TROJ_PAKES.BKZ
Backdoor:Win32/Xtrat.A (Microsoft); Trojan.Win32.Pakes.xdr (Kaspersky); Trojan.Win32.Generic!BT (Sunbelt); Trojan horse Dropper.Generic7.BHNT.dropper (AVG)
Windows 2000, Windows XP, Windows Server 2003
Threat Type: Trojan
Destructiveness: No
Encrypted:
In the wild: Yes
OVERVIEW
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
TECHNICAL DETAILS
449,480 bytes
EXE
Yes
10 May 2013
Arrival Details
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
Installation
This Trojan creates the following folders:
- %User Profile%\Microsoft\HTML Help
- %System%\Googlecom
(Note: %User Profile% is the current user's profile folder, which is usually C:\Documents and Settings\{user name} on Windows 2000, XP, and Server 2003, or C:\Users\{user name} on Windows Vista and 7.. %System% is the Windows system folder, which is usually C:\Windows\System32.)
Autostart Technique
This Trojan adds the following registry entries to enable its automatic execution at every system startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Run
HKLM = "%System%\Googlecom\%TEMP%.exe"
HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Run
HKCU = "%System%\Googlecom\%TEMP%.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Active Setup\Installed Components\{RF77747O-0SLV-UU57-83S3-F82I5VA3R35K}
StubPath = "%System%\Googlecom\%TEMP%.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Active Setup\Installed Components\{RF77747O-0SLV-UU57-83S3-F82I5VA3R35K}
StubPath = "%System%\Googlecom\%TEMP%.exe restart"
Other System Modifications
This Trojan deletes the following files:
- %User Profile%\Windows\DoDh.xtr
(Note: %User Profile% is the current user's profile folder, which is usually C:\Documents and Settings\{user name} on Windows 2000, XP, and Server 2003, or C:\Users\{user name} on Windows Vista and 7.)
It adds the following registry keys:
HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}
HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}\
Default MidiOut Device
HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}
HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}\
Default DirectSound Device
HKEY_CURRENT_USER\Software\Microsoft\
Multimedia\ActiveMovie\Filter Cache
HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Setup\UserOptions
HKEY_CURRENT_USER\SOFTWARE\XtremeRAT
HKEY_CURRENT_USER\SOFTWARE\DoDh
HKEY_LOCAL_MACHINE\Software\Microsoft\
Active Setup\Installed Components\{RF77747O-0SLV-UU57-83S3-F82I5VA3R35K}
HKEY_LOCAL_MACHINE\Software\Microsoft\
Windows\CurrentVersion\Uninstall\
MPlayer2
It adds the following registry entries:
HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}\
Default MidiOut Device
FriendlyName = "Default MidiOut Device"
HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}\
Default MidiOut Device
CLSID = "{07B65360-C445-11CE-AFDE-00AA006C14F4}"
HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}\
Default MidiOut Device
FilterData = "{random values}"
HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}\
Default MidiOut Device
MidiOutId = "ffffffff"
HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}\
Default DirectSound Device
FriendlyName = "Default DirectSound Device"
HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}\
Default DirectSound Device
CLSID = "{79376820-07D0-11CF-A24D-0020AFD79767}"
HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}\
Default DirectSound Device
FilterData = "{random values}"
HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}\
Default DirectSound Device
DSGuid = "{00000000-0000-0000-0000-000000000000}"
HKEY_CURRENT_USER\Software\Microsoft\
Multimedia\ActiveMovie\Filter Cache
0 = "{random values}"
HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences
MetadataRetrieval = "3"
HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences
SendUserGUID = "{random values}"
HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences
SilentAcquisition = "1"
HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences
UsageTracking = "0"
HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences
DisableMRU = "0"
HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Setup\UserOptions
DesktopShortcut = "no"
HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Setup\UserOptions
QuickLaunchShortcut = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wma
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wax
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-ms-wma
UserApprovedOwning = "yes"
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\User Trusted External Applications
%Program Files%\WINDOW~2\wmplayer.exe = "Yes"
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\User Trusted External Applications
%Program Files%\Windows Media Player\wmplayer.exe = "Yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-ms-wax
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wmv
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wvx
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-wmv
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-wvx
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.asf
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.asx
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.dvr-ms
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wpl
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wm
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wmx
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wmd
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wmz
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
application/x-mplayer2
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
application/vnd.ms-wpl
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-asf
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-asf-plugin
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-wm
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-wmx
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
application/x-ms-wmd
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
application/x-ms-wmz
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Protocols\
mms
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Protocols\
mmst
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Protocols\
mmsu
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Protocols\
msbd
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.cda
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Devices\
AudioCD
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mp3
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.m3u
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mpeg
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mpg
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mp3
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mpeg
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mpg
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mp3
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mpegurl
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mpegurl
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.avi
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/avi
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/msvideo
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-msvideo
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wav
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/wav
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-wav
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpeg
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpg
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpe
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.m1v
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mp2
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpv2
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mp2v
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpa
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/mpeg
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-mpeg
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-mpeg2a
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/mpg
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mid
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.midi
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.rmi
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mid
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/midi
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mid
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-midi
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
midi/mid
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.aif
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.aifc
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.aiff
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-aiff
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/aiff
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.au
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.snd
UserApprovedOwning = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/basic
UserApprovedOwning = "yes"
HKEY_CURRENT_USER\Software\XtremeRAT
Mutex = "DoDh"
HKEY_CURRENT_USER\Software\DoDh
ServerStarted = "07/05/2013 14:15:28"
HKEY_CURRENT_USER\Software\DoDh
ServerName = "%System%\Googlecom\%TEMP%.exe"
It modifies the following registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
MediaPlayer
MP2.SaveDir = "%Program Files%\Windows Media Player"
(Note: The default value data of the said registry entry is %Program Files%\Windows Media Player.)
HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences
AcceptedPrivacyStatement = "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayCDAudioOnArrival
Action = "@wmploc.dll,-6503"
(Note: The default value data of the said registry entry is @wmploc.dll,-6503.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayCDAudioOnArrival
Provider = "@wmploc.dll,-6502"
(Note: The default value data of the said registry entry is @wmploc.dll,-6502.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayCDAudioOnArrival
InvokeProgID = "WMP.AudioCD"
(Note: The default value data of the said registry entry is WMP.AudioCD.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayCDAudioOnArrival
InvokeVerb = "play"
(Note: The default value data of the said registry entry is play.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayCDAudioOnArrival
DefaultIcon = "%ProgramFiles%\Windows Media Player\wmplayer.exe,0"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSRipCDAudioOnArrival
Action = "@wmploc.dll,-6506"
(Note: The default value data of the said registry entry is @wmploc.dll,-6506.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSRipCDAudioOnArrival
Provider = "@wmploc.dll,-6502"
(Note: The default value data of the said registry entry is @wmploc.dll,-6502.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSRipCDAudioOnArrival
InvokeProgID = "WMP.RipCD"
(Note: The default value data of the said registry entry is WMP.RipCD.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSRipCDAudioOnArrival
InvokeVerb = "Rip"
(Note: The default value data of the said registry entry is Rip.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSRipCDAudioOnArrival
DefaultIcon = "%ProgramFiles%\Windows Media Player\wmplayer.exe,0"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMPBurnCDOnArrival
Action = "@wmploc.dll,-6505"
(Note: The default value data of the said registry entry is @wmploc.dll,-6505.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMPBurnCDOnArrival
Provider = "@wmploc.dll,-6502"
(Note: The default value data of the said registry entry is @wmploc.dll,-6502.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMPBurnCDOnArrival
InvokeProgID = "WMP.BurnCD"
(Note: The default value data of the said registry entry is WMP.BurnCD.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMPBurnCDOnArrival
InvokeVerb = "Burn"
(Note: The default value data of the said registry entry is Burn.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMPBurnCDOnArrival
DefaultIcon = "%ProgramFiles%\Windows Media Player\wmplayer.exe,0"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayDVDMovieOnArrival
Action = "@wmploc.dll,-6504"
(Note: The default value data of the said registry entry is @wmploc.dll,-6504.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayDVDMovieOnArrival
Provider = "@wmploc.dll,-6502"
(Note: The default value data of the said registry entry is @wmploc.dll,-6502.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayDVDMovieOnArrival
InvokeProgID = "WMP.DVD"
(Note: The default value data of the said registry entry is WMP.DVD.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayDVDMovieOnArrival
InvokeVerb = "play"
(Note: The default value data of the said registry entry is play.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayDVDMovieOnArrival
DefaultIcon = "%ProgramFiles%\Windows Media Player\wmplayer.exe,0"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMDMHandler
Action = "Transfer Files"
(Note: The default value data of the said registry entry is Transfer Files.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMDMHandler
CLSIDForCancel = "{91778246-9BE4-4713-A651-E833B853CC30}"
(Note: The default value data of the said registry entry is {91778246-9BE4-4713-A651-E833B853CC30}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMDMHandler
DefaultIcon = "%ProgramFiles%\Windows Media Player\wmplayer.exe,0"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMDMHandler
InitCmdLine = "%ProgramFiles%\Windows Media Player\wmplayer.exe /prefetch:3 /task:PortableDevice"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMDMHandler
ProgID = "Shell.HWEventHandlerShellExecute"
(Note: The default value data of the said registry entry is Shell.HWEventHandlerShellExecute.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMDMHandler
Provider = "@wmploc.dll,-6502"
(Note: The default value data of the said registry entry is @wmploc.dll,-6502.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wma\OpenWithProgIds
WMAFile = "[REG_NONE, size: 0 bytes]"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
wmafile
PreferExecuteOnMismatch = "1"
(Note: The default value data of the said registry entry is 1.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
wmafile
EditFlags = "{random values}"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
wmafile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
wmafile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wma
Content Type = "audio/x-ms-wma"
(Note: The default value data of the said registry entry is audio/x-ms-wma.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wma
MPlayer2.Set = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wma
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wax\OpenWithProgIds
WAXFile = "[REG_NONE, size: 0 bytes]"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WAXFile
PreferExecuteOnMismatch = "1"
(Note: The default value data of the said registry entry is 1.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WAXFile
EditFlags = "{random values}"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WAXFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WAXFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wax
Content Type = "audio/x-ms-wax"
(Note: The default value data of the said registry entry is audio/x-ms-wax.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wax
MPlayer2.Set = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wax
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/x-ms-wma = "wma"
(Note: The default value data of the said registry entry is wma.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE17 = "audio/x-ms-wma"
(Note: The default value data of the said registry entry is audio/x-ms-wma.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/x-ms-wma = "%Program Files%\WINDOW~2\wmplayer.exe"
(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-ms-wma
CLSID = "{cd3afa84-b84f-48f0-9393-7edc34128127}"
(Note: The default value data of the said registry entry is {cd3afa84-b84f-48f0-9393-7edc34128127}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-ms-wma
Extension = ".wma"
(Note: The default value data of the said registry entry is .wma.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-ms-wma
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/x-ms-wax = "wax"
(Note: The default value data of the said registry entry is wax.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE16 = "audio/x-ms-wax"
(Note: The default value data of the said registry entry is audio/x-ms-wax.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/x-ms-wax = "%Program Files%\WINDOW~2\wmplayer.exe"
(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-ms-wax
CLSID = "{cd3afa83-b84f-48f0-9393-7edc34128127}"
(Note: The default value data of the said registry entry is {cd3afa83-b84f-48f0-9393-7edc34128127}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-ms-wax
Extension = ".wax"
(Note: The default value data of the said registry entry is .wax.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-ms-wax
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wmv\OpenWithProgIds
WMVFile = "[REG_NONE, size: 0 bytes]"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMVFile
PreferExecuteOnMismatch = "1"
(Note: The default value data of the said registry entry is 1.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMVFile
EditFlags = "{random values}"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMVFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMVFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wmv
Content Type = "video/x-ms-wmv"
(Note: The default value data of the said registry entry is video/x-ms-wmv.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wmv
MPlayer2.Set = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wmv
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wvx\OpenWithProgIds
WVXFile = "[REG_NONE, size: 0 bytes]"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WVXFile
PreferExecuteOnMismatch = "1"
(Note: The default value data of the said registry entry is 1.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WVXFile
EditFlags = "{random values}"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WVXFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WVXFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wvx
Content Type = "video/x-ms-wvx"
(Note: The default value data of the said registry entry is video/x-ms-wvx.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wvx
MPlayer2.Set = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wvx
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/x-ms-wmv = "wmv"
(Note: The default value data of the said registry entry is wmv.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE29 = "video/x-ms-wmv"
(Note: The default value data of the said registry entry is video/x-ms-wmv.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/x-ms-wmv = "%Program Files%\WINDOW~2\wmplayer.exe"
(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-wmv
CLSID = "{cd3afa94-b84f-48f0-9393-7edc34128127}"
(Note: The default value data of the said registry entry is {cd3afa94-b84f-48f0-9393-7edc34128127}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-wmv
Extension = ".wmv"
(Note: The default value data of the said registry entry is .wmv.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-wmv
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/x-ms-wvx = "wvx"
(Note: The default value data of the said registry entry is wvx.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE31 = "video/x-ms-wvx"
(Note: The default value data of the said registry entry is video/x-ms-wvx.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/x-ms-wvx = "%Program Files%\WINDOW~2\wmplayer.exe"
(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-wvx
CLSID = "{cd3afa95-b84f-48f0-9393-7edc34128127}"
(Note: The default value data of the said registry entry is {cd3afa95-b84f-48f0-9393-7edc34128127}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-wvx
Extension = ".wvx"
(Note: The default value data of the said registry entry is .wvx.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-wvx
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.asf\OpenWithProgIds
ASFFile = "[REG_NONE, size: 0 bytes]"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
ASFFile
PreferExecuteOnMismatch = "1"
(Note: The default value data of the said registry entry is 1.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
ASFFile
EditFlags = "{random values}"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
ASFFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
ASFFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.asf
Content Type = "video/x-ms-asf"
(Note: The default value data of the said registry entry is video/x-ms-asf.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.asf
MPlayer2.Set = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.asf
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.asx\OpenWithProgIds
ASXFile = "[REG_NONE, size: 0 bytes]"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
ASXFile
PreferExecuteOnMismatch = "1"
(Note: The default value data of the said registry entry is 1.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
ASXFile
EditFlags = "{random values}"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
ASXFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
ASXFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.asx
Content Type = "video/x-ms-asf"
(Note: The default value data of the said registry entry is video/x-ms-asf.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.asx
MPlayer2.Set = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.asx
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.dvr-ms\OpenWithProgIds
WMP.DVR-MSFile = "[REG_NONE, size: 0 bytes]"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMP.DVR-MSFile
PreferExecuteOnMismatch = "1"
(Note: The default value data of the said registry entry is 1.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMP.DVR-MSFile
EditFlags = "{random values}"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMP.DVR-MSFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMP.DVR-MSFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.dvr-ms
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wpl\OpenWithProgIds
WPLFile = "[REG_NONE, size: 0 bytes]"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WPLFile
PreferExecuteOnMismatch = "1"
(Note: The default value data of the said registry entry is 1.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WPLFile
EditFlags = "{random values}"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WPLFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WPLFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wpl
Content Type = "application/vnd.ms-wpl"
(Note: The default value data of the said registry entry is application/vnd.ms-wpl.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wpl
MPlayer2.Set = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wpl
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wm\OpenWithProgIds
ASFFile = "[REG_NONE, size: 0 bytes]"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wm
Content Type = "video/x-ms-wm"
(Note: The default value data of the said registry entry is video/x-ms-wm.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wm
MPlayer2.Set = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wm
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wmx\OpenWithProgIds
ASXFile = "[REG_NONE, size: 0 bytes]"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wmx
Content Type = "video/x-ms-wmx"
(Note: The default value data of the said registry entry is video/x-ms-wmx.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wmx
MPlayer2.Set = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wmx
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wmd\OpenWithProgIds
WMDFile = "[REG_NONE, size: 0 bytes]"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMDFile
PreferExecuteOnMismatch = "1"
(Note: The default value data of the said registry entry is 1.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMDFile
EditFlags = "{random values}"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wmd
Content Type = "application/x-ms-wmd"
(Note: The default value data of the said registry entry is application/x-ms-wmd.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wmd
MPlayer2.Set = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wmd
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wmz\OpenWithProgIds
WMZFile = "[REG_NONE, size: 0 bytes]"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMZFile
PreferExecuteOnMismatch = "1"
(Note: The default value data of the said registry entry is 1.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMZFile
EditFlags = "{random values}"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wmz
Content Type = "application/x-ms-wmz"
(Note: The default value data of the said registry entry is application/x-ms-wmz.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wmz
MPlayer2.Set = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wmz
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
application/x-mplayer2
CLSID = "{cd3afa8f-b84f-48f0-9393-7edc34128127}"
(Note: The default value data of the said registry entry is {cd3afa8f-b84f-48f0-9393-7edc34128127}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
application/x-mplayer2
Extension = ".asx"
(Note: The default value data of the said registry entry is .asx.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
application/x-mplayer2
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
application/vnd.ms-wpl
CLSID = "{cd3afa95-b84f-48f0-9393-7edc34128127}"
(Note: The default value data of the said registry entry is {cd3afa95-b84f-48f0-9393-7edc34128127}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
application/vnd.ms-wpl
Extension = ".wpl"
(Note: The default value data of the said registry entry is .wpl.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
application/vnd.ms-wpl
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/x-ms-asf = "asf,asx,wm,wmx"
(Note: The default value data of the said registry entry is asf,asx,wm,wmx.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE26 = "video/x-ms-asf"
(Note: The default value data of the said registry entry is video/x-ms-asf.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/x-ms-asf = "%Program Files%\WINDOW~2\wmplayer.exe"
(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-asf
CLSID = "{cd3afa8f-b84f-48f0-9393-7edc34128127}"
(Note: The default value data of the said registry entry is {cd3afa8f-b84f-48f0-9393-7edc34128127}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-asf
Extension = ".asx"
(Note: The default value data of the said registry entry is .asx.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-asf
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/x-ms-asf-plugin = "asf,asx,wm,wmx"
(Note: The default value data of the said registry entry is asf,asx,wm,wmx.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE27 = "video/x-ms-asf-plugin"
(Note: The default value data of the said registry entry is video/x-ms-asf-plugin.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/x-ms-asf-plugin = "%Program Files%\WINDOW~2\wmplayer.exe"
(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-asf-plugin
CLSID = "{cd3afa8f-b84f-48f0-9393-7edc34128127}"
(Note: The default value data of the said registry entry is {cd3afa8f-b84f-48f0-9393-7edc34128127}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-asf-plugin
Extension = ".asx"
(Note: The default value data of the said registry entry is .asx.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-asf-plugin
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/x-ms-wm = "asf,asx,wm,wmx"
(Note: The default value data of the said registry entry is asf,asx,wm,wmx.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE28 = "video/x-ms-wm"
(Note: The default value data of the said registry entry is video/x-ms-wm.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/x-ms-wm = "%Program Files%\WINDOW~2\wmplayer.exe"
(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-wm
CLSID = "{cd3afa92-b84f-48f0-9393-7edc34128127}"
(Note: The default value data of the said registry entry is {cd3afa92-b84f-48f0-9393-7edc34128127}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-wm
Extension = ".wm"
(Note: The default value data of the said registry entry is .wm.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-wm
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/x-ms-wmx = "asf,asx,wm,wmx"
(Note: The default value data of the said registry entry is asf,asx,wm,wmx.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE30 = "video/x-ms-wmx"
(Note: The default value data of the said registry entry is video/x-ms-wmx.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/x-ms-wmx = "%Program Files%\WINDOW~2\wmplayer.exe"
(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-wmx
CLSID = "{cd3afa93-b84f-48f0-9393-7edc34128127}"
(Note: The default value data of the said registry entry is {cd3afa93-b84f-48f0-9393-7edc34128127}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-wmx
Extension = ".wmx"
(Note: The default value data of the said registry entry is .wmx.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-wmx
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
application/x-ms-wmd
CLSID = "{ee4da6a4-8c52-4a63-bbb8-97c93d7e1b6c}"
(Note: The default value data of the said registry entry is {ee4da6a4-8c52-4a63-bbb8-97c93d7e1b6c}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
application/x-ms-wmd
Extension = ".wmd"
(Note: The default value data of the said registry entry is .wmd.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
application/x-ms-wmd
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
application/x-ms-wmz
CLSID = "{cd3afa71-b84f-48f0-9393-7edc34128127}"
(Note: The default value data of the said registry entry is {cd3afa71-b84f-48f0-9393-7edc34128127}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
application/x-ms-wmz
Extension = ".wmz"
(Note: The default value data of the said registry entry is .wmz.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
application/x-ms-wmz
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MMS
Source Filter = "{6B6D0800-9ADA-11d0-A520-00A0D10129C0}"
(Note: The default value data of the said registry entry is {6B6D0800-9ADA-11d0-A520-00A0D10129C0}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Protocols\
mms
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MMST
Source Filter = "{6B6D0800-9ADA-11d0-A520-00A0D10129C0}"
(Note: The default value data of the said registry entry is {6B6D0800-9ADA-11d0-A520-00A0D10129C0}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Protocols\
mmst
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MMSU
Source Filter = "{6B6D0800-9ADA-11d0-A520-00A0D10129C0}"
(Note: The default value data of the said registry entry is {6B6D0800-9ADA-11d0-A520-00A0D10129C0}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Protocols\
mmsu
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MSBD
Source Filter = "{6B6D0800-9ADA-11d0-A520-00A0D10129C0}"
(Note: The default value data of the said registry entry is {6B6D0800-9ADA-11d0-A520-00A0D10129C0}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Protocols\
msbd
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.cda\OpenWithProgIds
CDAFile = "[REG_NONE, size: 0 bytes]"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
cdafile
PreferExecuteOnMismatch = "1"
(Note: The default value data of the said registry entry is 1.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
cdafile
EditFlags = "{random values}"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
cdafile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.cda
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AudioCD\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Devices\
AudioCD
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mp3\OpenWithProgIds
mp3file = "[REG_NONE, size: 0 bytes]"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
mp3file
PreferExecuteOnMismatch = "1"
(Note: The default value data of the said registry entry is 1.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
mp3file
EditFlags = "{random values}"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
mp3file\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
mp3file\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mp3
Content Type = "audio/mpeg"
(Note: The default value data of the said registry entry is audio/mpeg.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.mp3
MPlayer2.Set = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mp3
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.m3u\OpenWithProgIds
m3ufile = "[REG_NONE, size: 0 bytes]"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
m3ufile
PreferExecuteOnMismatch = "1"
(Note: The default value data of the said registry entry is 1.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
m3ufile
EditFlags = "{random values}"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
m3ufile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
m3ufile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.m3u
Content Type = "audio/x-mpegurl"
(Note: The default value data of the said registry entry is audio/x-mpegurl.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.m3u
MPlayer2.Set = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.m3u
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/mpeg = "mp3"
(Note: The default value data of the said registry entry is mp3.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE5 = "audio/mpeg"
(Note: The default value data of the said registry entry is application/rtf.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/mpeg = "%Program Files%\WINDOW~2\wmplayer.exe"
(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mpeg
CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"
(Note: The default value data of the said registry entry is {cd3afa76-b84f-48f0-9393-7edc34128127}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mpeg
Extension = ".mp3"
(Note: The default value data of the said registry entry is .mp3.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mpeg
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/mpg = "mp3"
(Note: The default value data of the said registry entry is mp3.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE7 = "audio/mpg"
(Note: The default value data of the said registry entry is application/pot.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/mpg = "%Program Files%\WINDOW~2\wmplayer.exe"
(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mpg
CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"
(Note: The default value data of the said registry entry is {cd3afa76-b84f-48f0-9393-7edc34128127}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mpg
Extension = ".mp3"
(Note: The default value data of the said registry entry is .mp3.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mpg
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/mp3 = "mp3"
(Note: The default value data of the said registry entry is mp3.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE4 = "audio/mp3"
(Note: The default value data of the said registry entry is application/msword.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/mp3 = "%Program Files%\WINDOW~2\wmplayer.exe"
(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mp3
CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"
(Note: The default value data of the said registry entry is {cd3afa76-b84f-48f0-9393-7edc34128127}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mp3
Extension = ".mp3"
(Note: The default value data of the said registry entry is .mp3.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mp3
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/x-mpeg = "mp3"
(Note: The default value data of the said registry entry is mp3.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE13 = "audio/x-mpeg"
(Note: The default value data of the said registry entry is audio/x-mpeg.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/x-mpeg = "%Program Files%\WINDOW~2\wmplayer.exe"
(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mpeg
CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"
(Note: The default value data of the said registry entry is {cd3afa76-b84f-48f0-9393-7edc34128127}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mpeg
Extension = ".mp3"
(Note: The default value data of the said registry entry is .mp3.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mpeg
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/x-mpg = "mp3"
(Note: The default value data of the said registry entry is mp3.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE15 = "audio/x-mpg"
(Note: The default value data of the said registry entry is audio/x-mpg.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/x-mpg = "%Program Files%\WINDOW~2\wmplayer.exe"
(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mpg
CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"
(Note: The default value data of the said registry entry is {cd3afa76-b84f-48f0-9393-7edc34128127}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mpg
Extension = ".mp3"
(Note: The default value data of the said registry entry is .mp3.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mpg
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/x-mp3 = "mp3"
(Note: The default value data of the said registry entry is mp3.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE12 = "audio/x-mp3"
(Note: The default value data of the said registry entry is audio/x-mp3.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/x-mp3 = "%Program Files%\WINDOW~2\wmplayer.exe"
(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mp3
CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"
(Note: The default value data of the said registry entry is {cd3afa76-b84f-48f0-9393-7edc34128127}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mp3
Extension = ".mp3"
(Note: The default value data of the said registry entry is .mp3.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mp3
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/mpegurl = "m3u"
(Note: The default value data of the said registry entry is m3u.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE6 = "audio/mpegurl"
(Note: The default value data of the said registry entry is application/ppt.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/mpegurl = "%Program Files%\WINDOW~2\wmplayer.exe"
(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mpegurl
CLSID = "{cd3afa78-b84f-48f0-9393-7edc34128127}"
(Note: The default value data of the said registry entry is {cd3afa78-b84f-48f0-9393-7edc34128127}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mpegurl
Extension = ".m3u"
(Note: The default value data of the said registry entry is .m3u.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mpegurl
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/x-mpegurl = "m3u"
(Note: The default value data of the said registry entry is m3u.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE14 = "audio/x-mpegurl"
(Note: The default value data of the said registry entry is audio/x-mpegurl.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/x-mpegurl = "%Program Files%\WINDOW~2\wmplayer.exe"
(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mpegurl
CLSID = "{cd3afa78-b84f-48f0-9393-7edc34128127}"
(Note: The default value data of the said registry entry is {cd3afa78-b84f-48f0-9393-7edc34128127}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mpegurl
Extension = ".m3u"
(Note: The default value data of the said registry entry is .m3u.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mpegurl
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.avi\OpenWithProgIds
avifile = "[REG_NONE, size: 0 bytes]"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AVIFile
PreferExecuteOnMismatch = "1"
(Note: The default value data of the said registry entry is 1.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AVIFile
EditFlags = "{random values}"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AVIFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AVIFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.avi
MPlayer2.Set = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.avi
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/avi = "avi"
(Note: The default value data of the said registry entry is avi.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE20 = "video/avi"
(Note: The default value data of the said registry entry is video/avi.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/avi = "%Program Files%\WINDOW~2\wmplayer.exe"
(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/avi
CLSID = "{cd3afa88-b84f-48f0-9393-7edc34128127}"
(Note: The default value data of the said registry entry is {cd3afa88-b84f-48f0-9393-7edc34128127}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/avi
Extension = ".avi"
(Note: The default value data of the said registry entry is .avi.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/avi
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/msvideo = "avi"
(Note: The default value data of the said registry entry is avi.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE23 = "video/msvideo"
(Note: The default value data of the said registry entry is video/msvideo.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/msvideo = "%Program Files%\WINDOW~2\wmplayer.exe"
(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/msvideo
CLSID = "{cd3afa88-b84f-48f0-9393-7edc34128127}"
(Note: The default value data of the said registry entry is {cd3afa88-b84f-48f0-9393-7edc34128127}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/msvideo
Extension = ".avi"
(Note: The default value data of the said registry entry is .avi.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/msvideo
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/x-msvideo = "avi"
(Note: The default value data of the said registry entry is avi.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE32 = "video/x-msvideo"
(Note: The default value data of the said registry entry is video/x-msvideo.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/x-msvideo = "%Program Files%\WINDOW~2\wmplayer.exe"
(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-msvideo
CLSID = "{cd3afa88-b84f-48f0-9393-7edc34128127}"
(Note: The default value data of the said registry entry is {cd3afa88-b84f-48f0-9393-7edc34128127}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-msvideo
Extension = ".avi"
(Note: The default value data of the said registry entry is .avi.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-msvideo
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wav\OpenWithProgIds
soundrec = "[REG_NONE, size: 0 bytes]"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SoundRec
PreferExecuteOnMismatch = "1"
(Note: The default value data of the said registry entry is 1.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SoundRec
EditFlags = "{random values}"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SoundRec\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SoundRec\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wav
MPlayer2.Set = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wav
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/wav = "wav"
(Note: The default value data of the said registry entry is wav.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE8 = "audio/wav"
(Note: The default value data of the said registry entry is application/pps.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/wav = "%Program Files%\WINDOW~2\wmplayer.exe"
(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/wav
CLSID = "{cd3afa7b-b84f-48f0-9393-7edc34128127}"
(Note: The default value data of the said registry entry is {cd3afa7b-b84f-48f0-9393-7edc34128127}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/wav
Extension = ".wav"
(Note: The default value data of the said registry entry is .wav.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/wav
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/x-wav = "wav"
(Note: The default value data of the said registry entry is wav.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE18 = "audio/x-wav"
(Note: The default value data of the said registry entry is audio/x-wav.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/x-wav = "%Program Files%\WINDOW~2\wmplayer.exe"
(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-wav
CLSID = "{cd3afa7b-b84f-48f0-9393-7edc34128127}"
(Note: The default value data of the said registry entry is {cd3afa7b-b84f-48f0-9393-7edc34128127}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-wav
Extension = ".wav"
(Note: The default value data of the said registry entry is .wav.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-wav
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpeg\OpenWithProgIds
mpegfile = "[REG_NONE, size: 0 bytes]"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
mpegfile
PreferExecuteOnMismatch = "1"
(Note: The default value data of the said registry entry is 1.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
mpegfile
EditFlags = "{random values}"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
mpegfile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
mpegfile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpeg
Content Type = "video/mpeg"
(Note: The default value data of the said registry entry is video/mpeg.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.mpeg
MPlayer2.Set = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpeg
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpg\OpenWithProgIds
mpegfile = "[REG_NONE, size: 0 bytes]"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpg
Content Type = "video/mpeg"
(Note: The default value data of the said registry entry is video/mpeg.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.mpg
MPlayer2.Set = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpg
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpe\OpenWithProgIds
mpegfile = "[REG_NONE, size: 0 bytes]"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpe
Content Type = "video/mpeg"
(Note: The default value data of the said registry entry is video/mpeg.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.mpe
MPlayer2.Set = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpe
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.m1v\OpenWithProgIds
mpegfile = "[REG_NONE, size: 0 bytes]"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.m1v
Content Type = "video/mpeg"
(Note: The default value data of the said registry entry is video/mpeg.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.m1v
MPlayer2.Set = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.m1v
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mp2\OpenWithProgIds
mpegfile = "[REG_NONE, size: 0 bytes]"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mp2
Content Type = "video/mpeg"
(Note: The default value data of the said registry entry is video/mpeg.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.mp2
MPlayer2.Set = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mp2
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpv2\OpenWithProgIds
mpegfile = "[REG_NONE, size: 0 bytes]"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpv2
Content Type = "video/mpeg"
(Note: The default value data of the said registry entry is video/mpeg.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.mpv2
MPlayer2.Set = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpv2
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mp2v\OpenWithProgIds
mpegfile = "[REG_NONE, size: 0 bytes]"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mp2v
Content Type = "video/mpeg"
(Note: The default value data of the said registry entry is video/mpeg.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.mp2v
MPlayer2.Set = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mp2v
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpa\OpenWithProgIds
mpegfile = "[REG_NONE, size: 0 bytes]"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpa
Content Type = "video/mpeg"
(Note: The default value data of the said registry entry is video/mpeg.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.mpa
MPlayer2.Set = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpa
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/mpeg = "mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v"
(Note: The default value data of the said registry entry is mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE21 = "video/mpeg"
(Note: The default value data of the said registry entry is video/mpeg.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/mpeg = "%Program Files%\WINDOW~2\wmplayer.exe"
(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/mpeg
CLSID = "{cd3afa89-b84f-48f0-9393-7edc34128127}"
(Note: The default value data of the said registry entry is {cd3afa89-b84f-48f0-9393-7edc34128127}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/mpeg
Extension = ".mpeg"
(Note: The default value data of the said registry entry is .mpeg.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/mpeg
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/x-mpeg = "mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v"
(Note: The default value data of the said registry entry is mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE24 = "video/x-mpeg"
(Note: The default value data of the said registry entry is video/x-mpeg.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/x-mpeg = "%Program Files%\WINDOW~2\wmplayer.exe"
(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-mpeg
CLSID = "{cd3afa89-b84f-48f0-9393-7edc34128127}"
(Note: The default value data of the said registry entry is {cd3afa89-b84f-48f0-9393-7edc34128127}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-mpeg
Extension = ".mpeg"
(Note: The default value data of the said registry entry is .mpeg.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-mpeg
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/x-mpeg2a = "mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v"
(Note: The default value data of the said registry entry is mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE25 = "video/x-mpeg2a"
(Note: The default value data of the said registry entry is video/x-mpeg2a.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/x-mpeg2a = "%Program Files%\WINDOW~2\wmplayer.exe"
(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-mpeg2a
CLSID = "{cd3afa89-b84f-48f0-9393-7edc34128127}"
(Note: The default value data of the said registry entry is {cd3afa89-b84f-48f0-9393-7edc34128127}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-mpeg2a
Extension = ".mpeg"
(Note: The default value data of the said registry entry is .mpeg.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-mpeg2a
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/mpg = "mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v"
(Note: The default value data of the said registry entry is mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE22 = "video/mpg"
(Note: The default value data of the said registry entry is video/mpg.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/mpg = "%Program Files%\WINDOW~2\wmplayer.exe"
(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/mpg
CLSID = "{cd3afa89-b84f-48f0-9393-7edc34128127}"
(Note: The default value data of the said registry entry is {cd3afa89-b84f-48f0-9393-7edc34128127}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/mpg
Extension = ".mpeg"
(Note: The default value data of the said registry entry is .mpeg.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/mpg
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mid\OpenWithProgIds
midfile = "[REG_NONE, size: 0 bytes]"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIDFile
PreferExecuteOnMismatch = "1"
(Note: The default value data of the said registry entry is 1.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIDFile
EditFlags = "{random values}"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIDFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIDFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mid
Content Type = "audio/mid"
(Note: The default value data of the said registry entry is audio/mid.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.mid
MPlayer2.Set = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mid
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.midi\OpenWithProgIds
midfile = "[REG_NONE, size: 0 bytes]"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.midi
Content Type = "audio/mid"
(Note: The default value data of the said registry entry is audio/mid.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.midi
MPlayer2.Set = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.midi
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.rmi\OpenWithProgIds
midfile = "[REG_NONE, size: 0 bytes]"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.rmi
Content Type = "audio/mid"
(Note: The default value data of the said registry entry is audio/mid.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.rmi
MPlayer2.Set = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.rmi
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/mid = "mid,midi,rmi"
(Note: The default value data of the said registry entry is mid,midi,rmi.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE2 = "audio/mid"
(Note: The default value data of the said registry entry is application/msexcel.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/mid = "%Program Files%\WINDOW~2\wmplayer.exe"
(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mid
CLSID = "{cd3afa74-b84f-48f0-9393-7edc34128127}"
(Note: The default value data of the said registry entry is {cd3afa74-b84f-48f0-9393-7edc34128127}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mid
Extension = ".mid"
(Note: The default value data of the said registry entry is .mid.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mid
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/midi = "mid,midi,rmi"
(Note: The default value data of the said registry entry is mid,midi,rmi.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE3 = "audio/midi"
(Note: The default value data of the said registry entry is application/xlc.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/midi = "%Program Files%\WINDOW~2\wmplayer.exe"
(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/midi
CLSID = "{cd3afa74-b84f-48f0-9393-7edc34128127}"
(Note: The default value data of the said registry entry is {cd3afa74-b84f-48f0-9393-7edc34128127}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/midi
Extension = ".mid"
(Note: The default value data of the said registry entry is .mid.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/midi
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/x-mid = "mid,midi,rmi"
(Note: The default value data of the said registry entry is mid,midi,rmi.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE10 = "audio/x-mid"
(Note: The default value data of the said registry entry is audio/x-mid.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/x-mid = "%Program Files%\WINDOW~2\wmplayer.exe"
(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mid
CLSID = "{cd3afa74-b84f-48f0-9393-7edc34128127}"
(Note: The default value data of the said registry entry is {cd3afa74-b84f-48f0-9393-7edc34128127}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mid
Extension = ".mid"
(Note: The default value data of the said registry entry is .mid.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mid
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/x-midi = "mid,midi,rmi"
(Note: The default value data of the said registry entry is mid,midi,rmi.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE11 = "audio/x-midi"
(Note: The default value data of the said registry entry is audio/x-midi.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/x-midi = "%Program Files%\WINDOW~2\wmplayer.exe"
(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-midi
CLSID = "{cd3afa74-b84f-48f0-9393-7edc34128127}"
(Note: The default value data of the said registry entry is {cd3afa74-b84f-48f0-9393-7edc34128127}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-midi
Extension = ".mid"
(Note: The default value data of the said registry entry is .mid.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-midi
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
midi/mid = "mid,midi,rmi"
(Note: The default value data of the said registry entry is mid,midi,rmi.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE19 = "midi/mid"
(Note: The default value data of the said registry entry is midi/mid.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
midi/mid = "%Program Files%\WINDOW~2\wmplayer.exe"
(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
midi/mid
CLSID = "{cd3afa74-b84f-48f0-9393-7edc34128127}"
(Note: The default value data of the said registry entry is {cd3afa74-b84f-48f0-9393-7edc34128127}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
midi/mid
Extension = ".mid"
(Note: The default value data of the said registry entry is .mid.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
midi/mid
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.aif\OpenWithProgIds
AIFFFile = "[REG_NONE, size: 0 bytes]"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AIFFFile
PreferExecuteOnMismatch = "1"
(Note: The default value data of the said registry entry is 1.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AIFFFile
EditFlags = "{random values}"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AIFFFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AIFFFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.aif
Content Type = "audio/aiff"
(Note: The default value data of the said registry entry is audio/aiff.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.aif
MPlayer2.Set = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.aif
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.aifc\OpenWithProgIds
AIFFFile = "[REG_NONE, size: 0 bytes]"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.aifc
Content Type = "audio/aiff"
(Note: The default value data of the said registry entry is audio/aiff.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.aifc
MPlayer2.Set = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.aifc
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.aiff\OpenWithProgIds
AIFFFile = "[REG_NONE, size: 0 bytes]"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.aiff
Content Type = "audio/aiff"
(Note: The default value data of the said registry entry is audio/aiff.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.aiff
MPlayer2.Set = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.aiff
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/x-aiff = "aif,aifc,aiff"
(Note: The default value data of the said registry entry is aif,aifc,aiff.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE9 = "audio/x-aiff"
(Note: The default value data of the said registry entry is audio/x-aiff.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/x-aiff = "%Program Files%\WINDOW~2\wmplayer.exe"
(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-aiff
CLSID = "{cd3afa72-b84f-48f0-9393-7edc34128127}"
(Note: The default value data of the said registry entry is {cd3afa72-b84f-48f0-9393-7edc34128127}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-aiff
Extension = ".aiff"
(Note: The default value data of the said registry entry is .aiff.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-aiff
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/aiff = "aif,aifc,aiff"
(Note: The default value data of the said registry entry is aif,aifc,aiff.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE0 = "audio/aiff"
(Note: The default value data of the said registry entry is audio/aiff.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/aiff = "%Program Files%\WINDOW~2\wmplayer.exe"
(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/aiff
CLSID = "{cd3afa72-b84f-48f0-9393-7edc34128127}"
(Note: The default value data of the said registry entry is {cd3afa72-b84f-48f0-9393-7edc34128127}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/aiff
Extension = ".aiff"
(Note: The default value data of the said registry entry is .aiff.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/aiff
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.au\OpenWithProgIds
AUFile = "[REG_NONE, size: 0 bytes]"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AUFile
PreferExecuteOnMismatch = "1"
(Note: The default value data of the said registry entry is 1.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AUFile
EditFlags = "{random values}"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AUFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AUFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.au
Content Type = "audio/basic"
(Note: The default value data of the said registry entry is audio/basic.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.au
MPlayer2.Set = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.au
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.snd\OpenWithProgIds
AUFile = "[REG_NONE, size: 0 bytes]"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.snd
Content Type = "audio/basic"
(Note: The default value data of the said registry entry is audio/basic.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.snd
MPlayer2.Set = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.snd
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/basic = "au,snd"
(Note: The default value data of the said registry entry is au,snd.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE1 = "audio/basic"
(Note: The default value data of the said registry entry is audio/basic.)
HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/basic = "%Program Files%\WINDOW~2\wmplayer.exe"
(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/basic
CLSID = "{cd3afa73-b84f-48f0-9393-7edc34128127}"
(Note: The default value data of the said registry entry is {cd3afa73-b84f-48f0-9393-7edc34128127}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/basic
Extension = ".au"
(Note: The default value data of the said registry entry is .au.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/basic
AlreadyRegistered = "yes"
(Note: The default value data of the said registry entry is yes.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
DirectDraw\MostRecentApplication
Name = "svchost.exe"
(Note: The default value data of the said registry entry is iexplore.exe.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
DirectDraw\MostRecentApplication
ID = "4117ed6"
(Note: The default value data of the said registry entry is 41107b81.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
DirectDraw\MostRecentApplication
Name = "explorer.exe"
(Note: The default value data of the said registry entry is iexplore.exe.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
DirectDraw\MostRecentApplication
ID = "4117ece"
(Note: The default value data of the said registry entry is 41107b81.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
DirectDraw\MostRecentApplication
Name = "iexplore.exe"
(Note: The default value data of the said registry entry is iexplore.exe.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
DirectDraw\MostRecentApplication
ID = "4117b81"
(Note: The default value data of the said registry entry is 41107b81.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}
Version = "9,0,0,3250"
(Note: The default value data of the said registry entry is 9,0,0,3250.)
HKEY_CURRENT_USER\Software\Microsoft\
Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}
Version = "9,0,0,3250"
(Note: The default value data of the said registry entry is 9,0,0,3250.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
MediaPlayer\PlayerUpgrade
PlayerVersion = "9,0,0,3250"
(Note: The default value data of the said registry entry is 9,0,0,3250.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Active Setup\Installed Components\{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
Version = "9,0,0,3250"
(Note: The default value data of the said registry entry is 9,0,0,3250.)
HKEY_CURRENT_USER\Software\Microsoft\
Active Setup\Installed Components\{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
Version = "9,0,0,3250"
(Note: The default value data of the said registry entry is 9,0,0,3250.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Active Setup\Installed Components\{44BBA848-CC51-11CF-AAFA-00AA00B6015C}
Version = "9,0,0,3250"
(Note: The default value data of the said registry entry is 9,0,0,3250.)
HKEY_CURRENT_USER\Software\Microsoft\
Active Setup\Installed Components\{44BBA848-CC51-11CF-AAFA-00AA00B6015C}
Version = "9,0,0,3250"
(Note: The default value data of the said registry entry is 9,0,0,3250.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Active Setup\Installed Components\{2179C5D3-EBFF-11CF-B6FD-00AA00B4E220}
Version = "9,0,0,3250"
(Note: The default value data of the said registry entry is 9,0,0,3250.)
HKEY_CURRENT_USER\Software\Microsoft\
Active Setup\Installed Components\{2179C5D3-EBFF-11CF-B6FD-00AA00B4E220}
Version = "9,0,0,3250"
(Note: The default value data of the said registry entry is 9,0,0,3250.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
MediaPlayer\Preferences
MyPlayLists = "%User Profile%\My Music\Sample Playlists"
(Note: The default value data of the said registry entry is %System Root%\Documents and Settings\All Users\Documents\My Music\Sample Playlists.)
It deletes the following registry keys:
HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\MUILanguages\
FileVersions
HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wma
HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\audio/x-ms-wma
HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wma
HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\audio/x-ms-wma
HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wax
HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\audio/x-ms-wax
HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wax
HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\audio/x-ms-wax
HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wmv
HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\video/x-ms-wmv
HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wmv
HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\video/x-ms-wmv
HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wvx
HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\video/x-ms-wvx
HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wvx
HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\video/x-ms-wvx
HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.asf
HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\video/x-ms-asf
HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.asf
HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\video/x-ms-asf
HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.asx
HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.asx
HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wpl
HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\application/vnd.ms-wpl
HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wpl
HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\application/vnd.ms-wpl
HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wm
HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\video/x-ms-wm
HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wm
HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\video/x-ms-wm
HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wmx
HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\video/x-ms-wmx
HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wmx
HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\video/x-ms-wmx
HKEY_CLASSES_ROOT\WMDFile\shellex\
ContextMenuHandlers\WMPPlayAsPlaylist
HKEY_CLASSES_ROOT\WMDFile\shellex\
ContextMenuHandlers\WMPAddToPlaylist
HKEY_CLASSES_ROOT\WMDFile\shellex\
ContextMenuHandlers\WMPBurnAudioCD
HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wmd
HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\application/x-ms-wmd
HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wmd
HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\application/x-ms-wmd
HKEY_CLASSES_ROOT\WMZFile\shellex\
ContextMenuHandlers\WMPPlayAsPlaylist
HKEY_CLASSES_ROOT\WMZFile\shellex\
ContextMenuHandlers\WMPAddToPlaylist
HKEY_CLASSES_ROOT\WMZFile\shellex\
ContextMenuHandlers\WMPBurnAudioCD
HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wmz
HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\application/x-ms-wmz
HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wmz
HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\application/x-ms-wmz
HKEY_CLASSES_ROOT\CDAFile\shellex\
ContextMenuHandlers\WMPPlayAsPlaylist
HKEY_CLASSES_ROOT\CDAFile\shellex\
ContextMenuHandlers\WMPAddToPlaylist
HKEY_CLASSES_ROOT\CDAFile\shellex\
ContextMenuHandlers\WMPBurnAudioCD
HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.mp3
HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\audio/mpeg
HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.mp3
HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\audio/mpeg
HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.m3u
HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\audio/x-mpegurl
HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.m3u
HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\audio/x-mpegurl
HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.avi
HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\video/avi
HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.avi
HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\video/avi
HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wav
HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\audio/wav
HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wav
HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\audio/wav
HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.mpeg
HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\video/mpeg
HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.mpeg
HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\video/mpeg
HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.mpg
HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.mpg
HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.mpe
HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.mpe
HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.m1v
HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.m1v
HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.mp2
HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.mp2
HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.mpv2
HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.mpv2
HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.mp2v
HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.mp2v
HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.mpa
HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.mpa
HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.mid
HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\audio/mid
HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.mid
HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\audio/mid
HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.midi
HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.midi
HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.rmi
HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.rmi
HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.au
HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\audio/basic
HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.au
HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\audio/basic
HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.snd
HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.snd
HKEY_LOCAL_MACHINE\Software\Microsoft\
Windows\CurrentVersion\Uninstall\
WMP7
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\MPlayer2\Groups\
Video\QT
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\MPlayer2\Extensions\
.mov
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\MPlayer2\Extensions\
.qt
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\MPlayer2\MIME Types\
video/quicktime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.ivf
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ivf
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Groups\
Video\IVF
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
MediaPlayer\Control\Advanced Options\
Windows Media
Dropping Routine
This Trojan drops the following files:
- %User Temp%\sfx.ini
- www.youtube.com.exe
- www.youtube.com.wmv
- %User Profile%\HTML Help\hh.dat
- %System%\Googlecom\%TEMP%.exe
This report is generated via an automated analysis system.
SOLUTION
9.300
Step 1
Before doing any scans, Windows XP, Windows Vista, and Windows 7 users must disable System Restore to allow full scanning of their computers.
Step 2
Restart in Safe Mode
Step 3
Delete this registry key
Important: Editing the Windows Registry incorrectly can lead to irreversible system malfunction. Please do this step only if you know how or you can ask assistance from your system administrator. Else, check this Microsoft article first before modifying your computer's registry.
- In HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum
- {4EFE2452-168A-11D1-BC76-00C04FB9453B}
- In HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}
- Default MidiOut Device
- In HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum
- {E0F158E1-CB04-11D0-BD4E-00A0C911CE86}
- In HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}
- Default DirectSound Device
- In HKEY_CURRENT_USER\Software\Microsoft\Multimedia\ActiveMovie
- Filter Cache
- In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Setup
- UserOptions
- In HKEY_CURRENT_USER\SOFTWARE
- XtremeRAT
- In HKEY_CURRENT_USER\SOFTWARE
- DoDh
- In HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components
- {RF77747O-0SLV-UU57-83S3-F82I5VA3R35K}
- In HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall
- MPlayer2
Step 4
Delete this registry value
Important: Editing the Windows Registry incorrectly can lead to irreversible system malfunction. Please do this step only if you know how or you can ask assistance from your system administrator. Else, check this Microsoft article first before modifying your computer's registry.
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
- HKLM = "%System%\Googlecom\%TEMP%.exe"
- In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
- HKCU = "%System%\Googlecom\%TEMP%.exe"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{RF77747O-0SLV-UU57-83S3-F82I5VA3R35K}
- StubPath = "%System%\Googlecom\%TEMP%.exe"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{RF77747O-0SLV-UU57-83S3-F82I5VA3R35K}
- StubPath = "%System%\Googlecom\%TEMP%.exe restart"
- In HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}\Default MidiOut Device
- FriendlyName = "Default MidiOut Device"
- In HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}\Default MidiOut Device
- CLSID = "{07B65360-C445-11CE-AFDE-00AA006C14F4}"
- In HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}\Default MidiOut Device
- FilterData = "{random values}"
- In HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}\Default MidiOut Device
- MidiOutId = "ffffffff"
- In HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}\Default DirectSound Device
- FriendlyName = "Default DirectSound Device"
- In HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}\Default DirectSound Device
- CLSID = "{79376820-07D0-11CF-A24D-0020AFD79767}"
- In HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}\Default DirectSound Device
- FilterData = "{random values}"
- In HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}\Default DirectSound Device
- DSGuid = "{00000000-0000-0000-0000-000000000000}"
- In HKEY_CURRENT_USER\Software\Microsoft\Multimedia\ActiveMovie\Filter Cache
- 0 = "{random values}"
- In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
- MetadataRetrieval = "3"
- In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
- SendUserGUID = "{random values}"
- In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
- SilentAcquisition = "1"
- In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
- UsageTracking = "0"
- In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
- DisableMRU = "0"
- In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Setup\UserOptions
- DesktopShortcut = "no"
- In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Setup\UserOptions
- QuickLaunchShortcut = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wma
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wax
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-ms-wma
- UserApprovedOwning = "yes"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\User Trusted External Applications
- %Program Files%\WINDOW~2\wmplayer.exe = "Yes"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\User Trusted External Applications
- %Program Files%\Windows Media Player\wmplayer.exe = "Yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-ms-wax
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wmv
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wvx
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-wmv
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-wvx
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.asf
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.asx
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.dvr-ms
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wpl
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wm
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wmx
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wmd
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wmz
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\application/x-mplayer2
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\application/vnd.ms-wpl
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-asf
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-asf-plugin
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-wm
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-wmx
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\application/x-ms-wmd
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\application/x-ms-wmz
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Protocols\mms
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Protocols\mmst
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Protocols\mmsu
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Protocols\msbd
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.cda
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Devices\AudioCD
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mp3
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.m3u
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/mpeg
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/mpg
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/mp3
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-mpeg
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-mpg
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-mp3
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/mpegurl
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-mpegurl
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.avi
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/avi
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/msvideo
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-msvideo
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wav
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/wav
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-wav
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mpeg
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mpg
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mpe
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.m1v
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mp2
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mpv2
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mp2v
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mpa
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/mpeg
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-mpeg
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-mpeg2a
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/mpg
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mid
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.midi
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.rmi
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/mid
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/midi
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-mid
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-midi
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\midi/mid
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.aif
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.aifc
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.aiff
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-aiff
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/aiff
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.au
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.snd
- UserApprovedOwning = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/basic
- UserApprovedOwning = "yes"
- In HKEY_CURRENT_USER\Software\XtremeRAT
- Mutex = "DoDh"
- In HKEY_CURRENT_USER\Software\DoDh
- ServerStarted = "07/05/2013 14:15:28"
- In HKEY_CURRENT_USER\Software\DoDh
- ServerName = "%System%\Googlecom\%TEMP%.exe"
Step 5
Restore these modified registry values
Important:Editing the Windows Registry incorrectly can lead to irreversible system malfunction. Please do this only if you know how to or you can seek your system administrator's help. You may also check out this Microsoft article first before modifying your computer's registry.
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MediaPlayer
- From: MP2.SaveDir = "%Program Files%\Windows Media Player"
To: MP2.SaveDir = ""%Program Files%\Windows Media Player""
- From: MP2.SaveDir = "%Program Files%\Windows Media Player"
- In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
- AcceptedPrivacyStatement = "1"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSPlayCDAudioOnArrival
- From: Action = "@wmploc.dll,-6503"
To: Action = ""@wmploc.dll,-6503""
- From: Action = "@wmploc.dll,-6503"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSPlayCDAudioOnArrival
- From: Provider = "@wmploc.dll,-6502"
To: Provider = ""@wmploc.dll,-6502""
- From: Provider = "@wmploc.dll,-6502"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSPlayCDAudioOnArrival
- From: InvokeProgID = "WMP.AudioCD"
To: InvokeProgID = ""WMP.AudioCD""
- From: InvokeProgID = "WMP.AudioCD"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSPlayCDAudioOnArrival
- From: InvokeVerb = "play"
To: InvokeVerb = ""play""
- From: InvokeVerb = "play"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSPlayCDAudioOnArrival
- From: DefaultIcon = "%ProgramFiles%\Windows Media Player\wmplayer.exe,0"
To: DefaultIcon = ""{random values}""
- From: DefaultIcon = "%ProgramFiles%\Windows Media Player\wmplayer.exe,0"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSRipCDAudioOnArrival
- From: Action = "@wmploc.dll,-6506"
To: Action = ""@wmploc.dll,-6506""
- From: Action = "@wmploc.dll,-6506"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSRipCDAudioOnArrival
- From: Provider = "@wmploc.dll,-6502"
To: Provider = ""@wmploc.dll,-6502""
- From: Provider = "@wmploc.dll,-6502"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSRipCDAudioOnArrival
- From: InvokeProgID = "WMP.RipCD"
To: InvokeProgID = ""WMP.RipCD""
- From: InvokeProgID = "WMP.RipCD"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSRipCDAudioOnArrival
- From: InvokeVerb = "Rip"
To: InvokeVerb = ""Rip""
- From: InvokeVerb = "Rip"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSRipCDAudioOnArrival
- From: DefaultIcon = "%ProgramFiles%\Windows Media Player\wmplayer.exe,0"
To: DefaultIcon = ""{random values}""
- From: DefaultIcon = "%ProgramFiles%\Windows Media Player\wmplayer.exe,0"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSWMPBurnCDOnArrival
- From: Action = "@wmploc.dll,-6505"
To: Action = ""@wmploc.dll,-6505""
- From: Action = "@wmploc.dll,-6505"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSWMPBurnCDOnArrival
- From: Provider = "@wmploc.dll,-6502"
To: Provider = ""@wmploc.dll,-6502""
- From: Provider = "@wmploc.dll,-6502"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSWMPBurnCDOnArrival
- From: InvokeProgID = "WMP.BurnCD"
To: InvokeProgID = ""WMP.BurnCD""
- From: InvokeProgID = "WMP.BurnCD"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSWMPBurnCDOnArrival
- From: InvokeVerb = "Burn"
To: InvokeVerb = ""Burn""
- From: InvokeVerb = "Burn"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSWMPBurnCDOnArrival
- From: DefaultIcon = "%ProgramFiles%\Windows Media Player\wmplayer.exe,0"
To: DefaultIcon = ""{random values}""
- From: DefaultIcon = "%ProgramFiles%\Windows Media Player\wmplayer.exe,0"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSPlayDVDMovieOnArrival
- From: Action = "@wmploc.dll,-6504"
To: Action = ""@wmploc.dll,-6504""
- From: Action = "@wmploc.dll,-6504"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSPlayDVDMovieOnArrival
- From: Provider = "@wmploc.dll,-6502"
To: Provider = ""@wmploc.dll,-6502""
- From: Provider = "@wmploc.dll,-6502"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSPlayDVDMovieOnArrival
- From: InvokeProgID = "WMP.DVD"
To: InvokeProgID = ""WMP.DVD""
- From: InvokeProgID = "WMP.DVD"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSPlayDVDMovieOnArrival
- From: InvokeVerb = "play"
To: InvokeVerb = ""play""
- From: InvokeVerb = "play"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSPlayDVDMovieOnArrival
- From: DefaultIcon = "%ProgramFiles%\Windows Media Player\wmplayer.exe,0"
To: DefaultIcon = ""{random values}""
- From: DefaultIcon = "%ProgramFiles%\Windows Media Player\wmplayer.exe,0"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSWMDMHandler
- From: Action = "Transfer Files"
To: Action = ""Transfer Files""
- From: Action = "Transfer Files"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSWMDMHandler
- From: CLSIDForCancel = "{91778246-9BE4-4713-A651-E833B853CC30}"
To: CLSIDForCancel = ""{91778246-9BE4-4713-A651-E833B853CC30}""
- From: CLSIDForCancel = "{91778246-9BE4-4713-A651-E833B853CC30}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSWMDMHandler
- From: DefaultIcon = "%ProgramFiles%\Windows Media Player\wmplayer.exe,0"
To: DefaultIcon = ""{random values}""
- From: DefaultIcon = "%ProgramFiles%\Windows Media Player\wmplayer.exe,0"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSWMDMHandler
- From: InitCmdLine = "%ProgramFiles%\Windows Media Player\wmplayer.exe /prefetch:3 /task:PortableDevice"
To: InitCmdLine = ""{random values}""
- From: InitCmdLine = "%ProgramFiles%\Windows Media Player\wmplayer.exe /prefetch:3 /task:PortableDevice"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSWMDMHandler
- From: ProgID = "Shell.HWEventHandlerShellExecute"
To: ProgID = ""Shell.HWEventHandlerShellExecute""
- From: ProgID = "Shell.HWEventHandlerShellExecute"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSWMDMHandler
- From: Provider = "@wmploc.dll,-6502"
To: Provider = ""@wmploc.dll,-6502""
- From: Provider = "@wmploc.dll,-6502"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wma\OpenWithProgIds
- From: WMAFile = "[REG_NONE, size: 0 bytes]"
To: WMAFile = ""{random values}""
- From: WMAFile = "[REG_NONE, size: 0 bytes]"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wmafile
- From: PreferExecuteOnMismatch = "1"
To: PreferExecuteOnMismatch = ""1""
- From: PreferExecuteOnMismatch = "1"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wmafile
- From: EditFlags = "{random values}"
To: EditFlags = ""{random values}""
- From: EditFlags = "{random values}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wmafile\shell\open\DropTarget
- From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
To: CLSID = ""{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}""
- From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wmafile\shell\play
- From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
To: MUIVerb = ""{random values}""
- From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wma
- From: Content Type = "audio/x-ms-wma"
To: Content Type = ""audio/x-ms-wma""
- From: Content Type = "audio/x-ms-wma"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.wma
- From: MPlayer2.Set = "yes"
To: MPlayer2.Set = ""yes""
- From: MPlayer2.Set = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wma
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wax\OpenWithProgIds
- From: WAXFile = "[REG_NONE, size: 0 bytes]"
To: WAXFile = ""{random values}""
- From: WAXFile = "[REG_NONE, size: 0 bytes]"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WAXFile
- From: PreferExecuteOnMismatch = "1"
To: PreferExecuteOnMismatch = ""1""
- From: PreferExecuteOnMismatch = "1"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WAXFile
- From: EditFlags = "{random values}"
To: EditFlags = ""{random values}""
- From: EditFlags = "{random values}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WAXFile\shell\open\DropTarget
- From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
To: CLSID = ""{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}""
- From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WAXFile\shell\play
- From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
To: MUIVerb = ""{random values}""
- From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wax
- From: Content Type = "audio/x-ms-wax"
To: Content Type = ""audio/x-ms-wax""
- From: Content Type = "audio/x-ms-wax"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.wax
- From: MPlayer2.Set = "yes"
To: MPlayer2.Set = ""yes""
- From: MPlayer2.Set = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wax
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
- From: audio/x-ms-wma = "wma"
To: audio/x-ms-wma = ""wma""
- From: audio/x-ms-wma = "wma"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: TYPE17 = "audio/x-ms-wma"
To: TYPE17 = ""audio/x-ms-wma""
- From: TYPE17 = "audio/x-ms-wma"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: audio/x-ms-wma = "%Program Files%\WINDOW~2\wmplayer.exe"
To: audio/x-ms-wma = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
- From: audio/x-ms-wma = "%Program Files%\WINDOW~2\wmplayer.exe"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-ms-wma
- From: CLSID = "{cd3afa84-b84f-48f0-9393-7edc34128127}"
To: CLSID = ""{cd3afa84-b84f-48f0-9393-7edc34128127}""
- From: CLSID = "{cd3afa84-b84f-48f0-9393-7edc34128127}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-ms-wma
- From: Extension = ".wma"
To: Extension = "".wma""
- From: Extension = ".wma"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-ms-wma
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
- From: audio/x-ms-wax = "wax"
To: audio/x-ms-wax = ""wax""
- From: audio/x-ms-wax = "wax"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: TYPE16 = "audio/x-ms-wax"
To: TYPE16 = ""audio/x-ms-wax""
- From: TYPE16 = "audio/x-ms-wax"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: audio/x-ms-wax = "%Program Files%\WINDOW~2\wmplayer.exe"
To: audio/x-ms-wax = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
- From: audio/x-ms-wax = "%Program Files%\WINDOW~2\wmplayer.exe"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-ms-wax
- From: CLSID = "{cd3afa83-b84f-48f0-9393-7edc34128127}"
To: CLSID = ""{cd3afa83-b84f-48f0-9393-7edc34128127}""
- From: CLSID = "{cd3afa83-b84f-48f0-9393-7edc34128127}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-ms-wax
- From: Extension = ".wax"
To: Extension = "".wax""
- From: Extension = ".wax"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-ms-wax
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wmv\OpenWithProgIds
- From: WMVFile = "[REG_NONE, size: 0 bytes]"
To: WMVFile = ""{random values}""
- From: WMVFile = "[REG_NONE, size: 0 bytes]"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WMVFile
- From: PreferExecuteOnMismatch = "1"
To: PreferExecuteOnMismatch = ""1""
- From: PreferExecuteOnMismatch = "1"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WMVFile
- From: EditFlags = "{random values}"
To: EditFlags = ""{random values}""
- From: EditFlags = "{random values}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WMVFile\shell\open\DropTarget
- From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
To: CLSID = ""{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}""
- From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WMVFile\shell\play
- From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
To: MUIVerb = ""{random values}""
- From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wmv
- From: Content Type = "video/x-ms-wmv"
To: Content Type = ""video/x-ms-wmv""
- From: Content Type = "video/x-ms-wmv"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.wmv
- From: MPlayer2.Set = "yes"
To: MPlayer2.Set = ""yes""
- From: MPlayer2.Set = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wmv
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wvx\OpenWithProgIds
- From: WVXFile = "[REG_NONE, size: 0 bytes]"
To: WVXFile = ""{random values}""
- From: WVXFile = "[REG_NONE, size: 0 bytes]"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WVXFile
- From: PreferExecuteOnMismatch = "1"
To: PreferExecuteOnMismatch = ""1""
- From: PreferExecuteOnMismatch = "1"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WVXFile
- From: EditFlags = "{random values}"
To: EditFlags = ""{random values}""
- From: EditFlags = "{random values}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WVXFile\shell\open\DropTarget
- From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
To: CLSID = ""{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}""
- From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WVXFile\shell\play
- From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
To: MUIVerb = ""{random values}""
- From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wvx
- From: Content Type = "video/x-ms-wvx"
To: Content Type = ""video/x-ms-wvx""
- From: Content Type = "video/x-ms-wvx"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.wvx
- From: MPlayer2.Set = "yes"
To: MPlayer2.Set = ""yes""
- From: MPlayer2.Set = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wvx
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
- From: video/x-ms-wmv = "wmv"
To: video/x-ms-wmv = ""wmv""
- From: video/x-ms-wmv = "wmv"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: TYPE29 = "video/x-ms-wmv"
To: TYPE29 = ""video/x-ms-wmv""
- From: TYPE29 = "video/x-ms-wmv"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: video/x-ms-wmv = "%Program Files%\WINDOW~2\wmplayer.exe"
To: video/x-ms-wmv = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
- From: video/x-ms-wmv = "%Program Files%\WINDOW~2\wmplayer.exe"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-ms-wmv
- From: CLSID = "{cd3afa94-b84f-48f0-9393-7edc34128127}"
To: CLSID = ""{cd3afa94-b84f-48f0-9393-7edc34128127}""
- From: CLSID = "{cd3afa94-b84f-48f0-9393-7edc34128127}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-ms-wmv
- From: Extension = ".wmv"
To: Extension = "".wmv""
- From: Extension = ".wmv"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-wmv
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
- From: video/x-ms-wvx = "wvx"
To: video/x-ms-wvx = ""wvx""
- From: video/x-ms-wvx = "wvx"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: TYPE31 = "video/x-ms-wvx"
To: TYPE31 = ""video/x-ms-wvx""
- From: TYPE31 = "video/x-ms-wvx"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: video/x-ms-wvx = "%Program Files%\WINDOW~2\wmplayer.exe"
To: video/x-ms-wvx = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
- From: video/x-ms-wvx = "%Program Files%\WINDOW~2\wmplayer.exe"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-ms-wvx
- From: CLSID = "{cd3afa95-b84f-48f0-9393-7edc34128127}"
To: CLSID = ""{cd3afa95-b84f-48f0-9393-7edc34128127}""
- From: CLSID = "{cd3afa95-b84f-48f0-9393-7edc34128127}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-ms-wvx
- From: Extension = ".wvx"
To: Extension = "".wvx""
- From: Extension = ".wvx"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-wvx
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.asf\OpenWithProgIds
- From: ASFFile = "[REG_NONE, size: 0 bytes]"
To: ASFFile = ""{random values}""
- From: ASFFile = "[REG_NONE, size: 0 bytes]"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ASFFile
- From: PreferExecuteOnMismatch = "1"
To: PreferExecuteOnMismatch = ""1""
- From: PreferExecuteOnMismatch = "1"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ASFFile
- From: EditFlags = "{random values}"
To: EditFlags = ""{random values}""
- From: EditFlags = "{random values}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ASFFile\shell\open\DropTarget
- From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
To: CLSID = ""{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}""
- From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ASFFile\shell\play
- From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
To: MUIVerb = ""{random values}""
- From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.asf
- From: Content Type = "video/x-ms-asf"
To: Content Type = ""video/x-ms-asf""
- From: Content Type = "video/x-ms-asf"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.asf
- From: MPlayer2.Set = "yes"
To: MPlayer2.Set = ""yes""
- From: MPlayer2.Set = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.asf
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.asx\OpenWithProgIds
- From: ASXFile = "[REG_NONE, size: 0 bytes]"
To: ASXFile = ""{random values}""
- From: ASXFile = "[REG_NONE, size: 0 bytes]"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ASXFile
- From: PreferExecuteOnMismatch = "1"
To: PreferExecuteOnMismatch = ""1""
- From: PreferExecuteOnMismatch = "1"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ASXFile
- From: EditFlags = "{random values}"
To: EditFlags = ""{random values}""
- From: EditFlags = "{random values}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ASXFile\shell\open\DropTarget
- From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
To: CLSID = ""{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}""
- From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ASXFile\shell\play
- From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
To: MUIVerb = ""{random values}""
- From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.asx
- From: Content Type = "video/x-ms-asf"
To: Content Type = ""video/x-ms-asf""
- From: Content Type = "video/x-ms-asf"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.asx
- From: MPlayer2.Set = "yes"
To: MPlayer2.Set = ""yes""
- From: MPlayer2.Set = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.asx
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.dvr-ms\OpenWithProgIds
- From: WMP.DVR-MSFile = "[REG_NONE, size: 0 bytes]"
To: WMP.DVR-MSFile = ""{random values}""
- From: WMP.DVR-MSFile = "[REG_NONE, size: 0 bytes]"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WMP.DVR-MSFile
- From: PreferExecuteOnMismatch = "1"
To: PreferExecuteOnMismatch = ""1""
- From: PreferExecuteOnMismatch = "1"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WMP.DVR-MSFile
- From: EditFlags = "{random values}"
To: EditFlags = ""{random values}""
- From: EditFlags = "{random values}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WMP.DVR-MSFile\shell\open\DropTarget
- From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
To: CLSID = ""{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}""
- From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WMP.DVR-MSFile\shell\play
- From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
To: MUIVerb = ""{random values}""
- From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.dvr-ms
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wpl\OpenWithProgIds
- From: WPLFile = "[REG_NONE, size: 0 bytes]"
To: WPLFile = ""{random values}""
- From: WPLFile = "[REG_NONE, size: 0 bytes]"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WPLFile
- From: PreferExecuteOnMismatch = "1"
To: PreferExecuteOnMismatch = ""1""
- From: PreferExecuteOnMismatch = "1"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WPLFile
- From: EditFlags = "{random values}"
To: EditFlags = ""{random values}""
- From: EditFlags = "{random values}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WPLFile\shell\open\DropTarget
- From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
To: CLSID = ""{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}""
- From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WPLFile\shell\play
- From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
To: MUIVerb = ""{random values}""
- From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wpl
- From: Content Type = "application/vnd.ms-wpl"
To: Content Type = ""application/vnd.ms-wpl""
- From: Content Type = "application/vnd.ms-wpl"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.wpl
- From: MPlayer2.Set = "yes"
To: MPlayer2.Set = ""yes""
- From: MPlayer2.Set = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wpl
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wm\OpenWithProgIds
- From: ASFFile = "[REG_NONE, size: 0 bytes]"
To: ASFFile = ""{random values}""
- From: ASFFile = "[REG_NONE, size: 0 bytes]"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wm
- From: Content Type = "video/x-ms-wm"
To: Content Type = ""video/x-ms-wm""
- From: Content Type = "video/x-ms-wm"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.wm
- From: MPlayer2.Set = "yes"
To: MPlayer2.Set = ""yes""
- From: MPlayer2.Set = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wm
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wmx\OpenWithProgIds
- From: ASXFile = "[REG_NONE, size: 0 bytes]"
To: ASXFile = ""{random values}""
- From: ASXFile = "[REG_NONE, size: 0 bytes]"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wmx
- From: Content Type = "video/x-ms-wmx"
To: Content Type = ""video/x-ms-wmx""
- From: Content Type = "video/x-ms-wmx"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.wmx
- From: MPlayer2.Set = "yes"
To: MPlayer2.Set = ""yes""
- From: MPlayer2.Set = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wmx
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wmd\OpenWithProgIds
- From: WMDFile = "[REG_NONE, size: 0 bytes]"
To: WMDFile = ""{random values}""
- From: WMDFile = "[REG_NONE, size: 0 bytes]"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WMDFile
- From: PreferExecuteOnMismatch = "1"
To: PreferExecuteOnMismatch = ""1""
- From: PreferExecuteOnMismatch = "1"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WMDFile
- From: EditFlags = "{random values}"
To: EditFlags = ""{random values}""
- From: EditFlags = "{random values}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wmd
- From: Content Type = "application/x-ms-wmd"
To: Content Type = ""application/x-ms-wmd""
- From: Content Type = "application/x-ms-wmd"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.wmd
- From: MPlayer2.Set = "yes"
To: MPlayer2.Set = ""yes""
- From: MPlayer2.Set = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wmd
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wmz\OpenWithProgIds
- From: WMZFile = "[REG_NONE, size: 0 bytes]"
To: WMZFile = ""{random values}""
- From: WMZFile = "[REG_NONE, size: 0 bytes]"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WMZFile
- From: PreferExecuteOnMismatch = "1"
To: PreferExecuteOnMismatch = ""1""
- From: PreferExecuteOnMismatch = "1"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WMZFile
- From: EditFlags = "{random values}"
To: EditFlags = ""{random values}""
- From: EditFlags = "{random values}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wmz
- From: Content Type = "application/x-ms-wmz"
To: Content Type = ""application/x-ms-wmz""
- From: Content Type = "application/x-ms-wmz"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.wmz
- From: MPlayer2.Set = "yes"
To: MPlayer2.Set = ""yes""
- From: MPlayer2.Set = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wmz
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/x-mplayer2
- From: CLSID = "{cd3afa8f-b84f-48f0-9393-7edc34128127}"
To: CLSID = ""{cd3afa8f-b84f-48f0-9393-7edc34128127}""
- From: CLSID = "{cd3afa8f-b84f-48f0-9393-7edc34128127}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/x-mplayer2
- From: Extension = ".asx"
To: Extension = "".asx""
- From: Extension = ".asx"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\application/x-mplayer2
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/vnd.ms-wpl
- From: CLSID = "{cd3afa95-b84f-48f0-9393-7edc34128127}"
To: CLSID = ""{cd3afa95-b84f-48f0-9393-7edc34128127}""
- From: CLSID = "{cd3afa95-b84f-48f0-9393-7edc34128127}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/vnd.ms-wpl
- From: Extension = ".wpl"
To: Extension = "".wpl""
- From: Extension = ".wpl"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\application/vnd.ms-wpl
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
- From: video/x-ms-asf = "asf,asx,wm,wmx"
To: video/x-ms-asf = ""asf,asx,wm,wmx""
- From: video/x-ms-asf = "asf,asx,wm,wmx"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: TYPE26 = "video/x-ms-asf"
To: TYPE26 = ""video/x-ms-asf""
- From: TYPE26 = "video/x-ms-asf"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: video/x-ms-asf = "%Program Files%\WINDOW~2\wmplayer.exe"
To: video/x-ms-asf = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
- From: video/x-ms-asf = "%Program Files%\WINDOW~2\wmplayer.exe"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-ms-asf
- From: CLSID = "{cd3afa8f-b84f-48f0-9393-7edc34128127}"
To: CLSID = ""{cd3afa8f-b84f-48f0-9393-7edc34128127}""
- From: CLSID = "{cd3afa8f-b84f-48f0-9393-7edc34128127}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-ms-asf
- From: Extension = ".asx"
To: Extension = "".asx""
- From: Extension = ".asx"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-asf
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
- From: video/x-ms-asf-plugin = "asf,asx,wm,wmx"
To: video/x-ms-asf-plugin = ""asf,asx,wm,wmx""
- From: video/x-ms-asf-plugin = "asf,asx,wm,wmx"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: TYPE27 = "video/x-ms-asf-plugin"
To: TYPE27 = ""video/x-ms-asf-plugin""
- From: TYPE27 = "video/x-ms-asf-plugin"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: video/x-ms-asf-plugin = "%Program Files%\WINDOW~2\wmplayer.exe"
To: video/x-ms-asf-plugin = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
- From: video/x-ms-asf-plugin = "%Program Files%\WINDOW~2\wmplayer.exe"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-ms-asf-plugin
- From: CLSID = "{cd3afa8f-b84f-48f0-9393-7edc34128127}"
To: CLSID = ""{cd3afa8f-b84f-48f0-9393-7edc34128127}""
- From: CLSID = "{cd3afa8f-b84f-48f0-9393-7edc34128127}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-ms-asf-plugin
- From: Extension = ".asx"
To: Extension = "".asx""
- From: Extension = ".asx"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-asf-plugin
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
- From: video/x-ms-wm = "asf,asx,wm,wmx"
To: video/x-ms-wm = ""asf,asx,wm,wmx""
- From: video/x-ms-wm = "asf,asx,wm,wmx"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: TYPE28 = "video/x-ms-wm"
To: TYPE28 = ""video/x-ms-wm""
- From: TYPE28 = "video/x-ms-wm"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: video/x-ms-wm = "%Program Files%\WINDOW~2\wmplayer.exe"
To: video/x-ms-wm = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
- From: video/x-ms-wm = "%Program Files%\WINDOW~2\wmplayer.exe"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-ms-wm
- From: CLSID = "{cd3afa92-b84f-48f0-9393-7edc34128127}"
To: CLSID = ""{cd3afa92-b84f-48f0-9393-7edc34128127}""
- From: CLSID = "{cd3afa92-b84f-48f0-9393-7edc34128127}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-ms-wm
- From: Extension = ".wm"
To: Extension = "".wm""
- From: Extension = ".wm"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-wm
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
- From: video/x-ms-wmx = "asf,asx,wm,wmx"
To: video/x-ms-wmx = ""asf,asx,wm,wmx""
- From: video/x-ms-wmx = "asf,asx,wm,wmx"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: TYPE30 = "video/x-ms-wmx"
To: TYPE30 = ""video/x-ms-wmx""
- From: TYPE30 = "video/x-ms-wmx"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: video/x-ms-wmx = "%Program Files%\WINDOW~2\wmplayer.exe"
To: video/x-ms-wmx = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
- From: video/x-ms-wmx = "%Program Files%\WINDOW~2\wmplayer.exe"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-ms-wmx
- From: CLSID = "{cd3afa93-b84f-48f0-9393-7edc34128127}"
To: CLSID = ""{cd3afa93-b84f-48f0-9393-7edc34128127}""
- From: CLSID = "{cd3afa93-b84f-48f0-9393-7edc34128127}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-ms-wmx
- From: Extension = ".wmx"
To: Extension = "".wmx""
- From: Extension = ".wmx"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-wmx
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/x-ms-wmd
- From: CLSID = "{ee4da6a4-8c52-4a63-bbb8-97c93d7e1b6c}"
To: CLSID = ""{ee4da6a4-8c52-4a63-bbb8-97c93d7e1b6c}""
- From: CLSID = "{ee4da6a4-8c52-4a63-bbb8-97c93d7e1b6c}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/x-ms-wmd
- From: Extension = ".wmd"
To: Extension = "".wmd""
- From: Extension = ".wmd"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\application/x-ms-wmd
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/x-ms-wmz
- From: CLSID = "{cd3afa71-b84f-48f0-9393-7edc34128127}"
To: CLSID = ""{cd3afa71-b84f-48f0-9393-7edc34128127}""
- From: CLSID = "{cd3afa71-b84f-48f0-9393-7edc34128127}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/x-ms-wmz
- From: Extension = ".wmz"
To: Extension = "".wmz""
- From: Extension = ".wmz"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\application/x-ms-wmz
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MMS
- From: Source Filter = "{6B6D0800-9ADA-11d0-A520-00A0D10129C0}"
To: Source Filter = ""{6B6D0800-9ADA-11d0-A520-00A0D10129C0}""
- From: Source Filter = "{6B6D0800-9ADA-11d0-A520-00A0D10129C0}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Protocols\mms
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MMST
- From: Source Filter = "{6B6D0800-9ADA-11d0-A520-00A0D10129C0}"
To: Source Filter = ""{6B6D0800-9ADA-11d0-A520-00A0D10129C0}""
- From: Source Filter = "{6B6D0800-9ADA-11d0-A520-00A0D10129C0}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Protocols\mmst
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MMSU
- From: Source Filter = "{6B6D0800-9ADA-11d0-A520-00A0D10129C0}"
To: Source Filter = ""{6B6D0800-9ADA-11d0-A520-00A0D10129C0}""
- From: Source Filter = "{6B6D0800-9ADA-11d0-A520-00A0D10129C0}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Protocols\mmsu
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSBD
- From: Source Filter = "{6B6D0800-9ADA-11d0-A520-00A0D10129C0}"
To: Source Filter = ""{6B6D0800-9ADA-11d0-A520-00A0D10129C0}""
- From: Source Filter = "{6B6D0800-9ADA-11d0-A520-00A0D10129C0}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Protocols\msbd
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.cda\OpenWithProgIds
- From: CDAFile = "[REG_NONE, size: 0 bytes]"
To: CDAFile = ""{random values}""
- From: CDAFile = "[REG_NONE, size: 0 bytes]"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\cdafile
- From: PreferExecuteOnMismatch = "1"
To: PreferExecuteOnMismatch = ""1""
- From: PreferExecuteOnMismatch = "1"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\cdafile
- From: EditFlags = "{random values}"
To: EditFlags = ""{random values}""
- From: EditFlags = "{random values}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\cdafile\shell\play
- From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
To: MUIVerb = ""{random values}""
- From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.cda
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AudioCD\shell\play
- From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
To: MUIVerb = ""{random values}""
- From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Devices\AudioCD
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mp3\OpenWithProgIds
- From: mp3file = "[REG_NONE, size: 0 bytes]"
To: mp3file = ""{random values}""
- From: mp3file = "[REG_NONE, size: 0 bytes]"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\mp3file
- From: PreferExecuteOnMismatch = "1"
To: PreferExecuteOnMismatch = ""1""
- From: PreferExecuteOnMismatch = "1"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\mp3file
- From: EditFlags = "{random values}"
To: EditFlags = ""{random values}""
- From: EditFlags = "{random values}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\mp3file\shell\open\DropTarget
- From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
To: CLSID = ""{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}""
- From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\mp3file\shell\play
- From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
To: MUIVerb = ""{random values}""
- From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mp3
- From: Content Type = "audio/mpeg"
To: Content Type = ""audio/mpeg""
- From: Content Type = "audio/mpeg"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.mp3
- From: MPlayer2.Set = "yes"
To: MPlayer2.Set = ""yes""
- From: MPlayer2.Set = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mp3
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.m3u\OpenWithProgIds
- From: m3ufile = "[REG_NONE, size: 0 bytes]"
To: m3ufile = ""{random values}""
- From: m3ufile = "[REG_NONE, size: 0 bytes]"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\m3ufile
- From: PreferExecuteOnMismatch = "1"
To: PreferExecuteOnMismatch = ""1""
- From: PreferExecuteOnMismatch = "1"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\m3ufile
- From: EditFlags = "{random values}"
To: EditFlags = ""{random values}""
- From: EditFlags = "{random values}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\m3ufile\shell\open\DropTarget
- From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
To: CLSID = ""{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}""
- From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\m3ufile\shell\play
- From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
To: MUIVerb = ""{random values}""
- From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.m3u
- From: Content Type = "audio/x-mpegurl"
To: Content Type = ""audio/x-mpegurl""
- From: Content Type = "audio/x-mpegurl"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.m3u
- From: MPlayer2.Set = "yes"
To: MPlayer2.Set = ""yes""
- From: MPlayer2.Set = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.m3u
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
- From: audio/mpeg = "mp3"
To: audio/mpeg = ""mp3""
- From: audio/mpeg = "mp3"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: TYPE5 = "audio/mpeg"
To: TYPE5 = ""application/rtf""
- From: TYPE5 = "audio/mpeg"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: audio/mpeg = "%Program Files%\WINDOW~2\wmplayer.exe"
To: audio/mpeg = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
- From: audio/mpeg = "%Program Files%\WINDOW~2\wmplayer.exe"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/mpeg
- From: CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"
To: CLSID = ""{cd3afa76-b84f-48f0-9393-7edc34128127}""
- From: CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/mpeg
- From: Extension = ".mp3"
To: Extension = "".mp3""
- From: Extension = ".mp3"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/mpeg
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
- From: audio/mpg = "mp3"
To: audio/mpg = ""mp3""
- From: audio/mpg = "mp3"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: TYPE7 = "audio/mpg"
To: TYPE7 = ""application/pot""
- From: TYPE7 = "audio/mpg"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: audio/mpg = "%Program Files%\WINDOW~2\wmplayer.exe"
To: audio/mpg = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
- From: audio/mpg = "%Program Files%\WINDOW~2\wmplayer.exe"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/mpg
- From: CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"
To: CLSID = ""{cd3afa76-b84f-48f0-9393-7edc34128127}""
- From: CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/mpg
- From: Extension = ".mp3"
To: Extension = "".mp3""
- From: Extension = ".mp3"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/mpg
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
- From: audio/mp3 = "mp3"
To: audio/mp3 = ""mp3""
- From: audio/mp3 = "mp3"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: TYPE4 = "audio/mp3"
To: TYPE4 = ""application/msword""
- From: TYPE4 = "audio/mp3"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: audio/mp3 = "%Program Files%\WINDOW~2\wmplayer.exe"
To: audio/mp3 = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
- From: audio/mp3 = "%Program Files%\WINDOW~2\wmplayer.exe"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/mp3
- From: CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"
To: CLSID = ""{cd3afa76-b84f-48f0-9393-7edc34128127}""
- From: CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/mp3
- From: Extension = ".mp3"
To: Extension = "".mp3""
- From: Extension = ".mp3"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/mp3
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
- From: audio/x-mpeg = "mp3"
To: audio/x-mpeg = ""mp3""
- From: audio/x-mpeg = "mp3"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: TYPE13 = "audio/x-mpeg"
To: TYPE13 = ""audio/x-mpeg""
- From: TYPE13 = "audio/x-mpeg"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: audio/x-mpeg = "%Program Files%\WINDOW~2\wmplayer.exe"
To: audio/x-mpeg = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
- From: audio/x-mpeg = "%Program Files%\WINDOW~2\wmplayer.exe"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-mpeg
- From: CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"
To: CLSID = ""{cd3afa76-b84f-48f0-9393-7edc34128127}""
- From: CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-mpeg
- From: Extension = ".mp3"
To: Extension = "".mp3""
- From: Extension = ".mp3"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-mpeg
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
- From: audio/x-mpg = "mp3"
To: audio/x-mpg = ""mp3""
- From: audio/x-mpg = "mp3"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: TYPE15 = "audio/x-mpg"
To: TYPE15 = ""audio/x-mpg""
- From: TYPE15 = "audio/x-mpg"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: audio/x-mpg = "%Program Files%\WINDOW~2\wmplayer.exe"
To: audio/x-mpg = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
- From: audio/x-mpg = "%Program Files%\WINDOW~2\wmplayer.exe"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-mpg
- From: CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"
To: CLSID = ""{cd3afa76-b84f-48f0-9393-7edc34128127}""
- From: CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-mpg
- From: Extension = ".mp3"
To: Extension = "".mp3""
- From: Extension = ".mp3"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-mpg
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
- From: audio/x-mp3 = "mp3"
To: audio/x-mp3 = ""mp3""
- From: audio/x-mp3 = "mp3"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: TYPE12 = "audio/x-mp3"
To: TYPE12 = ""audio/x-mp3""
- From: TYPE12 = "audio/x-mp3"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: audio/x-mp3 = "%Program Files%\WINDOW~2\wmplayer.exe"
To: audio/x-mp3 = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
- From: audio/x-mp3 = "%Program Files%\WINDOW~2\wmplayer.exe"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-mp3
- From: CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"
To: CLSID = ""{cd3afa76-b84f-48f0-9393-7edc34128127}""
- From: CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-mp3
- From: Extension = ".mp3"
To: Extension = "".mp3""
- From: Extension = ".mp3"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-mp3
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
- From: audio/mpegurl = "m3u"
To: audio/mpegurl = ""m3u""
- From: audio/mpegurl = "m3u"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: TYPE6 = "audio/mpegurl"
To: TYPE6 = ""application/ppt""
- From: TYPE6 = "audio/mpegurl"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: audio/mpegurl = "%Program Files%\WINDOW~2\wmplayer.exe"
To: audio/mpegurl = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
- From: audio/mpegurl = "%Program Files%\WINDOW~2\wmplayer.exe"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/mpegurl
- From: CLSID = "{cd3afa78-b84f-48f0-9393-7edc34128127}"
To: CLSID = ""{cd3afa78-b84f-48f0-9393-7edc34128127}""
- From: CLSID = "{cd3afa78-b84f-48f0-9393-7edc34128127}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/mpegurl
- From: Extension = ".m3u"
To: Extension = "".m3u""
- From: Extension = ".m3u"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/mpegurl
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
- From: audio/x-mpegurl = "m3u"
To: audio/x-mpegurl = ""m3u""
- From: audio/x-mpegurl = "m3u"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: TYPE14 = "audio/x-mpegurl"
To: TYPE14 = ""audio/x-mpegurl""
- From: TYPE14 = "audio/x-mpegurl"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: audio/x-mpegurl = "%Program Files%\WINDOW~2\wmplayer.exe"
To: audio/x-mpegurl = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
- From: audio/x-mpegurl = "%Program Files%\WINDOW~2\wmplayer.exe"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-mpegurl
- From: CLSID = "{cd3afa78-b84f-48f0-9393-7edc34128127}"
To: CLSID = ""{cd3afa78-b84f-48f0-9393-7edc34128127}""
- From: CLSID = "{cd3afa78-b84f-48f0-9393-7edc34128127}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-mpegurl
- From: Extension = ".m3u"
To: Extension = "".m3u""
- From: Extension = ".m3u"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-mpegurl
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.avi\OpenWithProgIds
- From: avifile = "[REG_NONE, size: 0 bytes]"
To: avifile = ""{random values}""
- From: avifile = "[REG_NONE, size: 0 bytes]"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AVIFile
- From: PreferExecuteOnMismatch = "1"
To: PreferExecuteOnMismatch = ""1""
- From: PreferExecuteOnMismatch = "1"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AVIFile
- From: EditFlags = "{random values}"
To: EditFlags = ""{random values}""
- From: EditFlags = "{random values}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AVIFile\shell\open\DropTarget
- From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
To: CLSID = ""{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}""
- From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AVIFile\shell\play
- From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
To: MUIVerb = ""{random values}""
- From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.avi
- From: MPlayer2.Set = "yes"
To: MPlayer2.Set = ""yes""
- From: MPlayer2.Set = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.avi
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
- From: video/avi = "avi"
To: video/avi = ""avi""
- From: video/avi = "avi"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: TYPE20 = "video/avi"
To: TYPE20 = ""video/avi""
- From: TYPE20 = "video/avi"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: video/avi = "%Program Files%\WINDOW~2\wmplayer.exe"
To: video/avi = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
- From: video/avi = "%Program Files%\WINDOW~2\wmplayer.exe"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/avi
- From: CLSID = "{cd3afa88-b84f-48f0-9393-7edc34128127}"
To: CLSID = ""{cd3afa88-b84f-48f0-9393-7edc34128127}""
- From: CLSID = "{cd3afa88-b84f-48f0-9393-7edc34128127}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/avi
- From: Extension = ".avi"
To: Extension = "".avi""
- From: Extension = ".avi"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/avi
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
- From: video/msvideo = "avi"
To: video/msvideo = ""avi""
- From: video/msvideo = "avi"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: TYPE23 = "video/msvideo"
To: TYPE23 = ""video/msvideo""
- From: TYPE23 = "video/msvideo"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: video/msvideo = "%Program Files%\WINDOW~2\wmplayer.exe"
To: video/msvideo = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
- From: video/msvideo = "%Program Files%\WINDOW~2\wmplayer.exe"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/msvideo
- From: CLSID = "{cd3afa88-b84f-48f0-9393-7edc34128127}"
To: CLSID = ""{cd3afa88-b84f-48f0-9393-7edc34128127}""
- From: CLSID = "{cd3afa88-b84f-48f0-9393-7edc34128127}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/msvideo
- From: Extension = ".avi"
To: Extension = "".avi""
- From: Extension = ".avi"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/msvideo
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
- From: video/x-msvideo = "avi"
To: video/x-msvideo = ""avi""
- From: video/x-msvideo = "avi"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: TYPE32 = "video/x-msvideo"
To: TYPE32 = ""video/x-msvideo""
- From: TYPE32 = "video/x-msvideo"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: video/x-msvideo = "%Program Files%\WINDOW~2\wmplayer.exe"
To: video/x-msvideo = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
- From: video/x-msvideo = "%Program Files%\WINDOW~2\wmplayer.exe"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-msvideo
- From: CLSID = "{cd3afa88-b84f-48f0-9393-7edc34128127}"
To: CLSID = ""{cd3afa88-b84f-48f0-9393-7edc34128127}""
- From: CLSID = "{cd3afa88-b84f-48f0-9393-7edc34128127}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-msvideo
- From: Extension = ".avi"
To: Extension = "".avi""
- From: Extension = ".avi"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-msvideo
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wav\OpenWithProgIds
- From: soundrec = "[REG_NONE, size: 0 bytes]"
To: soundrec = ""{random values}""
- From: soundrec = "[REG_NONE, size: 0 bytes]"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SoundRec
- From: PreferExecuteOnMismatch = "1"
To: PreferExecuteOnMismatch = ""1""
- From: PreferExecuteOnMismatch = "1"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SoundRec
- From: EditFlags = "{random values}"
To: EditFlags = ""{random values}""
- From: EditFlags = "{random values}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SoundRec\shell\open\DropTarget
- From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
To: CLSID = ""{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}""
- From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SoundRec\shell\play
- From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
To: MUIVerb = ""{random values}""
- From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.wav
- From: MPlayer2.Set = "yes"
To: MPlayer2.Set = ""yes""
- From: MPlayer2.Set = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wav
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
- From: audio/wav = "wav"
To: audio/wav = ""wav""
- From: audio/wav = "wav"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: TYPE8 = "audio/wav"
To: TYPE8 = ""application/pps""
- From: TYPE8 = "audio/wav"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: audio/wav = "%Program Files%\WINDOW~2\wmplayer.exe"
To: audio/wav = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
- From: audio/wav = "%Program Files%\WINDOW~2\wmplayer.exe"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/wav
- From: CLSID = "{cd3afa7b-b84f-48f0-9393-7edc34128127}"
To: CLSID = ""{cd3afa7b-b84f-48f0-9393-7edc34128127}""
- From: CLSID = "{cd3afa7b-b84f-48f0-9393-7edc34128127}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/wav
- From: Extension = ".wav"
To: Extension = "".wav""
- From: Extension = ".wav"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/wav
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
- From: audio/x-wav = "wav"
To: audio/x-wav = ""wav""
- From: audio/x-wav = "wav"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: TYPE18 = "audio/x-wav"
To: TYPE18 = ""audio/x-wav""
- From: TYPE18 = "audio/x-wav"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: audio/x-wav = "%Program Files%\WINDOW~2\wmplayer.exe"
To: audio/x-wav = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
- From: audio/x-wav = "%Program Files%\WINDOW~2\wmplayer.exe"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-wav
- From: CLSID = "{cd3afa7b-b84f-48f0-9393-7edc34128127}"
To: CLSID = ""{cd3afa7b-b84f-48f0-9393-7edc34128127}""
- From: CLSID = "{cd3afa7b-b84f-48f0-9393-7edc34128127}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-wav
- From: Extension = ".wav"
To: Extension = "".wav""
- From: Extension = ".wav"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-wav
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mpeg\OpenWithProgIds
- From: mpegfile = "[REG_NONE, size: 0 bytes]"
To: mpegfile = ""{random values}""
- From: mpegfile = "[REG_NONE, size: 0 bytes]"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\mpegfile
- From: PreferExecuteOnMismatch = "1"
To: PreferExecuteOnMismatch = ""1""
- From: PreferExecuteOnMismatch = "1"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\mpegfile
- From: EditFlags = "{random values}"
To: EditFlags = ""{random values}""
- From: EditFlags = "{random values}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\mpegfile\shell\open\DropTarget
- From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
To: CLSID = ""{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}""
- From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\mpegfile\shell\play
- From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
To: MUIVerb = ""{random values}""
- From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mpeg
- From: Content Type = "video/mpeg"
To: Content Type = ""video/mpeg""
- From: Content Type = "video/mpeg"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.mpeg
- From: MPlayer2.Set = "yes"
To: MPlayer2.Set = ""yes""
- From: MPlayer2.Set = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mpeg
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mpg\OpenWithProgIds
- From: mpegfile = "[REG_NONE, size: 0 bytes]"
To: mpegfile = ""{random values}""
- From: mpegfile = "[REG_NONE, size: 0 bytes]"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mpg
- From: Content Type = "video/mpeg"
To: Content Type = ""video/mpeg""
- From: Content Type = "video/mpeg"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.mpg
- From: MPlayer2.Set = "yes"
To: MPlayer2.Set = ""yes""
- From: MPlayer2.Set = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mpg
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mpe\OpenWithProgIds
- From: mpegfile = "[REG_NONE, size: 0 bytes]"
To: mpegfile = ""{random values}""
- From: mpegfile = "[REG_NONE, size: 0 bytes]"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mpe
- From: Content Type = "video/mpeg"
To: Content Type = ""video/mpeg""
- From: Content Type = "video/mpeg"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.mpe
- From: MPlayer2.Set = "yes"
To: MPlayer2.Set = ""yes""
- From: MPlayer2.Set = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mpe
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.m1v\OpenWithProgIds
- From: mpegfile = "[REG_NONE, size: 0 bytes]"
To: mpegfile = ""{random values}""
- From: mpegfile = "[REG_NONE, size: 0 bytes]"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.m1v
- From: Content Type = "video/mpeg"
To: Content Type = ""video/mpeg""
- From: Content Type = "video/mpeg"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.m1v
- From: MPlayer2.Set = "yes"
To: MPlayer2.Set = ""yes""
- From: MPlayer2.Set = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.m1v
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mp2\OpenWithProgIds
- From: mpegfile = "[REG_NONE, size: 0 bytes]"
To: mpegfile = ""{random values}""
- From: mpegfile = "[REG_NONE, size: 0 bytes]"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mp2
- From: Content Type = "video/mpeg"
To: Content Type = ""video/mpeg""
- From: Content Type = "video/mpeg"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.mp2
- From: MPlayer2.Set = "yes"
To: MPlayer2.Set = ""yes""
- From: MPlayer2.Set = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mp2
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mpv2\OpenWithProgIds
- From: mpegfile = "[REG_NONE, size: 0 bytes]"
To: mpegfile = ""{random values}""
- From: mpegfile = "[REG_NONE, size: 0 bytes]"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mpv2
- From: Content Type = "video/mpeg"
To: Content Type = ""video/mpeg""
- From: Content Type = "video/mpeg"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.mpv2
- From: MPlayer2.Set = "yes"
To: MPlayer2.Set = ""yes""
- From: MPlayer2.Set = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mpv2
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mp2v\OpenWithProgIds
- From: mpegfile = "[REG_NONE, size: 0 bytes]"
To: mpegfile = ""{random values}""
- From: mpegfile = "[REG_NONE, size: 0 bytes]"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mp2v
- From: Content Type = "video/mpeg"
To: Content Type = ""video/mpeg""
- From: Content Type = "video/mpeg"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.mp2v
- From: MPlayer2.Set = "yes"
To: MPlayer2.Set = ""yes""
- From: MPlayer2.Set = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mp2v
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mpa\OpenWithProgIds
- From: mpegfile = "[REG_NONE, size: 0 bytes]"
To: mpegfile = ""{random values}""
- From: mpegfile = "[REG_NONE, size: 0 bytes]"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mpa
- From: Content Type = "video/mpeg"
To: Content Type = ""video/mpeg""
- From: Content Type = "video/mpeg"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.mpa
- From: MPlayer2.Set = "yes"
To: MPlayer2.Set = ""yes""
- From: MPlayer2.Set = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mpa
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
- From: video/mpeg = "mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v"
To: video/mpeg = ""mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v""
- From: video/mpeg = "mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: TYPE21 = "video/mpeg"
To: TYPE21 = ""video/mpeg""
- From: TYPE21 = "video/mpeg"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: video/mpeg = "%Program Files%\WINDOW~2\wmplayer.exe"
To: video/mpeg = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
- From: video/mpeg = "%Program Files%\WINDOW~2\wmplayer.exe"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/mpeg
- From: CLSID = "{cd3afa89-b84f-48f0-9393-7edc34128127}"
To: CLSID = ""{cd3afa89-b84f-48f0-9393-7edc34128127}""
- From: CLSID = "{cd3afa89-b84f-48f0-9393-7edc34128127}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/mpeg
- From: Extension = ".mpeg"
To: Extension = "".mpeg""
- From: Extension = ".mpeg"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/mpeg
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
- From: video/x-mpeg = "mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v"
To: video/x-mpeg = ""mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v""
- From: video/x-mpeg = "mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: TYPE24 = "video/x-mpeg"
To: TYPE24 = ""video/x-mpeg""
- From: TYPE24 = "video/x-mpeg"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: video/x-mpeg = "%Program Files%\WINDOW~2\wmplayer.exe"
To: video/x-mpeg = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
- From: video/x-mpeg = "%Program Files%\WINDOW~2\wmplayer.exe"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-mpeg
- From: CLSID = "{cd3afa89-b84f-48f0-9393-7edc34128127}"
To: CLSID = ""{cd3afa89-b84f-48f0-9393-7edc34128127}""
- From: CLSID = "{cd3afa89-b84f-48f0-9393-7edc34128127}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-mpeg
- From: Extension = ".mpeg"
To: Extension = "".mpeg""
- From: Extension = ".mpeg"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-mpeg
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
- From: video/x-mpeg2a = "mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v"
To: video/x-mpeg2a = ""mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v""
- From: video/x-mpeg2a = "mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: TYPE25 = "video/x-mpeg2a"
To: TYPE25 = ""video/x-mpeg2a""
- From: TYPE25 = "video/x-mpeg2a"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: video/x-mpeg2a = "%Program Files%\WINDOW~2\wmplayer.exe"
To: video/x-mpeg2a = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
- From: video/x-mpeg2a = "%Program Files%\WINDOW~2\wmplayer.exe"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-mpeg2a
- From: CLSID = "{cd3afa89-b84f-48f0-9393-7edc34128127}"
To: CLSID = ""{cd3afa89-b84f-48f0-9393-7edc34128127}""
- From: CLSID = "{cd3afa89-b84f-48f0-9393-7edc34128127}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-mpeg2a
- From: Extension = ".mpeg"
To: Extension = "".mpeg""
- From: Extension = ".mpeg"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-mpeg2a
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
- From: video/mpg = "mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v"
To: video/mpg = ""mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v""
- From: video/mpg = "mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: TYPE22 = "video/mpg"
To: TYPE22 = ""video/mpg""
- From: TYPE22 = "video/mpg"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: video/mpg = "%Program Files%\WINDOW~2\wmplayer.exe"
To: video/mpg = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
- From: video/mpg = "%Program Files%\WINDOW~2\wmplayer.exe"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/mpg
- From: CLSID = "{cd3afa89-b84f-48f0-9393-7edc34128127}"
To: CLSID = ""{cd3afa89-b84f-48f0-9393-7edc34128127}""
- From: CLSID = "{cd3afa89-b84f-48f0-9393-7edc34128127}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/mpg
- From: Extension = ".mpeg"
To: Extension = "".mpeg""
- From: Extension = ".mpeg"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/mpg
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mid\OpenWithProgIds
- From: midfile = "[REG_NONE, size: 0 bytes]"
To: midfile = ""{random values}""
- From: midfile = "[REG_NONE, size: 0 bytes]"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIDFile
- From: PreferExecuteOnMismatch = "1"
To: PreferExecuteOnMismatch = ""1""
- From: PreferExecuteOnMismatch = "1"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIDFile
- From: EditFlags = "{random values}"
To: EditFlags = ""{random values}""
- From: EditFlags = "{random values}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIDFile\shell\open\DropTarget
- From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
To: CLSID = ""{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}""
- From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIDFile\shell\play
- From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
To: MUIVerb = ""{random values}""
- From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mid
- From: Content Type = "audio/mid"
To: Content Type = ""audio/mid""
- From: Content Type = "audio/mid"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.mid
- From: MPlayer2.Set = "yes"
To: MPlayer2.Set = ""yes""
- From: MPlayer2.Set = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mid
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.midi\OpenWithProgIds
- From: midfile = "[REG_NONE, size: 0 bytes]"
To: midfile = ""{random values}""
- From: midfile = "[REG_NONE, size: 0 bytes]"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.midi
- From: Content Type = "audio/mid"
To: Content Type = ""audio/mid""
- From: Content Type = "audio/mid"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.midi
- From: MPlayer2.Set = "yes"
To: MPlayer2.Set = ""yes""
- From: MPlayer2.Set = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.midi
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.rmi\OpenWithProgIds
- From: midfile = "[REG_NONE, size: 0 bytes]"
To: midfile = ""{random values}""
- From: midfile = "[REG_NONE, size: 0 bytes]"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.rmi
- From: Content Type = "audio/mid"
To: Content Type = ""audio/mid""
- From: Content Type = "audio/mid"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.rmi
- From: MPlayer2.Set = "yes"
To: MPlayer2.Set = ""yes""
- From: MPlayer2.Set = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.rmi
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
- From: audio/mid = "mid,midi,rmi"
To: audio/mid = ""mid,midi,rmi""
- From: audio/mid = "mid,midi,rmi"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: TYPE2 = "audio/mid"
To: TYPE2 = ""application/msexcel""
- From: TYPE2 = "audio/mid"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: audio/mid = "%Program Files%\WINDOW~2\wmplayer.exe"
To: audio/mid = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
- From: audio/mid = "%Program Files%\WINDOW~2\wmplayer.exe"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/mid
- From: CLSID = "{cd3afa74-b84f-48f0-9393-7edc34128127}"
To: CLSID = ""{cd3afa74-b84f-48f0-9393-7edc34128127}""
- From: CLSID = "{cd3afa74-b84f-48f0-9393-7edc34128127}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/mid
- From: Extension = ".mid"
To: Extension = "".mid""
- From: Extension = ".mid"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/mid
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
- From: audio/midi = "mid,midi,rmi"
To: audio/midi = ""mid,midi,rmi""
- From: audio/midi = "mid,midi,rmi"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: TYPE3 = "audio/midi"
To: TYPE3 = ""application/xlc""
- From: TYPE3 = "audio/midi"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: audio/midi = "%Program Files%\WINDOW~2\wmplayer.exe"
To: audio/midi = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
- From: audio/midi = "%Program Files%\WINDOW~2\wmplayer.exe"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/midi
- From: CLSID = "{cd3afa74-b84f-48f0-9393-7edc34128127}"
To: CLSID = ""{cd3afa74-b84f-48f0-9393-7edc34128127}""
- From: CLSID = "{cd3afa74-b84f-48f0-9393-7edc34128127}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/midi
- From: Extension = ".mid"
To: Extension = "".mid""
- From: Extension = ".mid"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/midi
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
- From: audio/x-mid = "mid,midi,rmi"
To: audio/x-mid = ""mid,midi,rmi""
- From: audio/x-mid = "mid,midi,rmi"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: TYPE10 = "audio/x-mid"
To: TYPE10 = ""audio/x-mid""
- From: TYPE10 = "audio/x-mid"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: audio/x-mid = "%Program Files%\WINDOW~2\wmplayer.exe"
To: audio/x-mid = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
- From: audio/x-mid = "%Program Files%\WINDOW~2\wmplayer.exe"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-mid
- From: CLSID = "{cd3afa74-b84f-48f0-9393-7edc34128127}"
To: CLSID = ""{cd3afa74-b84f-48f0-9393-7edc34128127}""
- From: CLSID = "{cd3afa74-b84f-48f0-9393-7edc34128127}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-mid
- From: Extension = ".mid"
To: Extension = "".mid""
- From: Extension = ".mid"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-mid
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
- From: audio/x-midi = "mid,midi,rmi"
To: audio/x-midi = ""mid,midi,rmi""
- From: audio/x-midi = "mid,midi,rmi"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: TYPE11 = "audio/x-midi"
To: TYPE11 = ""audio/x-midi""
- From: TYPE11 = "audio/x-midi"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: audio/x-midi = "%Program Files%\WINDOW~2\wmplayer.exe"
To: audio/x-midi = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
- From: audio/x-midi = "%Program Files%\WINDOW~2\wmplayer.exe"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-midi
- From: CLSID = "{cd3afa74-b84f-48f0-9393-7edc34128127}"
To: CLSID = ""{cd3afa74-b84f-48f0-9393-7edc34128127}""
- From: CLSID = "{cd3afa74-b84f-48f0-9393-7edc34128127}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-midi
- From: Extension = ".mid"
To: Extension = "".mid""
- From: Extension = ".mid"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-midi
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
- From: midi/mid = "mid,midi,rmi"
To: midi/mid = ""mid,midi,rmi""
- From: midi/mid = "mid,midi,rmi"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: TYPE19 = "midi/mid"
To: TYPE19 = ""midi/mid""
- From: TYPE19 = "midi/mid"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: midi/mid = "%Program Files%\WINDOW~2\wmplayer.exe"
To: midi/mid = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
- From: midi/mid = "%Program Files%\WINDOW~2\wmplayer.exe"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\midi/mid
- From: CLSID = "{cd3afa74-b84f-48f0-9393-7edc34128127}"
To: CLSID = ""{cd3afa74-b84f-48f0-9393-7edc34128127}""
- From: CLSID = "{cd3afa74-b84f-48f0-9393-7edc34128127}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\midi/mid
- From: Extension = ".mid"
To: Extension = "".mid""
- From: Extension = ".mid"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\midi/mid
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.aif\OpenWithProgIds
- From: AIFFFile = "[REG_NONE, size: 0 bytes]"
To: AIFFFile = ""{random values}""
- From: AIFFFile = "[REG_NONE, size: 0 bytes]"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AIFFFile
- From: PreferExecuteOnMismatch = "1"
To: PreferExecuteOnMismatch = ""1""
- From: PreferExecuteOnMismatch = "1"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AIFFFile
- From: EditFlags = "{random values}"
To: EditFlags = ""{random values}""
- From: EditFlags = "{random values}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AIFFFile\shell\open\DropTarget
- From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
To: CLSID = ""{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}""
- From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AIFFFile\shell\play
- From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
To: MUIVerb = ""{random values}""
- From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.aif
- From: Content Type = "audio/aiff"
To: Content Type = ""audio/aiff""
- From: Content Type = "audio/aiff"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.aif
- From: MPlayer2.Set = "yes"
To: MPlayer2.Set = ""yes""
- From: MPlayer2.Set = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.aif
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.aifc\OpenWithProgIds
- From: AIFFFile = "[REG_NONE, size: 0 bytes]"
To: AIFFFile = ""{random values}""
- From: AIFFFile = "[REG_NONE, size: 0 bytes]"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.aifc
- From: Content Type = "audio/aiff"
To: Content Type = ""audio/aiff""
- From: Content Type = "audio/aiff"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.aifc
- From: MPlayer2.Set = "yes"
To: MPlayer2.Set = ""yes""
- From: MPlayer2.Set = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.aifc
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.aiff\OpenWithProgIds
- From: AIFFFile = "[REG_NONE, size: 0 bytes]"
To: AIFFFile = ""{random values}""
- From: AIFFFile = "[REG_NONE, size: 0 bytes]"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.aiff
- From: Content Type = "audio/aiff"
To: Content Type = ""audio/aiff""
- From: Content Type = "audio/aiff"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.aiff
- From: MPlayer2.Set = "yes"
To: MPlayer2.Set = ""yes""
- From: MPlayer2.Set = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.aiff
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
- From: audio/x-aiff = "aif,aifc,aiff"
To: audio/x-aiff = ""aif,aifc,aiff""
- From: audio/x-aiff = "aif,aifc,aiff"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: TYPE9 = "audio/x-aiff"
To: TYPE9 = ""audio/x-aiff""
- From: TYPE9 = "audio/x-aiff"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: audio/x-aiff = "%Program Files%\WINDOW~2\wmplayer.exe"
To: audio/x-aiff = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
- From: audio/x-aiff = "%Program Files%\WINDOW~2\wmplayer.exe"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-aiff
- From: CLSID = "{cd3afa72-b84f-48f0-9393-7edc34128127}"
To: CLSID = ""{cd3afa72-b84f-48f0-9393-7edc34128127}""
- From: CLSID = "{cd3afa72-b84f-48f0-9393-7edc34128127}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-aiff
- From: Extension = ".aiff"
To: Extension = "".aiff""
- From: Extension = ".aiff"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-aiff
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
- From: audio/aiff = "aif,aifc,aiff"
To: audio/aiff = ""aif,aifc,aiff""
- From: audio/aiff = "aif,aifc,aiff"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: TYPE0 = "audio/aiff"
To: TYPE0 = ""audio/aiff""
- From: TYPE0 = "audio/aiff"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: audio/aiff = "%Program Files%\WINDOW~2\wmplayer.exe"
To: audio/aiff = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
- From: audio/aiff = "%Program Files%\WINDOW~2\wmplayer.exe"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/aiff
- From: CLSID = "{cd3afa72-b84f-48f0-9393-7edc34128127}"
To: CLSID = ""{cd3afa72-b84f-48f0-9393-7edc34128127}""
- From: CLSID = "{cd3afa72-b84f-48f0-9393-7edc34128127}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/aiff
- From: Extension = ".aiff"
To: Extension = "".aiff""
- From: Extension = ".aiff"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/aiff
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.au\OpenWithProgIds
- From: AUFile = "[REG_NONE, size: 0 bytes]"
To: AUFile = ""{random values}""
- From: AUFile = "[REG_NONE, size: 0 bytes]"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AUFile
- From: PreferExecuteOnMismatch = "1"
To: PreferExecuteOnMismatch = ""1""
- From: PreferExecuteOnMismatch = "1"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AUFile
- From: EditFlags = "{random values}"
To: EditFlags = ""{random values}""
- From: EditFlags = "{random values}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AUFile\shell\open\DropTarget
- From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
To: CLSID = ""{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}""
- From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AUFile\shell\play
- From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
To: MUIVerb = ""{random values}""
- From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.au
- From: Content Type = "audio/basic"
To: Content Type = ""audio/basic""
- From: Content Type = "audio/basic"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.au
- From: MPlayer2.Set = "yes"
To: MPlayer2.Set = ""yes""
- From: MPlayer2.Set = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.au
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.snd\OpenWithProgIds
- From: AUFile = "[REG_NONE, size: 0 bytes]"
To: AUFile = ""{random values}""
- From: AUFile = "[REG_NONE, size: 0 bytes]"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.snd
- From: Content Type = "audio/basic"
To: Content Type = ""audio/basic""
- From: Content Type = "audio/basic"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.snd
- From: MPlayer2.Set = "yes"
To: MPlayer2.Set = ""yes""
- From: MPlayer2.Set = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.snd
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
- From: audio/basic = "au,snd"
To: audio/basic = ""au,snd""
- From: audio/basic = "au,snd"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: TYPE1 = "audio/basic"
To: TYPE1 = ""audio/basic""
- From: TYPE1 = "audio/basic"
- In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
- From: audio/basic = "%Program Files%\WINDOW~2\wmplayer.exe"
To: audio/basic = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
- From: audio/basic = "%Program Files%\WINDOW~2\wmplayer.exe"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/basic
- From: CLSID = "{cd3afa73-b84f-48f0-9393-7edc34128127}"
To: CLSID = ""{cd3afa73-b84f-48f0-9393-7edc34128127}""
- From: CLSID = "{cd3afa73-b84f-48f0-9393-7edc34128127}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/basic
- From: Extension = ".au"
To: Extension = "".au""
- From: Extension = ".au"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/basic
- From: AlreadyRegistered = "yes"
To: AlreadyRegistered = ""yes""
- From: AlreadyRegistered = "yes"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication
- From: Name = "svchost.exe"
To: Name = ""iexplore.exe""
- From: Name = "svchost.exe"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication
- From: ID = "4117ed6"
To: ID = ""41107b81""
- From: ID = "4117ed6"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication
- From: Name = "explorer.exe"
To: Name = ""iexplore.exe""
- From: Name = "explorer.exe"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication
- From: ID = "4117ece"
To: ID = ""41107b81""
- From: ID = "4117ece"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication
- From: Name = "iexplore.exe"
To: Name = ""iexplore.exe""
- From: Name = "iexplore.exe"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication
- From: ID = "4117b81"
To: ID = ""41107b81""
- From: ID = "4117b81"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}
- From: Version = "9,0,0,3250"
To: Version = ""9,0,0,3250""
- From: Version = "9,0,0,3250"
- In HKEY_CURRENT_USER\Software\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}
- From: Version = "9,0,0,3250"
To: Version = ""9,0,0,3250""
- From: Version = "9,0,0,3250"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MediaPlayer\PlayerUpgrade
- From: PlayerVersion = "9,0,0,3250"
To: PlayerVersion = ""9,0,0,3250""
- From: PlayerVersion = "9,0,0,3250"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
- From: Version = "9,0,0,3250"
To: Version = ""9,0,0,3250""
- From: Version = "9,0,0,3250"
- In HKEY_CURRENT_USER\Software\Microsoft\Active Setup\Installed Components\{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
- From: Version = "9,0,0,3250"
To: Version = ""9,0,0,3250""
- From: Version = "9,0,0,3250"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA848-CC51-11CF-AAFA-00AA00B6015C}
- From: Version = "9,0,0,3250"
To: Version = ""9,0,0,3250""
- From: Version = "9,0,0,3250"
- In HKEY_CURRENT_USER\Software\Microsoft\Active Setup\Installed Components\{44BBA848-CC51-11CF-AAFA-00AA00B6015C}
- From: Version = "9,0,0,3250"
To: Version = ""9,0,0,3250""
- From: Version = "9,0,0,3250"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2179C5D3-EBFF-11CF-B6FD-00AA00B4E220}
- From: Version = "9,0,0,3250"
To: Version = ""9,0,0,3250""
- From: Version = "9,0,0,3250"
- In HKEY_CURRENT_USER\Software\Microsoft\Active Setup\Installed Components\{2179C5D3-EBFF-11CF-B6FD-00AA00B4E220}
- From: Version = "9,0,0,3250"
To: Version = ""9,0,0,3250""
- From: Version = "9,0,0,3250"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MediaPlayer\Preferences
- From: MyPlayLists = "%User Profile%\My Music\Sample Playlists"
To: MyPlayLists = ""%System Root%\Documents and Settings\All Users\Documents\My Music\Sample Playlists""
- From: MyPlayLists = "%User Profile%\My Music\Sample Playlists"
Step 6
Search and delete these components
- %User Temp%\sfx.ini
- www.youtube.com.exe
- www.youtube.com.wmv
- %User Profile%\HTML Help\hh.dat
- %System%\Googlecom\%TEMP%.exe
Step 7
Search and delete these folders
- %User Profile%\Microsoft\HTML Help
- %System%\Googlecom
Step 8
Restart in normal mode and scan your computer with your Trend Micro product for files detected as TROJ_PAKES.BKZ. If the detected files have already been cleaned, deleted, or quarantined by your Trend Micro product, no further step is required. You may opt to simply delete the quarantined files. Please check this Knowledge Base page for more information.
Step 9
Restore this file from backup only Microsoft-related files will be restored. If this malware/grayware also deleted files related to programs that are not from Microsoft, please reinstall those programs on you computer again.
- %User Profile%\Windows\DoDh.xtr
Step 10
Restore these deleted registry keys/values from backup
*Note: Only Microsoft-related keys/values will be restored. If the malware/grayware also deleted registry keys/values related to programs that are not from Microsoft, please reinstall those programs on your computer.
- In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\MUILanguages
- FileVersions
- In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
- .wma
- In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
- audio/x-ms-wma
- In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
- .wma
- In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
- audio/x-ms-wma
- In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
- .wax
- In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
- audio/x-ms-wax
- In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
- .wax
- In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
- audio/x-ms-wax
- In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
- .wmv
- In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
- video/x-ms-wmv
- In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
- .wmv
- In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
- video/x-ms-wmv
- In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
- .wvx
- In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
- video/x-ms-wvx
- In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
- .wvx
- In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
- video/x-ms-wvx
- In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
- .asf
- In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
- video/x-ms-asf
- In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
- .asf
- In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
- video/x-ms-asf
- In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
- .asx
- In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
- .asx
- In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
- .wpl
- In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
- application/vnd.ms-wpl
- In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
- .wpl
- In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
- application/vnd.ms-wpl
- In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
- .wm
- In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
- video/x-ms-wm
- In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
- .wm
- In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
- video/x-ms-wm
- In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
- .wmx
- In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
- video/x-ms-wmx
- In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
- .wmx
- In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
- video/x-ms-wmx
- In HKEY_CLASSES_ROOT\WMDFile\shellex\ContextMenuHandlers
- WMPPlayAsPlaylist
- In HKEY_CLASSES_ROOT\WMDFile\shellex\ContextMenuHandlers
- WMPAddToPlaylist
- In HKEY_CLASSES_ROOT\WMDFile\shellex\ContextMenuHandlers
- WMPBurnAudioCD
- In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
- .wmd
- In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
- application/x-ms-wmd
- In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
- .wmd
- In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
- application/x-ms-wmd
- In HKEY_CLASSES_ROOT\WMZFile\shellex\ContextMenuHandlers
- WMPPlayAsPlaylist
- In HKEY_CLASSES_ROOT\WMZFile\shellex\ContextMenuHandlers
- WMPAddToPlaylist
- In HKEY_CLASSES_ROOT\WMZFile\shellex\ContextMenuHandlers
- WMPBurnAudioCD
- In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
- .wmz
- In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
- application/x-ms-wmz
- In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
- .wmz
- In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
- application/x-ms-wmz
- In HKEY_CLASSES_ROOT\CDAFile\shellex\ContextMenuHandlers
- WMPPlayAsPlaylist
- In HKEY_CLASSES_ROOT\CDAFile\shellex\ContextMenuHandlers
- WMPAddToPlaylist
- In HKEY_CLASSES_ROOT\CDAFile\shellex\ContextMenuHandlers
- WMPBurnAudioCD
- In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
- .mp3
- In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
- audio/mpeg
- In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
- .mp3
- In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
- audio/mpeg
- In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
- .m3u
- In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
- audio/x-mpegurl
- In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
- .m3u
- In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
- audio/x-mpegurl
- In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
- .avi
- In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
- video/avi
- In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
- .avi
- In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
- video/avi
- In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
- .wav
- In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
- audio/wav
- In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
- .wav
- In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
- audio/wav
- In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
- .mpeg
- In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
- video/mpeg
- In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
- .mpeg
- In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
- video/mpeg
- In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
- .mpg
- In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
- .mpg
- In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
- .mpe
- In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
- .mpe
- In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
- .m1v
- In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
- .m1v
- In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
- .mp2
- In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
- .mp2
- In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
- .mpv2
- In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
- .mpv2
- In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
- .mp2v
- In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
- .mp2v
- In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
- .mpa
- In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
- .mpa
- In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
- .mid
- In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
- audio/mid
- In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
- .mid
- In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
- audio/mid
- In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
- .midi
- In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
- .midi
- In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
- .rmi
- In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
- .rmi
- In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
- .au
- In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
- audio/basic
- In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
- .au
- In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
- audio/basic
- In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
- .snd
- In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
- .snd
- In HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall
- WMP7
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\MPlayer2\Groups\Video
- QT
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\MPlayer2\Extensions
- .mov
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\MPlayer2\Extensions
- .qt
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\MPlayer2\MIME Types
- video/quicktime
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions
- .ivf
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types
- video/x-ivf
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Groups\Video
- IVF
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MediaPlayer\Control\Advanced Options
- Windows Media
Did this description help? Tell us how we did.