TROJ_DLOADER.TUZ

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Arrival Details

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Installation

This Trojan creates the following folders:

• %User Profile%\Microsoft\HTML Help

(Note: %User Profile% is a user's profile folder, where it usually is C:\Documents and Settings\{user name} on Windows 2000, Windows Server 2003, and Windows XP (32- and 64-bit); C:\Users\{user name} on Windows Vista (32- and 64-bit), Windows 7 (32- and 64-bit), Windows 8 (32- and 64-bit), Windows 8.1 (32- and 64-bit), Windows Server 2008, and Windows Server 2012.)

Autostart Technique

This Trojan adds the following registry entries to enable its automatic execution at every system startup:

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Run
winite = "%User Profile%\Application Data\winite.exe"

Other System Modifications

This Trojan modifies the following file(s):

• %Start Menu%\Programs\Accessories\Entertainment\Windows Media Player.lnk
• %Start Menu%\Programs\Windows Media Player.lnk
• %Application Data%\Microsoft\Windows Media\9.0\WMSDKNS.XML
• %Application Data%\Microsoft\Windows Media\9.0\WMSDKNS.DTD

(Note: %Start Menu% is the Start Menu folder, where it usually is C:\Documents and Settings\{user name}\Start Menu on Windows 2000, Windows Server 2003, and Windows XP (32- and 64-bit); C:\Users\{user name}\AppData\Roaming\Microsoft\Windows\Start Menu on Windows Vista (32- and 64-bit), Windows 7 (32- and 64-bit), Windows 8 (32- and 64-bit), Windows 8.1 (32- and 64-bit), Windows Server 2008, and Windows Server 2012.. %Application Data% is the Application Data folder, where it usually is C:\Documents and Settings\{user name}\Application Data on Windows 2000, Windows Server 2003, and Windows XP (32- and 64-bit); C:\Users\{user name}\AppData\Roaming on Windows Vista (32- and 64-bit), Windows 7 (32- and 64-bit), Windows 8 (32- and 64-bit), Windows 8.1 (32- and 64-bit), Windows Server 2008, and Windows Server 2012.)

It deletes the following files:

• %Start Menu%\Programs\Accessories\Entertainment\ActiveMovie Control.lnk
• %Desktop%\ActiveMovie Control.lnk
• %Start Menu%\Programs\Accessories\Entertainment\ActiveMovie File Types.lnk
• %Desktop%\ActiveMovie File Types.lnk
• Windows Media Player.lnk
• %Start Menu%\Programs\Accessories\Entertainment\Beta Windows Media Player.lnk
• %User Profile%\Quick Launch\Beta Windows Media Player.lnk
• %Start Menu%\Programs\Beta Windows Media Player.lnk
• %Windows% Media Player.lnk
• %Application Data%\Microsoft\Windows Media\9.0\WMSDKNSR.XML

(Note: %Start Menu% is the Start Menu folder, where it usually is C:\Documents and Settings\{user name}\Start Menu on Windows 2000, Windows Server 2003, and Windows XP (32- and 64-bit); C:\Users\{user name}\AppData\Roaming\Microsoft\Windows\Start Menu on Windows Vista (32- and 64-bit), Windows 7 (32- and 64-bit), Windows 8 (32- and 64-bit), Windows 8.1 (32- and 64-bit), Windows Server 2008, and Windows Server 2012.. %Desktop% is the desktop folder, where it usually is C:\Documents and Settings\{user name}\Desktop in Windows 2000, Windows Server 2003, and Windows XP (32- and 64-bit); C:\Users\{user name}\Desktop in Windows Vista (32- and 64-bit), Windows 7 (32- and 64-bit), Windows 8 (32- and 64-bit), Windows 8.1 (32- and 64-bit), Windows Server 2008, and Windows Server 2012.. %User Profile% is a user's profile folder, where it usually is C:\Documents and Settings\{user name} on Windows 2000, Windows Server 2003, and Windows XP (32- and 64-bit); C:\Users\{user name} on Windows Vista (32- and 64-bit), Windows 7 (32- and 64-bit), Windows 8 (32- and 64-bit), Windows 8.1 (32- and 64-bit), Windows Server 2008, and Windows Server 2012.. %Windows% is the Windows folder, where it usually is C:\Windows on all Windows operating system versions.. %Application Data% is the Application Data folder, where it usually is C:\Documents and Settings\{user name}\Application Data on Windows 2000, Windows Server 2003, and Windows XP (32- and 64-bit); C:\Users\{user name}\AppData\Roaming on Windows Vista (32- and 64-bit), Windows 7 (32- and 64-bit), Windows 8 (32- and 64-bit), Windows 8.1 (32- and 64-bit), Windows Server 2008, and Windows Server 2012.)

It deletes the following folders:

• %Start Menu%\Programs\Accessories\Entertainment

(Note: %Start Menu% is the Start Menu folder, where it usually is C:\Documents and Settings\{user name}\Start Menu on Windows 2000, Windows Server 2003, and Windows XP (32- and 64-bit); C:\Users\{user name}\AppData\Roaming\Microsoft\Windows\Start Menu on Windows Vista (32- and 64-bit), Windows 7 (32- and 64-bit), Windows 8 (32- and 64-bit), Windows 8.1 (32- and 64-bit), Windows Server 2008, and Windows Server 2012.)

It adds the following registry keys:

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}\
Default MidiOut Device

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}\
Default DirectSound Device

HKEY_CURRENT_USER\Software\Microsoft\
Multimedia\ActiveMovie\Filter Cache

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Setup\UserOptions

HKEY_LOCAL_MACHINE\Software\Microsoft\
Windows\CurrentVersion\Uninstall\
MPlayer2

HKEY_CLASSES_ROOT\WMP.DeskBand.1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMP.DeskBand.1\CLSID

HKEY_CLASSES_ROOT\WMP.DeskBand

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMP.DeskBand\CLSID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{0A4286EA-E355-44FB-8086-AF3DF7645BD9}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{0A4286EA-E355-44FB-8086-AF3DF7645BD9}\ProgID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{0A4286EA-E355-44FB-8086-AF3DF7645BD9}\VersionIndependentProgID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{0A4286EA-E355-44FB-8086-AF3DF7645BD9}\InprocServer32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{B6DD1ED6-573F-40FD-99A1-F28D8BF23916}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{B6DD1ED6-573F-40FD-99A1-F28D8BF23916}\1.0

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{B6DD1ED6-573F-40FD-99A1-F28D8BF23916}\1.0\
FLAGS

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{B6DD1ED6-573F-40FD-99A1-F28D8BF23916}\1.0\
0

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{B6DD1ED6-573F-40FD-99A1-F28D8BF23916}\1.0\
0\win32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{B6DD1ED6-573F-40FD-99A1-F28D8BF23916}\1.0\
HELPDIR

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{0A55922C-3B1F-469B-8D0D-B15060499A52}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{0A55922C-3B1F-469B-8D0D-B15060499A52}\ProxyStubClsid

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{0A55922C-3B1F-469B-8D0D-B15060499A52}\ProxyStubClsid32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{0A55922C-3B1F-469B-8D0D-B15060499A52}\TypeLib

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Health\{A7FE3800-0C4D-4945-BE22-4F6148C23122}

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\DropDown

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences\ProxySettings

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences\ProxySettings\
MMS

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences\ProxySettings\
HTTP

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences\ProxySettings\
RTSP

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences\EqualizerSettings

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Player\MediaLibrarySettings

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
application/x-wmplayer

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\UIPlugins\{0890F930-4F80-4646-BAB1-4B6E5571FB89}

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\UIPlugins\{1F32514F-1561-4922-A604-8A1F478B5A42}

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\UIPlugins\{52903d79-f993-4de6-8317-20c9c176d823}

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\UIPlugins\{59E7BF52-E5C9-4382-A39A-522DEE9AFDFD}

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\UIPlugins\{5DF031B7-6A37-42D9-8802-E27F4F224332}

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\UIPlugins\{5F4BB5C9-4652-489B-8601-EEC0C3C32E2E}

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\UIPlugins\{7F2B1D6B-1357-402C-A1C8-67E59583B41D}

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\UIPlugins\{93075F62-16B3-43EC-A53B-FFAD0E01D5E7}

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\UIPlugins\{9695AEF9-9D03-4671-8F2F-FF49D1BB01C4}

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\UIPlugins\{976ABECA-93F7-4d81-9187-2A6137829675}

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\UIPlugins\{99DB05E3-F81E-4C8A-A252-F396306AB6FE}

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\UIPlugins\{9F9562EB-15B6-46C6-A7CB-0A66FC65130E}

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\UIPlugins\{9FA014E3-076F-4865-A73C-117131B8E292}

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\UIPlugins\{D5E49195-ED19-40fb-9EE0-E6625A808B77}

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\UIPlugins\{E641D09E-E500-4c09-8260-F1CD7B902E9C}

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\UIPlugins\{F24A1BC2-2331-4B91-8A13-5A549DA56E9D}

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\UIPlugins\{FD981763-B6BB-4d51-9143-6D372A0ED56F}

HKEY_CLASSES_ROOT\Software\Microsoft\
MediaPlayer\Setup

It adds the following registry entries:

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}\
Default MidiOut Device
FriendlyName = "Default MidiOut Device"

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}\
Default MidiOut Device
CLSID = "{07B65360-C445-11CE-AFDE-00AA006C14F4}"

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}\
Default MidiOut Device
FilterData = "{random values}"

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}\
Default MidiOut Device
MidiOutId = "ffffffff"

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}\
Default DirectSound Device
FriendlyName = "Default DirectSound Device"

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}\
Default DirectSound Device
CLSID = "{79376820-07D0-11CF-A24D-0020AFD79767}"

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}\
Default DirectSound Device
FilterData = "{random values}"

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}\
Default DirectSound Device
DSGuid = "{00000000-0000-0000-0000-000000000000}"

HKEY_CURRENT_USER\Software\Microsoft\
Multimedia\ActiveMovie\Filter Cache
0 = "{random values}"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences
MetadataRetrieval = "3"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences
SendUserGUID = "{random values}"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences
SilentAcquisition = "1"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences
UsageTracking = "0"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences
DisableMRU = "0"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Setup\UserOptions
DesktopShortcut = "no"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Setup\UserOptions
QuickLaunchShortcut = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wma
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wax
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-ms-wma
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\User Trusted External Applications
%Program Files%\WINDOW~2\wmplayer.exe = "Yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\User Trusted External Applications
%Program Files%\WINDOW~2\wmplayer.exe = "Yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\User Trusted External Applications
%Program Files%\Windows Media Player\wmplayer.exe = "Yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\User Trusted External Applications
%Program Files%\Windows Media Player\wmplayer.exe = "Yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-ms-wax
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wmv
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wvx
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-wmv
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-wvx
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.asf
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.asx
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.dvr-ms
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wpl
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wm
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wmx
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wmd
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wmz
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
application/x-mplayer2
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
application/vnd.ms-wpl
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-asf
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-asf-plugin
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-wm
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-wmx
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
application/x-ms-wmd
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
application/x-ms-wmz
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Protocols\
mms
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Protocols\
mmst
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Protocols\
mmsu
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Protocols\
msbd
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.cda
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Devices\
AudioCD
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mp3
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.m3u
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mpeg
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mpg
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mp3
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mpeg
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mpg
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mp3
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mpegurl
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mpegurl
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.avi
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/avi
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/msvideo
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-msvideo
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wav
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/wav
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-wav
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpeg
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpg
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpe
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.m1v
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mp2
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpv2
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mp2v
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpa
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/mpeg
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-mpeg
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-mpeg2a
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/mpg
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mid
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.midi
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.rmi
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mid
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/midi
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mid
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-midi
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
midi/mid
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.aif
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.aifc
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.aiff
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-aiff
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/aiff
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.au
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.snd
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/basic
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{0A4286EA-E355-44FB-8086-AF3DF7645BD9}\InprocServer32
ThreadingModel = "Apartment"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{0A55922C-3B1F-469B-8D0D-B15060499A52}\TypeLib
Version = "1.0"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Setup\CreatedLinks
Shortcut4 = "%User Profile%\Quick Launch\Windows Media Player.lnk"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences
LaunchIndex = "1"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences
AppColorLimited = "0"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Player\Tasks\
NowPlaying
InitFlags = "1"

HKEY_CURRENT_USER\Software\Microsoft\
Windows Media\WMSDK\General
UniqueID = "{5D4B4CA6-4BD2-4433-A194-D50AED65A23E}"

HKEY_CURRENT_USER\Software\Microsoft\
Windows Media\WMSDK\General
ComputerName = "CWS10D010"

HKEY_CURRENT_USER\Software\Microsoft\
Windows Media\WMSDK\General
VolumeSerialNumber = "68adfd"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences\ProxySettings\
MMS
ProxyStyle = "0"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences\ProxySettings\
MMS
ProxyPort = "6db"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences\ProxySettings\
MMS
ProxyBypass = "0"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences\ProxySettings\
HTTP
ProxyStyle = "1"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences\ProxySettings\
HTTP
ProxyPort = "5"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences\ProxySettings\
HTTP
ProxyBypass = "0"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences\ProxySettings\
RTSP
ProxyStyle = "0"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences\ProxySettings\
RTSP
ProxyPort = "22a"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences\ProxySettings\
RTSP
ProxyBypass = "0"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
application/x-wmplayer
CLSID = "{cd3afa96-b84f-48f0-9393-7edc34128127}"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\UIPlugins\{9695AEF9-9D03-4671-8F2F-FF49D1BB01C4}
AttemptedAutoRun = "1"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\UIPlugins\{5DF031B7-6A37-42D9-8802-E27F4F224332}
AttemptedAutoRun = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SOFTWARE\Microsoft\MediaPlayer\
Setup
UpdateTimeStamp = "{random values}"

It modifies the following registry entries:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
MediaPlayer
MP2.SaveDir = "%Program Files%\Windows Media Player"

(Note: The default value data of the said registry entry is %Program Files%\Windows Media Player.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences
AcceptedPrivacyStatement = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayCDAudioOnArrival
Action = "@wmploc.dll,-6503"

(Note: The default value data of the said registry entry is @wmploc.dll,-6503.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayCDAudioOnArrival
Provider = "@wmploc.dll,-6502"

(Note: The default value data of the said registry entry is @wmploc.dll,-6502.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayCDAudioOnArrival
InvokeProgID = "WMP.AudioCD"

(Note: The default value data of the said registry entry is WMP.AudioCD.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayCDAudioOnArrival
InvokeVerb = "play"

(Note: The default value data of the said registry entry is play.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayCDAudioOnArrival
DefaultIcon = "%ProgramFiles%\Windows Media Player\wmplayer.exe,0"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSRipCDAudioOnArrival
Action = "@wmploc.dll,-6506"

(Note: The default value data of the said registry entry is @wmploc.dll,-6506.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSRipCDAudioOnArrival
Provider = "@wmploc.dll,-6502"

(Note: The default value data of the said registry entry is @wmploc.dll,-6502.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSRipCDAudioOnArrival
InvokeProgID = "WMP.RipCD"

(Note: The default value data of the said registry entry is WMP.RipCD.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSRipCDAudioOnArrival
InvokeVerb = "Rip"

(Note: The default value data of the said registry entry is Rip.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSRipCDAudioOnArrival
DefaultIcon = "%ProgramFiles%\Windows Media Player\wmplayer.exe,0"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMPBurnCDOnArrival
Action = "@wmploc.dll,-6505"

(Note: The default value data of the said registry entry is @wmploc.dll,-6505.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMPBurnCDOnArrival
Provider = "@wmploc.dll,-6502"

(Note: The default value data of the said registry entry is @wmploc.dll,-6502.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMPBurnCDOnArrival
InvokeProgID = "WMP.BurnCD"

(Note: The default value data of the said registry entry is WMP.BurnCD.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMPBurnCDOnArrival
InvokeVerb = "Burn"

(Note: The default value data of the said registry entry is Burn.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMPBurnCDOnArrival
DefaultIcon = "%ProgramFiles%\Windows Media Player\wmplayer.exe,0"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayDVDMovieOnArrival
Action = "@wmploc.dll,-6504"

(Note: The default value data of the said registry entry is @wmploc.dll,-6504.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayDVDMovieOnArrival
Provider = "@wmploc.dll,-6502"

(Note: The default value data of the said registry entry is @wmploc.dll,-6502.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayDVDMovieOnArrival
InvokeProgID = "WMP.DVD"

(Note: The default value data of the said registry entry is WMP.DVD.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayDVDMovieOnArrival
InvokeVerb = "play"

(Note: The default value data of the said registry entry is play.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayDVDMovieOnArrival
DefaultIcon = "%ProgramFiles%\Windows Media Player\wmplayer.exe,0"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMDMHandler
Action = "Transfer Files"

(Note: The default value data of the said registry entry is Transfer Files.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMDMHandler
CLSIDForCancel = "{91778246-9BE4-4713-A651-E833B853CC30}"

(Note: The default value data of the said registry entry is {91778246-9BE4-4713-A651-E833B853CC30}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMDMHandler
DefaultIcon = "%ProgramFiles%\Windows Media Player\wmplayer.exe,0"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMDMHandler
InitCmdLine = "%ProgramFiles%\Windows Media Player\wmplayer.exe /prefetch:3 /task:PortableDevice"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMDMHandler
ProgID = "Shell.HWEventHandlerShellExecute"

(Note: The default value data of the said registry entry is Shell.HWEventHandlerShellExecute.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMDMHandler
Provider = "@wmploc.dll,-6502"

(Note: The default value data of the said registry entry is @wmploc.dll,-6502.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wma\OpenWithProgIds
WMAFile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
wmafile
PreferExecuteOnMismatch = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
wmafile
EditFlags = "{random values}"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
wmafile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
wmafile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wma
Content Type = "audio/x-ms-wma"

(Note: The default value data of the said registry entry is audio/x-ms-wma.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wma
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wma
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wax\OpenWithProgIds
WAXFile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WAXFile
PreferExecuteOnMismatch = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WAXFile
EditFlags = "{random values}"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WAXFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WAXFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wax
Content Type = "audio/x-ms-wax"

(Note: The default value data of the said registry entry is audio/x-ms-wax.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wax
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wax
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/x-ms-wma = "wma"

(Note: The default value data of the said registry entry is wma.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE17 = "audio/x-ms-wma"

(Note: The default value data of the said registry entry is audio/x-ms-wma.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/x-ms-wma = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-ms-wma
CLSID = "{cd3afa84-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa84-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-ms-wma
Extension = ".wma"

(Note: The default value data of the said registry entry is .wma.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-ms-wma
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/x-ms-wax = "wax"

(Note: The default value data of the said registry entry is wax.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE16 = "audio/x-ms-wax"

(Note: The default value data of the said registry entry is audio/x-ms-wax.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/x-ms-wax = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-ms-wax
CLSID = "{cd3afa83-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa83-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-ms-wax
Extension = ".wax"

(Note: The default value data of the said registry entry is .wax.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-ms-wax
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wmv\OpenWithProgIds
WMVFile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMVFile
PreferExecuteOnMismatch = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMVFile
EditFlags = "{random values}"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMVFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMVFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wmv
Content Type = "video/x-ms-wmv"

(Note: The default value data of the said registry entry is video/x-ms-wmv.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wmv
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wmv
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wvx\OpenWithProgIds
WVXFile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WVXFile
PreferExecuteOnMismatch = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WVXFile
EditFlags = "{random values}"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WVXFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WVXFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wvx
Content Type = "video/x-ms-wvx"

(Note: The default value data of the said registry entry is video/x-ms-wvx.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wvx
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wvx
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/x-ms-wmv = "wmv"

(Note: The default value data of the said registry entry is wmv.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE29 = "video/x-ms-wmv"

(Note: The default value data of the said registry entry is video/x-ms-wmv.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/x-ms-wmv = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-wmv
CLSID = "{cd3afa94-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa94-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-wmv
Extension = ".wmv"

(Note: The default value data of the said registry entry is .wmv.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-wmv
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/x-ms-wvx = "wvx"

(Note: The default value data of the said registry entry is wvx.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE31 = "video/x-ms-wvx"

(Note: The default value data of the said registry entry is video/x-ms-wvx.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/x-ms-wvx = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-wvx
CLSID = "{cd3afa95-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa95-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-wvx
Extension = ".wvx"

(Note: The default value data of the said registry entry is .wvx.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-wvx
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.asf\OpenWithProgIds
ASFFile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
ASFFile
PreferExecuteOnMismatch = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
ASFFile
EditFlags = "{random values}"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
ASFFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
ASFFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.asf
Content Type = "video/x-ms-asf"

(Note: The default value data of the said registry entry is video/x-ms-asf.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.asf
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.asf
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.asx\OpenWithProgIds
ASXFile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
ASXFile
PreferExecuteOnMismatch = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
ASXFile
EditFlags = "{random values}"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
ASXFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
ASXFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.asx
Content Type = "video/x-ms-asf"

(Note: The default value data of the said registry entry is video/x-ms-asf.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.asx
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.asx
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.dvr-ms\OpenWithProgIds
WMP.DVR-MSFile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMP.DVR-MSFile
PreferExecuteOnMismatch = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMP.DVR-MSFile
EditFlags = "{random values}"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMP.DVR-MSFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMP.DVR-MSFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.dvr-ms
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wpl\OpenWithProgIds
WPLFile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WPLFile
PreferExecuteOnMismatch = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WPLFile
EditFlags = "{random values}"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WPLFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WPLFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wpl
Content Type = "application/vnd.ms-wpl"

(Note: The default value data of the said registry entry is application/vnd.ms-wpl.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wpl
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wpl
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wm\OpenWithProgIds
ASFFile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wm
Content Type = "video/x-ms-wm"

(Note: The default value data of the said registry entry is video/x-ms-wm.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wm
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wm
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wmx\OpenWithProgIds
ASXFile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wmx
Content Type = "video/x-ms-wmx"

(Note: The default value data of the said registry entry is video/x-ms-wmx.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wmx
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wmx
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wmd\OpenWithProgIds
WMDFile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMDFile
PreferExecuteOnMismatch = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMDFile
EditFlags = "{random values}"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wmd
Content Type = "application/x-ms-wmd"

(Note: The default value data of the said registry entry is application/x-ms-wmd.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wmd
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wmd
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wmz\OpenWithProgIds
WMZFile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMZFile
PreferExecuteOnMismatch = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMZFile
EditFlags = "{random values}"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wmz
Content Type = "application/x-ms-wmz"

(Note: The default value data of the said registry entry is application/x-ms-wmz.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wmz
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wmz
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
application/x-mplayer2
CLSID = "{cd3afa8f-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa8f-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
application/x-mplayer2
Extension = ".asx"

(Note: The default value data of the said registry entry is .asx.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
application/x-mplayer2
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
application/vnd.ms-wpl
CLSID = "{cd3afa95-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa95-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
application/vnd.ms-wpl
Extension = ".wpl"

(Note: The default value data of the said registry entry is .wpl.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
application/vnd.ms-wpl
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/x-ms-asf = "asf,asx,wm,wmx"

(Note: The default value data of the said registry entry is asf,asx,wm,wmx.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE26 = "video/x-ms-asf"

(Note: The default value data of the said registry entry is video/x-ms-asf.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/x-ms-asf = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-asf
CLSID = "{cd3afa8f-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa8f-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-asf
Extension = ".asx"

(Note: The default value data of the said registry entry is .asx.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-asf
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/x-ms-asf-plugin = "asf,asx,wm,wmx"

(Note: The default value data of the said registry entry is asf,asx,wm,wmx.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE27 = "video/x-ms-asf-plugin"

(Note: The default value data of the said registry entry is video/x-ms-asf-plugin.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/x-ms-asf-plugin = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-asf-plugin
CLSID = "{cd3afa8f-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa8f-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-asf-plugin
Extension = ".asx"

(Note: The default value data of the said registry entry is .asx.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-asf-plugin
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/x-ms-wm = "asf,asx,wm,wmx"

(Note: The default value data of the said registry entry is asf,asx,wm,wmx.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE28 = "video/x-ms-wm"

(Note: The default value data of the said registry entry is video/x-ms-wm.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/x-ms-wm = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-wm
CLSID = "{cd3afa92-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa92-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-wm
Extension = ".wm"

(Note: The default value data of the said registry entry is .wm.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-wm
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/x-ms-wmx = "asf,asx,wm,wmx"

(Note: The default value data of the said registry entry is asf,asx,wm,wmx.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE30 = "video/x-ms-wmx"

(Note: The default value data of the said registry entry is video/x-ms-wmx.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/x-ms-wmx = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-wmx
CLSID = "{cd3afa93-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa93-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-wmx
Extension = ".wmx"

(Note: The default value data of the said registry entry is .wmx.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-wmx
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
application/x-ms-wmd
CLSID = "{ee4da6a4-8c52-4a63-bbb8-97c93d7e1b6c}"

(Note: The default value data of the said registry entry is {ee4da6a4-8c52-4a63-bbb8-97c93d7e1b6c}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
application/x-ms-wmd
Extension = ".wmd"

(Note: The default value data of the said registry entry is .wmd.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
application/x-ms-wmd
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
application/x-ms-wmz
CLSID = "{cd3afa71-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa71-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
application/x-ms-wmz
Extension = ".wmz"

(Note: The default value data of the said registry entry is .wmz.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
application/x-ms-wmz
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MMS
Source Filter = "{6B6D0800-9ADA-11d0-A520-00A0D10129C0}"

(Note: The default value data of the said registry entry is {6B6D0800-9ADA-11d0-A520-00A0D10129C0}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Protocols\
mms
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MMST
Source Filter = "{6B6D0800-9ADA-11d0-A520-00A0D10129C0}"

(Note: The default value data of the said registry entry is {6B6D0800-9ADA-11d0-A520-00A0D10129C0}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Protocols\
mmst
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MMSU
Source Filter = "{6B6D0800-9ADA-11d0-A520-00A0D10129C0}"

(Note: The default value data of the said registry entry is {6B6D0800-9ADA-11d0-A520-00A0D10129C0}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Protocols\
mmsu
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MSBD
Source Filter = "{6B6D0800-9ADA-11d0-A520-00A0D10129C0}"

(Note: The default value data of the said registry entry is {6B6D0800-9ADA-11d0-A520-00A0D10129C0}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Protocols\
msbd
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.cda\OpenWithProgIds
CDAFile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
cdafile
PreferExecuteOnMismatch = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
cdafile
EditFlags = "{random values}"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
cdafile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.cda
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AudioCD\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Devices\
AudioCD
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mp3\OpenWithProgIds
mp3file = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
mp3file
PreferExecuteOnMismatch = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
mp3file
EditFlags = "{random values}"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
mp3file\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
mp3file\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mp3
Content Type = "audio/mpeg"

(Note: The default value data of the said registry entry is audio/mpeg.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.mp3
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mp3
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.m3u\OpenWithProgIds
m3ufile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
m3ufile
PreferExecuteOnMismatch = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
m3ufile
EditFlags = "{random values}"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
m3ufile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
m3ufile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.m3u
Content Type = "audio/x-mpegurl"

(Note: The default value data of the said registry entry is audio/x-mpegurl.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.m3u
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.m3u
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/mpeg = "mp3"

(Note: The default value data of the said registry entry is mp3.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE5 = "audio/mpeg"

(Note: The default value data of the said registry entry is application/rtf.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/mpeg = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mpeg
CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa76-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mpeg
Extension = ".mp3"

(Note: The default value data of the said registry entry is .mp3.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mpeg
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/mpg = "mp3"

(Note: The default value data of the said registry entry is mp3.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE7 = "audio/mpg"

(Note: The default value data of the said registry entry is application/pot.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/mpg = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mpg
CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa76-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mpg
Extension = ".mp3"

(Note: The default value data of the said registry entry is .mp3.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mpg
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/mp3 = "mp3"

(Note: The default value data of the said registry entry is mp3.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE4 = "audio/mp3"

(Note: The default value data of the said registry entry is application/msword.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/mp3 = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mp3
CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa76-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mp3
Extension = ".mp3"

(Note: The default value data of the said registry entry is .mp3.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mp3
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/x-mpeg = "mp3"

(Note: The default value data of the said registry entry is mp3.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE13 = "audio/x-mpeg"

(Note: The default value data of the said registry entry is audio/x-mpeg.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/x-mpeg = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mpeg
CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa76-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mpeg
Extension = ".mp3"

(Note: The default value data of the said registry entry is .mp3.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mpeg
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/x-mpg = "mp3"

(Note: The default value data of the said registry entry is mp3.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE15 = "audio/x-mpg"

(Note: The default value data of the said registry entry is audio/x-mpg.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/x-mpg = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mpg
CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa76-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mpg
Extension = ".mp3"

(Note: The default value data of the said registry entry is .mp3.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mpg
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/x-mp3 = "mp3"

(Note: The default value data of the said registry entry is mp3.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE12 = "audio/x-mp3"

(Note: The default value data of the said registry entry is audio/x-mp3.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/x-mp3 = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mp3
CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa76-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mp3
Extension = ".mp3"

(Note: The default value data of the said registry entry is .mp3.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mp3
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/mpegurl = "m3u"

(Note: The default value data of the said registry entry is m3u.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE6 = "audio/mpegurl"

(Note: The default value data of the said registry entry is application/ppt.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/mpegurl = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mpegurl
CLSID = "{cd3afa78-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa78-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mpegurl
Extension = ".m3u"

(Note: The default value data of the said registry entry is .m3u.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mpegurl
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/x-mpegurl = "m3u"

(Note: The default value data of the said registry entry is m3u.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE14 = "audio/x-mpegurl"

(Note: The default value data of the said registry entry is audio/x-mpegurl.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/x-mpegurl = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mpegurl
CLSID = "{cd3afa78-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa78-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mpegurl
Extension = ".m3u"

(Note: The default value data of the said registry entry is .m3u.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mpegurl
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.avi\OpenWithProgIds
avifile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AVIFile
PreferExecuteOnMismatch = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AVIFile
EditFlags = "{random values}"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AVIFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AVIFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.avi
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.avi
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/avi = "avi"

(Note: The default value data of the said registry entry is avi.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE20 = "video/avi"

(Note: The default value data of the said registry entry is video/avi.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/avi = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/avi
CLSID = "{cd3afa88-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa88-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/avi
Extension = ".avi"

(Note: The default value data of the said registry entry is .avi.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/avi
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/msvideo = "avi"

(Note: The default value data of the said registry entry is avi.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE23 = "video/msvideo"

(Note: The default value data of the said registry entry is video/msvideo.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/msvideo = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/msvideo
CLSID = "{cd3afa88-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa88-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/msvideo
Extension = ".avi"

(Note: The default value data of the said registry entry is .avi.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/msvideo
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/x-msvideo = "avi"

(Note: The default value data of the said registry entry is avi.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE32 = "video/x-msvideo"

(Note: The default value data of the said registry entry is video/x-msvideo.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/x-msvideo = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-msvideo
CLSID = "{cd3afa88-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa88-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-msvideo
Extension = ".avi"

(Note: The default value data of the said registry entry is .avi.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-msvideo
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wav\OpenWithProgIds
soundrec = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SoundRec
PreferExecuteOnMismatch = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SoundRec
EditFlags = "{random values}"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SoundRec\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SoundRec\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wav
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wav
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/wav = "wav"

(Note: The default value data of the said registry entry is wav.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE8 = "audio/wav"

(Note: The default value data of the said registry entry is application/pps.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/wav = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/wav
CLSID = "{cd3afa7b-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa7b-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/wav
Extension = ".wav"

(Note: The default value data of the said registry entry is .wav.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/wav
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/x-wav = "wav"

(Note: The default value data of the said registry entry is wav.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE18 = "audio/x-wav"

(Note: The default value data of the said registry entry is audio/x-wav.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/x-wav = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-wav
CLSID = "{cd3afa7b-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa7b-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-wav
Extension = ".wav"

(Note: The default value data of the said registry entry is .wav.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-wav
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpeg\OpenWithProgIds
mpegfile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
mpegfile
PreferExecuteOnMismatch = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
mpegfile
EditFlags = "{random values}"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
mpegfile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
mpegfile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpeg
Content Type = "video/mpeg"

(Note: The default value data of the said registry entry is video/mpeg.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.mpeg
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpeg
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpg\OpenWithProgIds
mpegfile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpg
Content Type = "video/mpeg"

(Note: The default value data of the said registry entry is video/mpeg.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.mpg
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpg
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpe\OpenWithProgIds
mpegfile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpe
Content Type = "video/mpeg"

(Note: The default value data of the said registry entry is video/mpeg.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.mpe
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpe
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.m1v\OpenWithProgIds
mpegfile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.m1v
Content Type = "video/mpeg"

(Note: The default value data of the said registry entry is video/mpeg.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.m1v
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.m1v
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mp2\OpenWithProgIds
mpegfile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mp2
Content Type = "video/mpeg"

(Note: The default value data of the said registry entry is video/mpeg.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.mp2
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mp2
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpv2\OpenWithProgIds
mpegfile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpv2
Content Type = "video/mpeg"

(Note: The default value data of the said registry entry is video/mpeg.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.mpv2
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpv2
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mp2v\OpenWithProgIds
mpegfile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mp2v
Content Type = "video/mpeg"

(Note: The default value data of the said registry entry is video/mpeg.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.mp2v
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mp2v
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpa\OpenWithProgIds
mpegfile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpa
Content Type = "video/mpeg"

(Note: The default value data of the said registry entry is video/mpeg.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.mpa
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpa
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/mpeg = "mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v"

(Note: The default value data of the said registry entry is mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE21 = "video/mpeg"

(Note: The default value data of the said registry entry is video/mpeg.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/mpeg = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/mpeg
CLSID = "{cd3afa89-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa89-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/mpeg
Extension = ".mpeg"

(Note: The default value data of the said registry entry is .mpeg.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/mpeg
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/x-mpeg = "mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v"

(Note: The default value data of the said registry entry is mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE24 = "video/x-mpeg"

(Note: The default value data of the said registry entry is video/x-mpeg.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/x-mpeg = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-mpeg
CLSID = "{cd3afa89-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa89-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-mpeg
Extension = ".mpeg"

(Note: The default value data of the said registry entry is .mpeg.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-mpeg
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/x-mpeg2a = "mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v"

(Note: The default value data of the said registry entry is mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE25 = "video/x-mpeg2a"

(Note: The default value data of the said registry entry is video/x-mpeg2a.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/x-mpeg2a = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-mpeg2a
CLSID = "{cd3afa89-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa89-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-mpeg2a
Extension = ".mpeg"

(Note: The default value data of the said registry entry is .mpeg.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-mpeg2a
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/mpg = "mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v"

(Note: The default value data of the said registry entry is mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE22 = "video/mpg"

(Note: The default value data of the said registry entry is video/mpg.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/mpg = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/mpg
CLSID = "{cd3afa89-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa89-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/mpg
Extension = ".mpeg"

(Note: The default value data of the said registry entry is .mpeg.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/mpg
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mid\OpenWithProgIds
midfile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIDFile
PreferExecuteOnMismatch = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIDFile
EditFlags = "{random values}"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIDFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIDFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mid
Content Type = "audio/mid"

(Note: The default value data of the said registry entry is audio/mid.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.mid
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mid
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.midi\OpenWithProgIds
midfile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.midi
Content Type = "audio/mid"

(Note: The default value data of the said registry entry is audio/mid.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.midi
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.midi
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.rmi\OpenWithProgIds
midfile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.rmi
Content Type = "audio/mid"

(Note: The default value data of the said registry entry is audio/mid.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.rmi
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.rmi
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/mid = "mid,midi,rmi"

(Note: The default value data of the said registry entry is mid,midi,rmi.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE2 = "audio/mid"

(Note: The default value data of the said registry entry is application/msexcel.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/mid = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mid
CLSID = "{cd3afa74-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa74-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mid
Extension = ".mid"

(Note: The default value data of the said registry entry is .mid.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mid
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/midi = "mid,midi,rmi"

(Note: The default value data of the said registry entry is mid,midi,rmi.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE3 = "audio/midi"

(Note: The default value data of the said registry entry is application/xlc.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/midi = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/midi
CLSID = "{cd3afa74-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa74-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/midi
Extension = ".mid"

(Note: The default value data of the said registry entry is .mid.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/midi
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/x-mid = "mid,midi,rmi"

(Note: The default value data of the said registry entry is mid,midi,rmi.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE10 = "audio/x-mid"

(Note: The default value data of the said registry entry is audio/x-mid.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/x-mid = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mid
CLSID = "{cd3afa74-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa74-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mid
Extension = ".mid"

(Note: The default value data of the said registry entry is .mid.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mid
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/x-midi = "mid,midi,rmi"

(Note: The default value data of the said registry entry is mid,midi,rmi.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE11 = "audio/x-midi"

(Note: The default value data of the said registry entry is audio/x-midi.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/x-midi = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-midi
CLSID = "{cd3afa74-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa74-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-midi
Extension = ".mid"

(Note: The default value data of the said registry entry is .mid.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-midi
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
midi/mid = "mid,midi,rmi"

(Note: The default value data of the said registry entry is mid,midi,rmi.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE19 = "midi/mid"

(Note: The default value data of the said registry entry is midi/mid.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
midi/mid = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
midi/mid
CLSID = "{cd3afa74-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa74-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
midi/mid
Extension = ".mid"

(Note: The default value data of the said registry entry is .mid.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
midi/mid
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.aif\OpenWithProgIds
AIFFFile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AIFFFile
PreferExecuteOnMismatch = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AIFFFile
EditFlags = "{random values}"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AIFFFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AIFFFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.aif
Content Type = "audio/aiff"

(Note: The default value data of the said registry entry is audio/aiff.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.aif
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.aif
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.aifc\OpenWithProgIds
AIFFFile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.aifc
Content Type = "audio/aiff"

(Note: The default value data of the said registry entry is audio/aiff.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.aifc
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.aifc
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.aiff\OpenWithProgIds
AIFFFile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.aiff
Content Type = "audio/aiff"

(Note: The default value data of the said registry entry is audio/aiff.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.aiff
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.aiff
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/x-aiff = "aif,aifc,aiff"

(Note: The default value data of the said registry entry is aif,aifc,aiff.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE9 = "audio/x-aiff"

(Note: The default value data of the said registry entry is audio/x-aiff.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/x-aiff = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-aiff
CLSID = "{cd3afa72-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa72-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-aiff
Extension = ".aiff"

(Note: The default value data of the said registry entry is .aiff.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-aiff
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/aiff = "aif,aifc,aiff"

(Note: The default value data of the said registry entry is aif,aifc,aiff.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE0 = "audio/aiff"

(Note: The default value data of the said registry entry is audio/aiff.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/aiff = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/aiff
CLSID = "{cd3afa72-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa72-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/aiff
Extension = ".aiff"

(Note: The default value data of the said registry entry is .aiff.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/aiff
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.au\OpenWithProgIds
AUFile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AUFile
PreferExecuteOnMismatch = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AUFile
EditFlags = "{random values}"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AUFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AUFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.au
Content Type = "audio/basic"

(Note: The default value data of the said registry entry is audio/basic.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.au
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.au
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.snd\OpenWithProgIds
AUFile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.snd
Content Type = "audio/basic"

(Note: The default value data of the said registry entry is audio/basic.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.snd
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.snd
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/basic = "au,snd"

(Note: The default value data of the said registry entry is au,snd.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE1 = "audio/basic"

(Note: The default value data of the said registry entry is audio/basic.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/basic = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/basic
CLSID = "{cd3afa73-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa73-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/basic
Extension = ".au"

(Note: The default value data of the said registry entry is .au.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/basic
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}
Version = "9,0,0,3250"

(Note: The default value data of the said registry entry is 9,0,0,3250.)

HKEY_CURRENT_USER\Software\Microsoft\
Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}
Version = "9,0,0,3250"

(Note: The default value data of the said registry entry is 9,0,0,3250.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
MediaPlayer\PlayerUpgrade
PlayerVersion = "9,0,0,3250"

(Note: The default value data of the said registry entry is 9,0,0,3250.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Active Setup\Installed Components\{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
Version = "9,0,0,3250"

(Note: The default value data of the said registry entry is 9,0,0,3250.)

HKEY_CURRENT_USER\Software\Microsoft\
Active Setup\Installed Components\{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
Version = "9,0,0,3250"

(Note: The default value data of the said registry entry is 9,0,0,3250.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Active Setup\Installed Components\{44BBA848-CC51-11CF-AAFA-00AA00B6015C}
Version = "9,0,0,3250"

(Note: The default value data of the said registry entry is 9,0,0,3250.)

HKEY_CURRENT_USER\Software\Microsoft\
Active Setup\Installed Components\{44BBA848-CC51-11CF-AAFA-00AA00B6015C}
Version = "9,0,0,3250"

(Note: The default value data of the said registry entry is 9,0,0,3250.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Active Setup\Installed Components\{2179C5D3-EBFF-11CF-B6FD-00AA00B4E220}
Version = "9,0,0,3250"

(Note: The default value data of the said registry entry is 9,0,0,3250.)

HKEY_CURRENT_USER\Software\Microsoft\
Active Setup\Installed Components\{2179C5D3-EBFF-11CF-B6FD-00AA00B4E220}
Version = "9,0,0,3250"

(Note: The default value data of the said registry entry is 9,0,0,3250.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
MediaPlayer\Preferences
MyPlayLists = "%User Profile%\My Music\Sample Playlists"

(Note: The default value data of the said registry entry is %System Root%\Documents and Settings\All Users\Documents\My Music\Sample Playlists.)

HKEY_LOCAL_MACHINE\SOFTWARE\Clients\
Media\Windows Media Player\InstallInfo
IconsVisible = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Setup\
Oc Manager\Subcomponents
wmpocm = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Active Setup\Installed Components\{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
DontAsk = "2"

(Note: The default value data of the said registry entry is 2.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Active Setup\Installed Components\{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
IsInstalled = "0"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Active Setup\Installed Components\{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
Stubpath = "%Windows%\inf\unregmp2.exe /ShowWMP"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Setup\CreatedLinks
AppName = "%Program Files%\WINDOW~2\wmplayer.exe"

(Note: The default value data of the said registry entry is %System Root%\PROGRA~1\WINDOW~2\wmplayer.exe.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Setup\CreatedLinks
Shortcut2 = "%Start Menu%\Programs\Accessories\Entertainment\Windows Media Player.lnk"

(Note: The default value data of the said registry entry is %User Profile%\Start Menu\Programs\Accessories\Entertainment\Windows Media Player.lnk.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Setup\CreatedLinks
Shortcut3 = "%Start Menu%\Programs\Windows Media Player.lnk"

(Note: The default value data of the said registry entry is %User Profile%\Start Menu\Programs\Windows Media Player.lnk.)

HKEY_CURRENT_USER\Software\Microsoft\
Windows Media\WMSDK\Namespace
LocalBase = "%Application Data%\Microsoft\Windows Media\9.0\WMSDKNS.XML"

(Note: The default value data of the said registry entry is %System Root%\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\9.0\WMSDKNS.XML.)

HKEY_CURRENT_USER\Software\Microsoft\
Windows Media\WMSDK\Namespace
DTDFile = "%Application Data%\Microsoft\Windows Media\9.0\WMSDKNS.DTD"

(Note: The default value data of the said registry entry is %System Root%\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\9.0\WMSDKNS.DTD.)

HKEY_CURRENT_USER\Software\Microsoft\
Windows Media\WMSDK\Namespace
LocalDelta = "%Application Data%\Microsoft\Windows Media\9.0\WMSDKNSD.XML"

(Note: The default value data of the said registry entry is %System Root%\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\9.0\WMSDKNSD.XML.)

HKEY_CURRENT_USER\Software\Microsoft\
Windows Media\WMSDK\Namespace
RemoteDelta = "%Application Data%\Microsoft\Windows Media\9.0\WMSDKNSR.XML"

(Note: The default value data of the said registry entry is %System Root%\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\9.0\WMSDKNSR.XML.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Battery\Presets\
BrightSphere
Title = "res://wmploc/RT_STRING/#5700"

(Note: The default value data of the said registry entry is res://wmploc/RT_STRING/#5700.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Battery\Presets\
circledance
Title = "res://wmploc/RT_STRING/#5721"

(Note: The default value data of the said registry entry is res://wmploc/RT_STRING/#5721.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Battery\Presets\
cominatya
Title = "res://wmploc/RT_STRING/#5701"

(Note: The default value data of the said registry entry is res://wmploc/RT_STRING/#5701.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Battery\Presets\
cottonstar
Title = "res://wmploc/RT_STRING/#5705"

(Note: The default value data of the said registry entry is res://wmploc/RT_STRING/#5705.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Battery\Presets\
dandelionaid
Title = "res://wmploc/RT_STRING/#5702"

(Note: The default value data of the said registry entry is res://wmploc/RT_STRING/#5702.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Battery\Presets\
DrowningFlower
Title = "res://wmploc/RT_STRING/#5703"

(Note: The default value data of the said registry entry is res://wmploc/RT_STRING/#5703.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Battery\Presets\
EletriArnation
Title = "res://wmploc/RT_STRING/#5704"

(Note: The default value data of the said registry entry is res://wmploc/RT_STRING/#5704.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Battery\Presets\
eventhorizon
Title = "res://wmploc/RT_STRING/#5708"

(Note: The default value data of the said registry entry is res://wmploc/RT_STRING/#5708.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Battery\Presets\
Geeks Kick ASCII
Title = "res://wmploc/RT_STRING/#5723"

(Note: The default value data of the said registry entry is res://wmploc/RT_STRING/#5723.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Battery\Presets\
gemstone matrix
Title = "res://wmploc/RT_STRING/#5706"

(Note: The default value data of the said registry entry is res://wmploc/RT_STRING/#5706.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Battery\Presets\
GrooveSwirl
Title = "res://wmploc/RT_STRING/#5707"

(Note: The default value data of the said registry entry is res://wmploc/RT_STRING/#5707.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Battery\Presets\
illuminator
Title = "res://wmploc/RT_STRING/#5709"

(Note: The default value data of the said registry entry is res://wmploc/RT_STRING/#5709.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Battery\Presets\
ISeeTheTruth
Title = "res://wmploc/RT_STRING/#5710"

(Note: The default value data of the said registry entry is res://wmploc/RT_STRING/#5710.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Battery\Presets\
kaleidoscope
Title = "res://wmploc/RT_STRING/#5711"

(Note: The default value data of the said registry entry is res://wmploc/RT_STRING/#5711.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Battery\Presets\
khemicalnova
Title = "res://wmploc/RT_STRING/#5724"

(Note: The default value data of the said registry entry is res://wmploc/RT_STRING/#5724.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Battery\Presets\
Lotus
Title = "res://wmploc/RT_STRING/#5713"

(Note: The default value data of the said registry entry is res://wmploc/RT_STRING/#5713.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Battery\Presets\
Nerds Are Cool
Title = "res://wmploc/RT_STRING/#5712"

(Note: The default value data of the said registry entry is res://wmploc/RT_STRING/#5712.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Battery\Presets\
relativelycalm
Title = "res://wmploc/RT_STRING/#5714"

(Note: The default value data of the said registry entry is res://wmploc/RT_STRING/#5714.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Battery\Presets\
sleepyspray
Title = "res://wmploc/RT_STRING/#5715"

(Note: The default value data of the said registry entry is res://wmploc/RT_STRING/#5715.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Battery\Presets\
Smoke or Water
Title = "res://wmploc/RT_STRING/#5716"

(Note: The default value data of the said registry entry is res://wmploc/RT_STRING/#5716.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Battery\Presets\
SpidersLastMoment
Title = "res://wmploc/RT_STRING/#5718"

(Note: The default value data of the said registry entry is res://wmploc/RT_STRING/#5718.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Battery\Presets\
strawberryaid
Title = "res://wmploc/RT_STRING/#5719"

(Note: The default value data of the said registry entry is res://wmploc/RT_STRING/#5719.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Battery\Presets\
the world
Title = "res://wmploc/RT_STRING/#5720"

(Note: The default value data of the said registry entry is res://wmploc/RT_STRING/#5720.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Battery\Presets\
tornado
Title = "res://wmploc/RT_STRING/#5722"

(Note: The default value data of the said registry entry is res://wmploc/RT_STRING/#5722.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Battery\Presets\
what is an egab
Title = "res://wmploc/RT_STRING/#5717"

(Note: The default value data of the said registry entry is res://wmploc/RT_STRING/#5717.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences
AutoMetadataCurrentDownloadCount = "0"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences
AutoMetadataCurrent500ServerErrorCount = "0"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences
AutoMetadataCurrent503ServerErrorCount = "0"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences
AutoMetadataCurrentOtherServerErrorCount = "0"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences
AutoMetadataCurrentNetworkErrorCount = "0"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences
AutoMetadataLastResetTime = "1bd38c11"

(Note: The default value data of the said registry entry is 1681679f.)

It deletes the following registry keys:

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\MUILanguages\
FileVersions

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wma

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\audio/x-ms-wma

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wma

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\audio/x-ms-wma

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wax

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\audio/x-ms-wax

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wax

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\audio/x-ms-wax

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wmv

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\video/x-ms-wmv

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wmv

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\video/x-ms-wmv

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wvx

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\video/x-ms-wvx

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wvx

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\video/x-ms-wvx

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.asf

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\video/x-ms-asf

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.asf

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\video/x-ms-asf

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.asx

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.asx

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wpl

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\application/vnd.ms-wpl

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wpl

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\application/vnd.ms-wpl

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wm

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\video/x-ms-wm

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wm

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\video/x-ms-wm

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wmx

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\video/x-ms-wmx

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wmx

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\video/x-ms-wmx

HKEY_CLASSES_ROOT\WMDFile\shellex\
ContextMenuHandlers\WMPPlayAsPlaylist

HKEY_CLASSES_ROOT\WMDFile\shellex\
ContextMenuHandlers\WMPAddToPlaylist

HKEY_CLASSES_ROOT\WMDFile\shellex\
ContextMenuHandlers\WMPBurnAudioCD

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wmd

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\application/x-ms-wmd

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wmd

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\application/x-ms-wmd

HKEY_CLASSES_ROOT\WMZFile\shellex\
ContextMenuHandlers\WMPPlayAsPlaylist

HKEY_CLASSES_ROOT\WMZFile\shellex\
ContextMenuHandlers\WMPAddToPlaylist

HKEY_CLASSES_ROOT\WMZFile\shellex\
ContextMenuHandlers\WMPBurnAudioCD

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wmz

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\application/x-ms-wmz

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wmz

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\application/x-ms-wmz

HKEY_CLASSES_ROOT\CDAFile\shellex\
ContextMenuHandlers\WMPPlayAsPlaylist

HKEY_CLASSES_ROOT\CDAFile\shellex\
ContextMenuHandlers\WMPAddToPlaylist

HKEY_CLASSES_ROOT\CDAFile\shellex\
ContextMenuHandlers\WMPBurnAudioCD

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.mp3

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\audio/mpeg

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.mp3

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\audio/mpeg

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.m3u

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\audio/x-mpegurl

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.m3u

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\audio/x-mpegurl

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.avi

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\video/avi

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.avi

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\video/avi

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wav

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\audio/wav

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wav

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\audio/wav

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.mpeg

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\video/mpeg

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.mpeg

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\video/mpeg

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.mpg

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.mpg

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.mpe

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.mpe

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.m1v

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.m1v

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.mp2

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.mp2

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.mpv2

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.mpv2

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.mp2v

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.mp2v

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.mpa

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.mpa

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.mid

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\audio/mid

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.mid

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\audio/mid

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.midi

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.midi

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.rmi

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.rmi

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.au

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\audio/basic

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.au

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\audio/basic

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.snd

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.snd

HKEY_LOCAL_MACHINE\Software\Microsoft\
Windows\CurrentVersion\Uninstall\
WMP7

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\MPlayer2\Groups\
Video\QT

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\MPlayer2\Extensions\
.mov

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\MPlayer2\Extensions\
.qt

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\MPlayer2\MIME Types\
video/quicktime

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.ivf

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ivf

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Groups\
Video\IVF

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
MediaPlayer\Control\Advanced Options\
Windows Media

HKEY_CURRENT_USER\Software\Microsoft\
Active Setup\Installed Components\{22d6f312-b0f6-11d0-94ab-0080c74c7e95}

Dropping Routine

This Trojan drops the following files:

• %User Profile%\Application Data\winite.exe
• %User Profile%\HTML Help\hh.dat
• %User Profile%\Quick Launch\Windows Media Player.lnk
• %Application Data%\Microsoft\Windows Media\9.0\WMSDKNS.XML.bak
• %Application Data%\Microsoft\Windows Media\9.0\WMSDKNS.XML.done
• %Application Data%\Microsoft\Windows Media\9.0\WMSDKNSD.XML
• %Application Data%\Microsoft\Windows Media\9.0\WMSDKNS.XML

(Note: %User Profile% is a user's profile folder, where it usually is C:\Documents and Settings\{user name} on Windows 2000, Windows Server 2003, and Windows XP (32- and 64-bit); C:\Users\{user name} on Windows Vista (32- and 64-bit), Windows 7 (32- and 64-bit), Windows 8 (32- and 64-bit), Windows 8.1 (32- and 64-bit), Windows Server 2008, and Windows Server 2012.. %Application Data% is the Application Data folder, where it usually is C:\Documents and Settings\{user name}\Application Data on Windows 2000, Windows Server 2003, and Windows XP (32- and 64-bit); C:\Users\{user name}\AppData\Roaming on Windows Vista (32- and 64-bit), Windows 7 (32- and 64-bit), Windows 8 (32- and 64-bit), Windows 8.1 (32- and 64-bit), Windows Server 2008, and Windows Server 2012.)

Other Details

This Trojan connects to the following possibly malicious URL:

• {BLOCKED}0.1

This report is generated via an automated analysis system.