

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wmd

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\application/x-ms-wmd

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wmd

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\application/x-ms-wmd

HKEY_CLASSES_ROOT\WMZFile\shellex\
ContextMenuHandlers\WMPPlayAsPlaylist

HKEY_CLASSES_ROOT\WMZFile\shellex\
ContextMenuHandlers\WMPAddToPlaylist

HKEY_CLASSES_ROOT\WMZFile\shellex\
ContextMenuHandlers\WMPBurnAudioCD

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wmz

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\application/x-ms-wmz

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wmz

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\application/x-ms-wmz

HKEY_CLASSES_ROOT\CDAFile\shellex\
ContextMenuHandlers\WMPPlayAsPlaylist

HKEY_CLASSES_ROOT\CDAFile\shellex\
ContextMenuHandlers\WMPAddToPlaylist

HKEY_CLASSES_ROOT\CDAFile\shellex\
ContextMenuHandlers\WMPBurnAudioCD

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.mp3

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\audio/mpeg

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.mp3

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\audio/mpeg

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.m3u

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\audio/x-mpegurl

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.m3u

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\audio/x-mpegurl

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.avi

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\video/avi

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.avi

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\video/avi

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wav

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\audio/wav

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wav

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\audio/wav

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.mpeg

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\video/mpeg

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.mpeg

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\video/mpeg

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.mpg

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.mpg

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.mpe

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.mpe

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.m1v

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.m1v

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.mp2

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.mp2

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.mpv2

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.mpv2

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.mp2v

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.mp2v

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.mpa

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.mpa

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.mid

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\audio/mid

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.mid

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\audio/mid

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.midi

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.midi

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.rmi

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.rmi

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.au

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\audio/basic

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.au

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\audio/basic

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.snd

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.snd

HKEY_LOCAL_MACHINE\Software\Microsoft\
Windows\CurrentVersion\Uninstall\
WMP7

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\MPlayer2\Groups\
Video\QT

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\MPlayer2\Extensions\
.mov

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\MPlayer2\Extensions\
.qt

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\MPlayer2\MIME Types\
video/quicktime

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.ivf

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ivf

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Groups\
Video\IVF

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
MediaPlayer\Control\Advanced Options\
Windows Media

HKEY_CURRENT_USER\Software\Microsoft\
Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
PCHealth\ErrorReporting\DW

Dropping Routine

This Trojan drops the following files:

  • __tmp_rar_sfx_access_check_54234
  • xZ34sJS.cmd
  • MSh34kS.exe
  • video78634.avi
  • xSkSjs4.exe
  • hosts
  • %User Profile%\HTML Help\hh.dat
  • %User Profile%\Quick Launch\Windows Media Player.lnk
  • %Application Data%\Microsoft\Windows Media\9.0\WMSDKNS.XML.bak
  • %Application Data%\Microsoft\Windows Media\9.0\WMSDKNS.XML.done
  • %Application Data%\Microsoft\Windows Media\9.0\WMSDKNSD.XML
  • %User Profile%\Dr Watson\drwtsn32.log
  • %User Profile%\Dr Watson\user.dmp
  • %Application Data%\Microsoft\Windows Media\9.0\WMSDKNS.XML

(Note: %User Profile% is the current user's profile folder, which is usually C:\Windows\Profiles\{user name} on Windows 98 and ME, C:\WINNT\Profiles\{user name} on Windows NT, and C:\Documents and Settings\{user name} on Windows 2000, XP, and Server 2003.. %Application Data% is the current user's Application Data folder, which is usually C:\Windows\Profiles\{user name}\Application Data on Windows 98 and ME, C:\WINNT\Profiles\{user name}\Application Data on Windows NT, and C:\Documents and Settings\{user name}\Local Settings\Application Data on Windows 2000, XP, and Server 2003.)

This report is generated via an automated analysis system.

  SOLUTION

Minimum Scan Engine:

9.200

Step 1

For Windows XP and Windows Server 2003 users, before doing any scans, please make sure you disable System Restore to allow full scanning of your computer.

Step 2

Restart in Safe Mode

[ Learn More ]

Step 3

Delete this registry key

[ Learn More ]

Important: Editing the Windows Registry incorrectly can lead to irreversible system malfunction. Please do this step only if you know how or you can ask assistance from your system administrator. Else, check this Microsoft article first before modifying your computer's registry.

  • In HKEY_CURRENT_USER\Software
    • WinRAR SFX
  • In HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum
    • {4EFE2452-168A-11D1-BC76-00C04FB9453B}
  • In HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}
    • Default MidiOut Device
  • In HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum
    • {E0F158E1-CB04-11D0-BD4E-00A0C911CE86}
  • In HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}
    • Default DirectSound Device
  • In HKEY_CURRENT_USER\Software\Microsoft\Multimedia\ActiveMovie
    • Filter Cache
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Setup
    • UserOptions
  • In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion
    • RunOnce
  • In HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall
    • MPlayer2
  • In HKEY_CLASSES_ROOT
    • WMP.DeskBand.1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WMP.DeskBand.1
    • CLSID
  • In HKEY_CLASSES_ROOT
    • WMP.DeskBand
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WMP.DeskBand
    • CLSID
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID
    • {0A4286EA-E355-44FB-8086-AF3DF7645BD9}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0A4286EA-E355-44FB-8086-AF3DF7645BD9}
    • ProgID
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0A4286EA-E355-44FB-8086-AF3DF7645BD9}
    • VersionIndependentProgID
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0A4286EA-E355-44FB-8086-AF3DF7645BD9}
    • InprocServer32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib
    • {B6DD1ED6-573F-40FD-99A1-F28D8BF23916}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{B6DD1ED6-573F-40FD-99A1-F28D8BF23916}
    • 1.0
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{B6DD1ED6-573F-40FD-99A1-F28D8BF23916}\1.0
    • FLAGS
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{B6DD1ED6-573F-40FD-99A1-F28D8BF23916}\1.0
    • 0
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{B6DD1ED6-573F-40FD-99A1-F28D8BF23916}\1.0\0
    • win32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{B6DD1ED6-573F-40FD-99A1-F28D8BF23916}\1.0
    • HELPDIR
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
    • {0A55922C-3B1F-469B-8D0D-B15060499A52}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0A55922C-3B1F-469B-8D0D-B15060499A52}
    • ProxyStubClsid
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0A55922C-3B1F-469B-8D0D-B15060499A52}
    • ProxyStubClsid32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0A55922C-3B1F-469B-8D0D-B15060499A52}
    • TypeLib
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Health
    • {C426A1A3-4A13-4558-BCC3-9995D52C061B}
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer
    • DropDown
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
    • ProxySettings
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences\ProxySettings
    • MMS
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences\ProxySettings
    • HTTP
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences\ProxySettings
    • RTSP
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
    • EqualizerSettings
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Player
    • RecentFileList

Step 4

Delete this registry value

[ Learn More ]

Important: Editing the Windows Registry incorrectly can lead to irreversible system malfunction. Please do this step only if you know how or you can ask assistance from your system administrator. Else, check this Microsoft article first before modifying your computer's registry.

  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}
    • Version="9,0,0,3250"
  • In HKEY_CURRENT_USER\Software\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}
    • Version="9,0,0,3250"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
    • Version="9,0,0,3250"
  • In HKEY_CURRENT_USER\Software\Microsoft\Active Setup\Installed Components\{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
    • Version="9,0,0,3250"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA848-CC51-11CF-AAFA-00AA00B6015C}
    • Version="9,0,0,3250"
  • In HKEY_CURRENT_USER\Software\Microsoft\Active Setup\Installed Components\{44BBA848-CC51-11CF-AAFA-00AA00B6015C}
    • Version="9,0,0,3250"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2179C5D3-EBFF-11CF-B6FD-00AA00B4E220}
    • Version="9,0,0,3250"
  • In HKEY_CURRENT_USER\Software\Microsoft\Active Setup\Installed Components\{2179C5D3-EBFF-11CF-B6FD-00AA00B4E220}
    • Version="9,0,0,3250"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
    • DontAsk=2
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
    • Version="9,0,0,3250"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
    • Stubpath="%Windows%\inf\unregmp2.exe /ShowWMP"
  • In HKEY_CURRENT_USER\Software\WinRAR SFX
    • C%%DOCUME~1%Wilbert%LOCALS~1%Temp="%User Temp%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MediaPlayer
    • MP2.SaveDir="%Program Files%\Windows Media Player"
  • In HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}\Default MidiOut Device
    • FriendlyName="Default MidiOut Device"
  • In HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}\Default MidiOut Device
    • CLSID="{07B65360-C445-11CE-AFDE-00AA006C14F4}"
  • In HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}\Default MidiOut Device
    • FilterData={random values}
  • In HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}\Default MidiOut Device
    • MidiOutId=ffffffff
  • In HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}\Default DirectSound Device
    • FriendlyName="Default DirectSound Device"
  • In HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}\Default DirectSound Device
    • CLSID="{79376820-07D0-11CF-A24D-0020AFD79767}"
  • In HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}\Default DirectSound Device
    • FilterData={random values}
  • In HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}\Default DirectSound Device
    • DSGuid="{00000000-0000-0000-0000-000000000000}"
  • In HKEY_CURRENT_USER\Software\Microsoft\Multimedia\ActiveMovie\Filter Cache
    • 0={random values}
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
    • AcceptedPrivacyStatement=1
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
    • MetadataRetrieval=3
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
    • SendUserGUID={random values}
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
    • SilentAcquisition=1
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Setup\UserOptions
    • DesktopShortcut="no"
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Setup\UserOptions
    • QuickLaunchShortcut="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSPlayCDAudioOnArrival
    • Action="@wmploc.dll,-6503"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSPlayCDAudioOnArrival
    • Provider="@wmploc.dll,-6502"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSPlayCDAudioOnArrival
    • InvokeProgID="WMP.AudioCD"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSPlayCDAudioOnArrival
    • InvokeVerb="play"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSPlayCDAudioOnArrival
    • DefaultIcon="%ProgramFiles%\Windows Media Player\wmplayer.exe,0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSRipCDAudioOnArrival
    • Action="@wmploc.dll,-6506"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSRipCDAudioOnArrival
    • Provider="@wmploc.dll,-6502"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSRipCDAudioOnArrival
    • InvokeProgID="WMP.RipCD"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSRipCDAudioOnArrival
    • InvokeVerb="Rip"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSRipCDAudioOnArrival
    • DefaultIcon="%ProgramFiles%\Windows Media Player\wmplayer.exe,0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSWMPBurnCDOnArrival
    • Action="@wmploc.dll,-6505"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSWMPBurnCDOnArrival
    • Provider="@wmploc.dll,-6502"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSWMPBurnCDOnArrival
    • InvokeProgID="WMP.BurnCD"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSWMPBurnCDOnArrival
    • InvokeVerb="Burn"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSWMPBurnCDOnArrival
    • DefaultIcon="%ProgramFiles%\Windows Media Player\wmplayer.exe,0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSPlayDVDMovieOnArrival
    • Action="@wmploc.dll,-6504"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSPlayDVDMovieOnArrival
    • Provider="@wmploc.dll,-6502"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSPlayDVDMovieOnArrival
    • InvokeProgID="WMP.DVD"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSPlayDVDMovieOnArrival
    • InvokeVerb="play"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSPlayDVDMovieOnArrival
    • DefaultIcon="%ProgramFiles%\Windows Media Player\wmplayer.exe,0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSWMDMHandler
    • Action="Transfer Files"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSWMDMHandler
    • CLSIDForCancel="{91778246-9BE4-4713-A651-E833B853CC30}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSWMDMHandler
    • DefaultIcon="%ProgramFiles%\Windows Media Player\wmplayer.exe,0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSWMDMHandler
    • InitCmdLine={random characters}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSWMDMHandler
    • ProgID="Shell.HWEventHandlerShellExecute"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSWMDMHandler
    • Provider="@wmploc.dll,-6502"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wma
    • UserApprovedOwning="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wma\OpenWithProgIds
    • WMAFile="[REG_NONE, size: 0 bytes]"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wmafile
    • PreferExecuteOnMismatch=1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wmafile
    • EditFlags={random values}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wmafile\shell\open\DropTarget
    • CLSID="{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wmafile\shell\play
    • MUIVerb="@%SystemRoot%\inf\unregmp2.exe,-9991"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wma
    • Content Type="audio/x-ms-wma"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.wma
    • MPlayer2.Set="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wma
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wax
    • UserApprovedOwning="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wax\OpenWithProgIds
    • WAXFile="[REG_NONE, size: 0 bytes]"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WAXFile
    • PreferExecuteOnMismatch=1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WAXFile
    • EditFlags={random values}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WAXFile\shell\open\DropTarget
    • CLSID="{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WAXFile\shell\play
    • MUIVerb="@%SystemRoot%\inf\unregmp2.exe,-9991"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wax
    • Content Type="audio/x-ms-wax"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.wax
    • MPlayer2.Set="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wax
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-ms-wma
    • UserApprovedOwning="yes"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • audio/x-ms-wma="wma"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • TYPE17="audio/x-ms-wma"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • audio/x-ms-wma=""%Program Files%\WINDOW~2\wmplayer.exe""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\User Trusted External Applications
    • "C:\PROGRA~1\WINDOW~2\wmplayer.exe"="Yes"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\User Trusted External Applications
    • %Program Files%\WINDOW~2\wmplayer.exe="Yes"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\User Trusted External Applications
    • "C:\Program Files\Windows Media Player\wmplayer.exe"="Yes"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\User Trusted External Applications
    • %Program Files%\Windows Media Player\wmplayer.exe="Yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-ms-wma
    • CLSID="{cd3afa84-b84f-48f0-9393-7edc34128127}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-ms-wma
    • Extension=".wma"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-ms-wma
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-ms-wax
    • UserApprovedOwning="yes"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • audio/x-ms-wax="wax"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • TYPE16="audio/x-ms-wax"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • audio/x-ms-wax=""%Program Files%\WINDOW~2\wmplayer.exe""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-ms-wax
    • CLSID="{cd3afa83-b84f-48f0-9393-7edc34128127}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-ms-wax
    • Extension=".wax"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-ms-wax
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wmv
    • UserApprovedOwning="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wmv\OpenWithProgIds
    • WMVFile="[REG_NONE, size: 0 bytes]"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WMVFile
    • PreferExecuteOnMismatch=1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WMVFile
    • EditFlags={random values}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WMVFile\shell\open\DropTarget
    • CLSID="{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WMVFile\shell\play
    • MUIVerb="@%SystemRoot%\inf\unregmp2.exe,-9991"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wmv
    • Content Type="video/x-ms-wmv"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.wmv
    • MPlayer2.Set="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wmv
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wvx
    • UserApprovedOwning="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wvx\OpenWithProgIds
    • WVXFile="[REG_NONE, size: 0 bytes]"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WVXFile
    • PreferExecuteOnMismatch=1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WVXFile
    • EditFlags={random values}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WVXFile\shell\open\DropTarget
    • CLSID="{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WVXFile\shell\play
    • MUIVerb="@%SystemRoot%\inf\unregmp2.exe,-9991"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wvx
    • Content Type="video/x-ms-wvx"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.wvx
    • MPlayer2.Set="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wvx
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-wmv
    • UserApprovedOwning="yes"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • video/x-ms-wmv="wmv"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • TYPE29="video/x-ms-wmv"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • video/x-ms-wmv=""%Program Files%\WINDOW~2\wmplayer.exe""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-ms-wmv
    • CLSID="{cd3afa94-b84f-48f0-9393-7edc34128127}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-ms-wmv
    • Extension=".wmv"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-wmv
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-wvx
    • UserApprovedOwning="yes"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • video/x-ms-wvx="wvx"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • TYPE31="video/x-ms-wvx"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • video/x-ms-wvx=""%Program Files%\WINDOW~2\wmplayer.exe""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-ms-wvx
    • CLSID="{cd3afa95-b84f-48f0-9393-7edc34128127}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-ms-wvx
    • Extension=".wvx"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-wvx
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.asf
    • UserApprovedOwning="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.asf\OpenWithProgIds
    • ASFFile="[REG_NONE, size: 0 bytes]"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ASFFile
    • PreferExecuteOnMismatch=1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ASFFile
    • EditFlags={random values}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ASFFile\shell\open\DropTarget
    • CLSID="{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ASFFile\shell\play
    • MUIVerb="@%SystemRoot%\inf\unregmp2.exe,-9991"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.asf
    • Content Type="video/x-ms-asf"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.asf
    • MPlayer2.Set="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.asf
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.asx
    • UserApprovedOwning="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.asx\OpenWithProgIds
    • ASXFile="[REG_NONE, size: 0 bytes]"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ASXFile
    • PreferExecuteOnMismatch=1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ASXFile
    • EditFlags={random values}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ASXFile\shell\open\DropTarget
    • CLSID="{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ASXFile\shell\play
    • MUIVerb="@%SystemRoot%\inf\unregmp2.exe,-9991"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.asx
    • Content Type="video/x-ms-asf"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.asx
    • MPlayer2.Set="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.asx
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.dvr-ms
    • UserApprovedOwning="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.dvr-ms\OpenWithProgIds
    • WMP.DVR-MSFile="[REG_NONE, size: 0 bytes]"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WMP.DVR-MSFile
    • PreferExecuteOnMismatch=1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WMP.DVR-MSFile
    • EditFlags={random values}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WMP.DVR-MSFile\shell\open\DropTarget
    • CLSID="{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WMP.DVR-MSFile\shell\play
    • MUIVerb="@%SystemRoot%\inf\unregmp2.exe,-9991"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.dvr-ms
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wpl
    • UserApprovedOwning="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wpl\OpenWithProgIds
    • WPLFile="[REG_NONE, size: 0 bytes]"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WPLFile
    • PreferExecuteOnMismatch=1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WPLFile
    • EditFlags={random values}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WPLFile\shell\open\DropTarget
    • CLSID="{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WPLFile\shell\play
    • MUIVerb="@%SystemRoot%\inf\unregmp2.exe,-9991"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wpl
    • Content Type="application/vnd.ms-wpl"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.wpl
    • MPlayer2.Set="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wpl
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wm
    • UserApprovedOwning="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wm\OpenWithProgIds
    • ASFFile="[REG_NONE, size: 0 bytes]"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wm
    • Content Type="video/x-ms-wm"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.wm
    • MPlayer2.Set="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wm
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wmx
    • UserApprovedOwning="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wmx\OpenWithProgIds
    • ASXFile="[REG_NONE, size: 0 bytes]"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wmx
    • Content Type="video/x-ms-wmx"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.wmx
    • MPlayer2.Set="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wmx
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wmd
    • UserApprovedOwning="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wmd\OpenWithProgIds
    • WMDFile="[REG_NONE, size: 0 bytes]"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WMDFile
    • PreferExecuteOnMismatch=1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WMDFile
    • EditFlags={random values}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wmd
    • Content Type="application/x-ms-wmd"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.wmd
    • MPlayer2.Set="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wmd
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wmz
    • UserApprovedOwning="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wmz\OpenWithProgIds
    • WMZFile="[REG_NONE, size: 0 bytes]"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WMZFile
    • PreferExecuteOnMismatch=1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WMZFile
    • EditFlags={random values}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wmz
    • Content Type="application/x-ms-wmz"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.wmz
    • MPlayer2.Set="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wmz
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\application/x-mplayer2
    • UserApprovedOwning="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/x-mplayer2
    • CLSID="{cd3afa8f-b84f-48f0-9393-7edc34128127}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/x-mplayer2
    • Extension=".asx"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\application/x-mplayer2
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\application/vnd.ms-wpl
    • UserApprovedOwning="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/vnd.ms-wpl
    • CLSID="{cd3afa95-b84f-48f0-9393-7edc34128127}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/vnd.ms-wpl
    • Extension=".wpl"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\application/vnd.ms-wpl
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-asf
    • UserApprovedOwning="yes"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • video/x-ms-asf="asf,asx,wm,wmx"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • TYPE26="video/x-ms-asf"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • video/x-ms-asf=""%Program Files%\WINDOW~2\wmplayer.exe""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-ms-asf
    • CLSID="{cd3afa8f-b84f-48f0-9393-7edc34128127}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-ms-asf
    • Extension=".asx"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-asf
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-asf-plugin
    • UserApprovedOwning="yes"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • video/x-ms-asf-plugin="asf,asx,wm,wmx"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • TYPE27="video/x-ms-asf-plugin"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • video/x-ms-asf-plugin=""%Program Files%\WINDOW~2\wmplayer.exe""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-ms-asf-plugin
    • CLSID="{cd3afa8f-b84f-48f0-9393-7edc34128127}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-ms-asf-plugin
    • Extension=".asx"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-asf-plugin
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-wm
    • UserApprovedOwning="yes"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • video/x-ms-wm="asf,asx,wm,wmx"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • TYPE28="video/x-ms-wm"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • video/x-ms-wm=""%Program Files%\WINDOW~2\wmplayer.exe""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-ms-wm
    • CLSID="{cd3afa92-b84f-48f0-9393-7edc34128127}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-ms-wm
    • Extension=".wm"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-wm
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-wmx
    • UserApprovedOwning="yes"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • video/x-ms-wmx="asf,asx,wm,wmx"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • TYPE30="video/x-ms-wmx"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • video/x-ms-wmx=""%Program Files%\WINDOW~2\wmplayer.exe""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-ms-wmx
    • CLSID="{cd3afa93-b84f-48f0-9393-7edc34128127}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-ms-wmx
    • Extension=".wmx"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-wmx
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\application/x-ms-wmd
    • UserApprovedOwning="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/x-ms-wmd
    • CLSID="{ee4da6a4-8c52-4a63-bbb8-97c93d7e1b6c}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/x-ms-wmd
    • Extension=".wmd"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\application/x-ms-wmd
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\application/x-ms-wmz
    • UserApprovedOwning="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/x-ms-wmz
    • CLSID="{cd3afa71-b84f-48f0-9393-7edc34128127}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/x-ms-wmz
    • Extension=".wmz"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\application/x-ms-wmz
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Protocols\mms
    • UserApprovedOwning="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MMS
    • Source Filter="{6B6D0800-9ADA-11d0-A520-00A0D10129C0}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Protocols\mms
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Protocols\mmst
    • UserApprovedOwning="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MMST
    • Source Filter="{6B6D0800-9ADA-11d0-A520-00A0D10129C0}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Protocols\mmst
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Protocols\mmsu
    • UserApprovedOwning="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MMSU
    • Source Filter="{6B6D0800-9ADA-11d0-A520-00A0D10129C0}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Protocols\mmsu
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Protocols\msbd
    • UserApprovedOwning="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSBD
    • Source Filter="{6B6D0800-9ADA-11d0-A520-00A0D10129C0}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Protocols\msbd
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.cda
    • UserApprovedOwning="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.cda\OpenWithProgIds
    • CDAFile="[REG_NONE, size: 0 bytes]"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\cdafile
    • PreferExecuteOnMismatch=1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\cdafile
    • EditFlags={random values}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\cdafile\shell\play
    • MUIVerb="@%SystemRoot%\inf\unregmp2.exe,-9991"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.cda
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Devices\AudioCD
    • UserApprovedOwning="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AudioCD\shell\play
    • MUIVerb="@%SystemRoot%\inf\unregmp2.exe,-9991"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Devices\AudioCD
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mp3
    • UserApprovedOwning="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mp3\OpenWithProgIds
    • mp3file="[REG_NONE, size: 0 bytes]"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\mp3file
    • PreferExecuteOnMismatch=1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\mp3file
    • EditFlags={random values}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\mp3file\shell\open\DropTarget
    • CLSID="{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\mp3file\shell\play
    • MUIVerb="@%SystemRoot%\inf\unregmp2.exe,-9991"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mp3
    • Content Type="audio/mpeg"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.mp3
    • MPlayer2.Set="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mp3
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.m3u
    • UserApprovedOwning="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.m3u\OpenWithProgIds
    • m3ufile="[REG_NONE, size: 0 bytes]"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\m3ufile
    • PreferExecuteOnMismatch=1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\m3ufile
    • EditFlags={random values}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\m3ufile\shell\open\DropTarget
    • CLSID="{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\m3ufile\shell\play
    • MUIVerb="@%SystemRoot%\inf\unregmp2.exe,-9991"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.m3u
    • Content Type="audio/x-mpegurl"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.m3u
    • MPlayer2.Set="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.m3u
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/mpeg
    • UserApprovedOwning="yes"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • audio/mpeg="mp3"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • TYPE5="audio/mpeg"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • audio/mpeg=""%Program Files%\WINDOW~2\wmplayer.exe""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/mpeg
    • CLSID="{cd3afa76-b84f-48f0-9393-7edc34128127}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/mpeg
    • Extension=".mp3"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/mpeg
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/mpg
    • UserApprovedOwning="yes"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • audio/mpg="mp3"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • TYPE7="audio/mpg"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • audio/mpg=""%Program Files%\WINDOW~2\wmplayer.exe""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/mpg
    • CLSID="{cd3afa76-b84f-48f0-9393-7edc34128127}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/mpg
    • Extension=".mp3"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/mpg
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/mp3
    • UserApprovedOwning="yes"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • audio/mp3="mp3"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • TYPE4="audio/mp3"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • audio/mp3=""%Program Files%\WINDOW~2\wmplayer.exe""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/mp3
    • CLSID="{cd3afa76-b84f-48f0-9393-7edc34128127}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/mp3
    • Extension=".mp3"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/mp3
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-mpeg
    • UserApprovedOwning="yes"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • audio/x-mpeg="mp3"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • TYPE13="audio/x-mpeg"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • audio/x-mpeg=""%Program Files%\WINDOW~2\wmplayer.exe""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-mpeg
    • CLSID="{cd3afa76-b84f-48f0-9393-7edc34128127}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-mpeg
    • Extension=".mp3"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-mpeg
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-mpg
    • UserApprovedOwning="yes"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • audio/x-mpg="mp3"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • TYPE15="audio/x-mpg"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • audio/x-mpg=""%Program Files%\WINDOW~2\wmplayer.exe""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-mpg
    • CLSID="{cd3afa76-b84f-48f0-9393-7edc34128127}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-mpg
    • Extension=".mp3"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-mpg
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-mp3
    • UserApprovedOwning="yes"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • audio/x-mp3="mp3"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • TYPE12="audio/x-mp3"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • audio/x-mp3=""%Program Files%\WINDOW~2\wmplayer.exe""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-mp3
    • CLSID="{cd3afa76-b84f-48f0-9393-7edc34128127}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-mp3
    • Extension=".mp3"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-mp3
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/mpegurl
    • UserApprovedOwning="yes"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • audio/mpegurl="m3u"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • TYPE6="audio/mpegurl"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • audio/mpegurl=""%Program Files%\WINDOW~2\wmplayer.exe""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/mpegurl
    • CLSID="{cd3afa78-b84f-48f0-9393-7edc34128127}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/mpegurl
    • Extension=".m3u"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/mpegurl
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-mpegurl
    • UserApprovedOwning="yes"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • audio/x-mpegurl="m3u"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • TYPE14="audio/x-mpegurl"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • audio/x-mpegurl=""%Program Files%\WINDOW~2\wmplayer.exe""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-mpegurl
    • CLSID="{cd3afa78-b84f-48f0-9393-7edc34128127}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-mpegurl
    • Extension=".m3u"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-mpegurl
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.avi
    • UserApprovedOwning="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.avi\OpenWithProgIds
    • avifile="[REG_NONE, size: 0 bytes]"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AVIFile
    • PreferExecuteOnMismatch=1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AVIFile
    • EditFlags={random values}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AVIFile\shell\open\DropTarget
    • CLSID="{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AVIFile\shell\play
    • MUIVerb="@%SystemRoot%\inf\unregmp2.exe,-9991"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.avi
    • MPlayer2.Set="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.avi
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/avi
    • UserApprovedOwning="yes"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • video/avi="avi"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • TYPE20="video/avi"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • video/avi=""%Program Files%\WINDOW~2\wmplayer.exe""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/avi
    • CLSID="{cd3afa88-b84f-48f0-9393-7edc34128127}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/avi
    • Extension=".avi"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/avi
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/msvideo
    • UserApprovedOwning="yes"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • video/msvideo="avi"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • TYPE23="video/msvideo"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • video/msvideo=""%Program Files%\WINDOW~2\wmplayer.exe""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/msvideo
    • CLSID="{cd3afa88-b84f-48f0-9393-7edc34128127}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/msvideo
    • Extension=".avi"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/msvideo
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-msvideo
    • UserApprovedOwning="yes"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • video/x-msvideo="avi"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • TYPE32="video/x-msvideo"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • video/x-msvideo=""%Program Files%\WINDOW~2\wmplayer.exe""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-msvideo
    • CLSID="{cd3afa88-b84f-48f0-9393-7edc34128127}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-msvideo
    • Extension=".avi"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-msvideo
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wav
    • UserApprovedOwning="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wav\OpenWithProgIds
    • soundrec="[REG_NONE, size: 0 bytes]"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SoundRec
    • PreferExecuteOnMismatch=1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SoundRec
    • EditFlags={random values}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SoundRec\shell\open\DropTarget
    • CLSID="{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SoundRec\shell\play
    • MUIVerb="@%SystemRoot%\inf\unregmp2.exe,-9991"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.wav
    • MPlayer2.Set="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wav
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/wav
    • UserApprovedOwning="yes"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • audio/wav="wav"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • TYPE8="audio/wav"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • audio/wav=""%Program Files%\WINDOW~2\wmplayer.exe""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/wav
    • CLSID="{cd3afa7b-b84f-48f0-9393-7edc34128127}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/wav
    • Extension=".wav"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/wav
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-wav
    • UserApprovedOwning="yes"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • audio/x-wav="wav"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • TYPE18="audio/x-wav"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • audio/x-wav=""%Program Files%\WINDOW~2\wmplayer.exe""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-wav
    • CLSID="{cd3afa7b-b84f-48f0-9393-7edc34128127}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-wav
    • Extension=".wav"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-wav
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mpeg
    • UserApprovedOwning="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mpeg\OpenWithProgIds
    • mpegfile="[REG_NONE, size: 0 bytes]"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\mpegfile
    • PreferExecuteOnMismatch=1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\mpegfile
    • EditFlags={random values}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\mpegfile\shell\open\DropTarget
    • CLSID="{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\mpegfile\shell\play
    • MUIVerb="@%SystemRoot%\inf\unregmp2.exe,-9991"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mpeg
    • Content Type="video/mpeg"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.mpeg
    • MPlayer2.Set="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mpeg
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mpg
    • UserApprovedOwning="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mpg\OpenWithProgIds
    • mpegfile="[REG_NONE, size: 0 bytes]"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mpg
    • Content Type="video/mpeg"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.mpg
    • MPlayer2.Set="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mpg
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mpe
    • UserApprovedOwning="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mpe\OpenWithProgIds
    • mpegfile="[REG_NONE, size: 0 bytes]"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mpe
    • Content Type="video/mpeg"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.mpe
    • MPlayer2.Set="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mpe
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.m1v
    • UserApprovedOwning="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.m1v\OpenWithProgIds
    • mpegfile="[REG_NONE, size: 0 bytes]"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.m1v
    • Content Type="video/mpeg"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.m1v
    • MPlayer2.Set="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.m1v
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mp2
    • UserApprovedOwning="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mp2\OpenWithProgIds
    • mpegfile="[REG_NONE, size: 0 bytes]"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mp2
    • Content Type="video/mpeg"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.mp2
    • MPlayer2.Set="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mp2
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mpv2
    • UserApprovedOwning="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mpv2\OpenWithProgIds
    • mpegfile="[REG_NONE, size: 0 bytes]"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mpv2
    • Content Type="video/mpeg"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.mpv2
    • MPlayer2.Set="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mpv2
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mp2v
    • UserApprovedOwning="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mp2v\OpenWithProgIds
    • mpegfile="[REG_NONE, size: 0 bytes]"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mp2v
    • Content Type="video/mpeg"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.mp2v
    • MPlayer2.Set="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mp2v
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mpa
    • UserApprovedOwning="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mpa\OpenWithProgIds
    • mpegfile="[REG_NONE, size: 0 bytes]"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mpa
    • Content Type="video/mpeg"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.mpa
    • MPlayer2.Set="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mpa
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/mpeg
    • UserApprovedOwning="yes"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • video/mpeg="mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • TYPE21="video/mpeg"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • video/mpeg=""%Program Files%\WINDOW~2\wmplayer.exe""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/mpeg
    • CLSID="{cd3afa89-b84f-48f0-9393-7edc34128127}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/mpeg
    • Extension=".mpeg"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/mpeg
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-mpeg
    • UserApprovedOwning="yes"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • video/x-mpeg="mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • TYPE24="video/x-mpeg"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • video/x-mpeg=""%Program Files%\WINDOW~2\wmplayer.exe""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-mpeg
    • CLSID="{cd3afa89-b84f-48f0-9393-7edc34128127}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-mpeg
    • Extension=".mpeg"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-mpeg
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-mpeg2a
    • UserApprovedOwning="yes"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • video/x-mpeg2a="mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • TYPE25="video/x-mpeg2a"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • video/x-mpeg2a=""%Program Files%\WINDOW~2\wmplayer.exe""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-mpeg2a
    • CLSID="{cd3afa89-b84f-48f0-9393-7edc34128127}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-mpeg2a
    • Extension=".mpeg"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-mpeg2a
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/mpg
    • UserApprovedOwning="yes"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • video/mpg="mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • TYPE22="video/mpg"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • video/mpg=""%Program Files%\WINDOW~2\wmplayer.exe""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/mpg
    • CLSID="{cd3afa89-b84f-48f0-9393-7edc34128127}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/mpg
    • Extension=".mpeg"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/mpg
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mid
    • UserApprovedOwning="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mid\OpenWithProgIds
    • midfile="[REG_NONE, size: 0 bytes]"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIDFile
    • PreferExecuteOnMismatch=1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIDFile
    • EditFlags={random values}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIDFile\shell\open\DropTarget
    • CLSID="{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIDFile\shell\play
    • MUIVerb="@%SystemRoot%\inf\unregmp2.exe,-9991"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mid
    • Content Type="audio/mid"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.mid
    • MPlayer2.Set="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mid
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.midi
    • UserApprovedOwning="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.midi\OpenWithProgIds
    • midfile="[REG_NONE, size: 0 bytes]"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.midi
    • Content Type="audio/mid"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.midi
    • MPlayer2.Set="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.midi
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.rmi
    • UserApprovedOwning="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.rmi\OpenWithProgIds
    • midfile="[REG_NONE, size: 0 bytes]"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.rmi
    • Content Type="audio/mid"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.rmi
    • MPlayer2.Set="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.rmi
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/mid
    • UserApprovedOwning="yes"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • audio/mid="mid,midi,rmi"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • TYPE2="audio/mid"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • audio/mid=""%Program Files%\WINDOW~2\wmplayer.exe""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/mid
    • CLSID="{cd3afa74-b84f-48f0-9393-7edc34128127}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/mid
    • Extension=".mid"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/mid
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/midi
    • UserApprovedOwning="yes"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • audio/midi="mid,midi,rmi"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • TYPE3="audio/midi"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • audio/midi=""%Program Files%\WINDOW~2\wmplayer.exe""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/midi
    • CLSID="{cd3afa74-b84f-48f0-9393-7edc34128127}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/midi
    • Extension=".mid"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/midi
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-mid
    • UserApprovedOwning="yes"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • audio/x-mid="mid,midi,rmi"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • TYPE10="audio/x-mid"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • audio/x-mid=""%Program Files%\WINDOW~2\wmplayer.exe""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-mid
    • CLSID="{cd3afa74-b84f-48f0-9393-7edc34128127}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-mid
    • Extension=".mid"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-mid
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-midi
    • UserApprovedOwning="yes"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • audio/x-midi="mid,midi,rmi"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • TYPE11="audio/x-midi"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • audio/x-midi=""%Program Files%\WINDOW~2\wmplayer.exe""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-midi
    • CLSID="{cd3afa74-b84f-48f0-9393-7edc34128127}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-midi
    • Extension=".mid"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-midi
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\midi/mid
    • UserApprovedOwning="yes"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • midi/mid="mid,midi,rmi"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • TYPE19="midi/mid"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • midi/mid=""%Program Files%\WINDOW~2\wmplayer.exe""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\midi/mid
    • CLSID="{cd3afa74-b84f-48f0-9393-7edc34128127}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\midi/mid
    • Extension=".mid"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\midi/mid
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.aif
    • UserApprovedOwning="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.aif\OpenWithProgIds
    • AIFFFile="[REG_NONE, size: 0 bytes]"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AIFFFile
    • PreferExecuteOnMismatch=1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AIFFFile
    • EditFlags={random values}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AIFFFile\shell\open\DropTarget
    • CLSID="{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AIFFFile\shell\play
    • MUIVerb="@%SystemRoot%\inf\unregmp2.exe,-9991"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.aif
    • Content Type="audio/aiff"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.aif
    • MPlayer2.Set="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.aif
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.aifc
    • UserApprovedOwning="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.aifc\OpenWithProgIds
    • AIFFFile="[REG_NONE, size: 0 bytes]"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.aifc
    • Content Type="audio/aiff"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.aifc
    • MPlayer2.Set="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.aifc
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.aiff
    • UserApprovedOwning="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.aiff\OpenWithProgIds
    • AIFFFile="[REG_NONE, size: 0 bytes]"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.aiff
    • Content Type="audio/aiff"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.aiff
    • MPlayer2.Set="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.aiff
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-aiff
    • UserApprovedOwning="yes"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • audio/x-aiff="aif,aifc,aiff"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • TYPE9="audio/x-aiff"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • audio/x-aiff=""%Program Files%\WINDOW~2\wmplayer.exe""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-aiff
    • CLSID="{cd3afa72-b84f-48f0-9393-7edc34128127}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-aiff
    • Extension=".aiff"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-aiff
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/aiff
    • UserApprovedOwning="yes"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • audio/aiff="aif,aifc,aiff"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • TYPE0="audio/aiff"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • audio/aiff=""%Program Files%\WINDOW~2\wmplayer.exe""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/aiff
    • CLSID="{cd3afa72-b84f-48f0-9393-7edc34128127}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/aiff
    • Extension=".aiff"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/aiff
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.au
    • UserApprovedOwning="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.au\OpenWithProgIds
    • AUFile="[REG_NONE, size: 0 bytes]"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AUFile
    • PreferExecuteOnMismatch=1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AUFile
    • EditFlags={random values}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AUFile\shell\open\DropTarget
    • CLSID="{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AUFile\shell\play
    • MUIVerb="@%SystemRoot%\inf\unregmp2.exe,-9991"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.au
    • Content Type="audio/basic"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.au
    • MPlayer2.Set="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.au
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.snd
    • UserApprovedOwning="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.snd\OpenWithProgIds
    • AUFile="[REG_NONE, size: 0 bytes]"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.snd
    • Content Type="audio/basic"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.snd
    • MPlayer2.Set="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.snd
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/basic
    • UserApprovedOwning="yes"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • audio/basic="au,snd"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • TYPE1="audio/basic"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • audio/basic=""%Program Files%\WINDOW~2\wmplayer.exe""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/basic
    • CLSID="{cd3afa73-b84f-48f0-9393-7edc34128127}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/basic
    • Extension=".au"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/basic
    • AlreadyRegistered="yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MediaPlayer\PlayerUpgrade
    • PlayerVersion="9,0,0,3250"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MediaPlayer\Preferences
    • MyPlayLists="%User Profile%\My Music\Sample Playlists"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0A4286EA-E355-44FB-8086-AF3DF7645BD9}\InprocServer32
    • ThreadingModel="Apartment"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0A55922C-3B1F-469B-8D0D-B15060499A52}\TypeLib
    • Version="1.0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Clients\Media\Windows Media Player\InstallInfo
    • IconsVisible=1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\Oc Manager\Subcomponents
    • wmpocm=1
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Setup\CreatedLinks
    • AppName="%Program Files%\WINDOW~2\wmplayer.exe"
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Setup\CreatedLinks
    • Shortcut2="%Start Menu%\Programs\Accessories\Entertainment\Windows Media Player.lnk"
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Setup\CreatedLinks
    • Shortcut4="%User Profile%\Quick Launch\Windows Media Player.lnk"
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Setup\CreatedLinks
    • Shortcut3="%Start Menu%\Programs\Windows Media Player.lnk"
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
    • LaunchIndex=1
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Player\Tasks\NowPlaying
    • InitFlags=1
  • In HKEY_CURRENT_USER\Software\Microsoft\Windows Media\WMSDK\General
    • UniqueID="{E093AE47-8983-45BD-A0C7-472EAA1C9F1D}"
  • In HKEY_CURRENT_USER\Software\Microsoft\Windows Media\WMSDK\General
    • ComputerName="WILBERT-68E5850"
  • In HKEY_CURRENT_USER\Software\Microsoft\Windows Media\WMSDK\General
    • VolumeSerialNumber=68adfd
  • In HKEY_CURRENT_USER\Software\Microsoft\Windows Media\WMSDK\Namespace
    • LocalBase="%Application Data%\Microsoft\Windows Media\9.0\WMSDKNS.XML"
  • In HKEY_CURRENT_USER\Software\Microsoft\Windows Media\WMSDK\Namespace
    • DTDFile="%Application Data%\Microsoft\Windows Media\9.0\WMSDKNS.DTD"
  • In HKEY_CURRENT_USER\Software\Microsoft\Windows Media\WMSDK\Namespace
    • LocalDelta="%Application Data%\Microsoft\Windows Media\9.0\WMSDKNSD.XML"
  • In HKEY_CURRENT_USER\Software\Microsoft\Windows Media\WMSDK\Namespace
    • RemoteDelta="%Application Data%\Microsoft\Windows Media\9.0\WMSDKNSR.XML"
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences\ProxySettings\MMS
    • ProxyPort=6db
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences\ProxySettings\HTTP
    • ProxyStyle=1
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences\ProxySettings\HTTP
    • ProxyPort=5
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences\ProxySettings\RTSP
    • ProxyPort=22a
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Player\RecentFileList
    • File0="%User Temp%\video78634.avi"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DrWatson
    • NumberOfCrashes=1

Step 5

Search and delete these folders

[ Learn More ]
Please make sure you check the Search Hidden Files and Folders checkbox in the More advanced options option to include all hidden folders in the search result.
  • %System Root%\DOCUME~1
  • %System Root%\DOCUME~1\Wilbert
  • %User Profile%\LOCALS~1
  • %User Profile%\Microsoft\HTML Help
  • %Application Data%\Microsoft
  • %Application Data%\Microsoft\Windows Media
  • %Application Data%\Microsoft\Windows Media\9.0
  • %User Profile%\Microsoft\Dr Watson

Step 6

Search and delete these files

[ Learn More ]
There may be some component files that are hidden. Please make sure you check the Search Hidden Files and Folders checkbox in the "More advanced options" option to include all hidden files and folders in the search result.
  • __tmp_rar_sfx_access_check_54234
  • xZ34sJS.cmd
  • MSh34kS.exe
  • video78634.avi
  • xSkSjs4.exe
  • hosts
  • %User Profile%\HTML Help\hh.dat
  • %User Profile%\Quick Launch\Windows Media Player.lnk
  • %Application Data%\Microsoft\Windows Media\9.0\WMSDKNS.XML.bak
  • %Application Data%\Microsoft\Windows Media\9.0\WMSDKNS.XML.done
  • %Application Data%\Microsoft\Windows Media\9.0\WMSDKNSD.XML
  • %User Profile%\Dr Watson\drwtsn32.log
  • %User Profile%\Dr Watson\user.dmp
  • %Application Data%\Microsoft\Windows Media\9.0\WMSDKNS.XML

Step 7

Restart in normal mode and scan your computer with your Trend Micro product for files detected as TROJ_DLOADR.AG. If the detected files have already been cleaned, deleted, or quarantined by your Trend Micro product, no further step is required. You may opt to simply delete the quarantined files. Please check this Knowledge Base page for more information.

Step 8

Restore deleted/modified files and/or registry entries from backup

*Note: Only Microsoft-related files/keys/values will be restored. If this malware/grayware also deleted registry keys/values related to programs that are not from Microsoft, please reinstall those programs on your computer.

    • %Start Menu%\Programs\Accessories\Entertainment\Windows Media Player.lnk
    • %Start Menu%\Programs\Windows Media Player.lnk
    • %Application Data%\Microsoft\Windows Media\9.0\WMSDKNS.XML
    • %Application Data%\Microsoft\Windows Media\9.0\WMSDKNS.DTD

Step 9

Restore this file from backup only Microsoft-related files will be restored. If this malware/grayware also deleted files related to programs that are not from Microsoft, please reinstall those programs on you computer again.

  • %System%\drivers\etc\hosts
  • %Start Menu%\Programs\Accessories\Entertainment\ActiveMovie Control.lnk
  • %Desktop%\ActiveMovie Control.lnk
  • %Start Menu%\Programs\Accessories\Entertainment\ActiveMovie File Types.lnk
  • %Desktop%\ActiveMovie File Types.lnk
  • Windows Media Player.lnk
  • %Start Menu%\Programs\Accessories\Entertainment\Beta Windows Media Player.lnk
  • %User Profile%\Quick Launch\Beta Windows Media Player.lnk
  • %Start Menu%\Programs\Beta Windows Media Player.lnk
  • %Windows% Media Player.lnk
  • %Application Data%\Microsoft\Windows Media\9.0\WMSDKNSR.XML

Step 10

Restore these deleted registry keys/values from backup

*Note: Only Microsoft-related keys/values will be restored. If the malware/grayware also deleted registry keys/values related to programs that are not from Microsoft, please reinstall those programs on your computer.

  • In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\MUILanguages
    • FileVersions
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .wma
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
    • audio/x-ms-wma
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .wma
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
    • audio/x-ms-wma
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .wax
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
    • audio/x-ms-wax
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .wax
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
    • audio/x-ms-wax
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .wmv
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
    • video/x-ms-wmv
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .wmv
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
    • video/x-ms-wmv
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .wvx
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
    • video/x-ms-wvx
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .wvx
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
    • video/x-ms-wvx
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .asf
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
    • video/x-ms-asf
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .asf
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
    • video/x-ms-asf
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .asx
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .asx
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .wpl
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
    • application/vnd.ms-wpl
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .wpl
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
    • application/vnd.ms-wpl
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .wm
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
    • video/x-ms-wm
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .wm
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
    • video/x-ms-wm
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .wmx
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
    • video/x-ms-wmx
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .wmx
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
    • video/x-ms-wmx
  • In HKEY_CLASSES_ROOT\WMDFile\shellex\ContextMenuHandlers
    • WMPPlayAsPlaylist
  • In HKEY_CLASSES_ROOT\WMDFile\shellex\ContextMenuHandlers
    • WMPAddToPlaylist
  • In HKEY_CLASSES_ROOT\WMDFile\shellex\ContextMenuHandlers
    • WMPBurnAudioCD
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .wmd
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
    • application/x-ms-wmd
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .wmd
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
    • application/x-ms-wmd
  • In HKEY_CLASSES_ROOT\WMZFile\shellex\ContextMenuHandlers
    • WMPPlayAsPlaylist
  • In HKEY_CLASSES_ROOT\WMZFile\shellex\ContextMenuHandlers
    • WMPAddToPlaylist
  • In HKEY_CLASSES_ROOT\WMZFile\shellex\ContextMenuHandlers
    • WMPBurnAudioCD
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .wmz
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
    • application/x-ms-wmz
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .wmz
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
    • application/x-ms-wmz
  • In HKEY_CLASSES_ROOT\CDAFile\shellex\ContextMenuHandlers
    • WMPPlayAsPlaylist
  • In HKEY_CLASSES_ROOT\CDAFile\shellex\ContextMenuHandlers
    • WMPAddToPlaylist
  • In HKEY_CLASSES_ROOT\CDAFile\shellex\ContextMenuHandlers
    • WMPBurnAudioCD
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .mp3
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
    • audio/mpeg
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .mp3
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
    • audio/mpeg
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .m3u
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
    • audio/x-mpegurl
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .m3u
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
    • audio/x-mpegurl
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .avi
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
    • video/avi
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .avi
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
    • video/avi
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .wav
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
    • audio/wav
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .wav
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
    • audio/wav
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .mpeg
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
    • video/mpeg
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .mpeg
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
    • video/mpeg
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .mpg
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .mpg
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .mpe
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .mpe
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .m1v
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .m1v
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .mp2
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .mp2
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .mpv2
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .mpv2
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .mp2v
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .mp2v
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .mpa
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .mpa
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .mid
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
    • audio/mid
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .mid
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
    • audio/mid
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .midi
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .midi
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .rmi
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .rmi
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .au
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
    • audio/basic
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .au
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
    • audio/basic
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .snd
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .snd
  • In HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall
    • WMP7
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\MPlayer2\Groups\Video
    • QT
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\MPlayer2\Extensions
    • .mov
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\MPlayer2\Extensions
    • .qt
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\MPlayer2\MIME Types
    • video/quicktime
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions
    • .ivf
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types
    • video/x-ivf
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Groups\Video
    • IVF
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MediaPlayer\Control\Advanced Options
    • Windows Media
  • In HKEY_CURRENT_USER\Software\Microsoft\Active Setup\Installed Components
    • >{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PCHealth\ErrorReporting
    • DW


Did this description help? Tell us how we did.