• Email
• Facebook
• Twitter
• Google+
• Linkedin

TROJ_DLOADR.AG

---

• マルウェアタイプ: トロイの木馬型
• 破壊活動の有無: なし
• 暗号化:  
• 感染報告の有無: はい

---

  概要

マルウェアは、他のマルウェアに作成されるか、悪意あるWebサイトからユーザが誤ってダウンロードすることによりコンピュータに侵入します。

マルウェアは、ファイルを改変します。これにより、該当プログラムおよびアプリケーションが正しく実行されなくなります。

---

  詳細

侵入方法

マルウェアは、他のマルウェアに作成されるか、悪意あるWebサイトからユーザが誤ってダウンロードすることによりコンピュータに侵入します。

インストール

マルウェアは、以下のフォルダを作成します。

• %System Root%\DOCUME~1
• %System Root%\DOCUME~1\Wilbert
• %User Profile%\LOCALS~1
• %User Profile%\Microsoft\HTML Help
• %Application Data%\Microsoft
• %Application Data%\Microsoft\Windows Media
• %Application Data%\Microsoft\Windows Media\9.0
• %User Profile%\Microsoft\Dr Watson

(註：%System Root%は、標準設定では "C:" です。また、オペレーティングシステムが存在する場所です。. %User Profile% フォルダは、Windows 98 および MEの場合、"C:\Windows\Profiles\＜ユーザ名＞"、Windows NTでは、"C:\WINNT\Profiles\＜ユーザ名＞"、Windows 2000, XP, Server 2003の場合は、"C:\Documents and Settings\＜ユーザ名＞" です。. %Application Data%フォルダは、 Windows 2000、XP、Server 2003 の場合 "C:\Documents and Settings\＜ユーザ名＞\Local Settings\Application Data" 、 Windows NTの場合 "C:\WINNT\Profiles\＜ユーザ名＞\Application Data"、Windows 98 および MEの場合、"C:\Windows\Profiles\＜ユーザ名＞\Application Data" です。)

自動実行方法

マルウェアは、自身のコピーがWindows起動時に自動実行されるよう以下のレジストリ値を追加します。

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}
Version = "9,0,0,3250"

HKEY_CURRENT_USER\Software\Microsoft\
Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}
Version = "9,0,0,3250"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Active Setup\Installed Components\{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
Version = "9,0,0,3250"

HKEY_CURRENT_USER\Software\Microsoft\
Active Setup\Installed Components\{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
Version = "9,0,0,3250"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Active Setup\Installed Components\{44BBA848-CC51-11CF-AAFA-00AA00B6015C}
Version = "9,0,0,3250"

HKEY_CURRENT_USER\Software\Microsoft\
Active Setup\Installed Components\{44BBA848-CC51-11CF-AAFA-00AA00B6015C}
Version = "9,0,0,3250"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Active Setup\Installed Components\{2179C5D3-EBFF-11CF-B6FD-00AA00B4E220}
Version = "9,0,0,3250"

HKEY_CURRENT_USER\Software\Microsoft\
Active Setup\Installed Components\{2179C5D3-EBFF-11CF-B6FD-00AA00B4E220}
Version = "9,0,0,3250"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
DontAsk = 2

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
Version = "9,0,0,3250"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
Stubpath = "%Windows%\inf\unregmp2.exe /ShowWMP"

他のシステム変更

マルウェアは、以下のファイルを改変します。

• %Start Menu%\Programs\Accessories\Entertainment\Windows Media Player.lnk
• %Start Menu%\Programs\Windows Media Player.lnk
• %Application Data%\Microsoft\Windows Media\9.0\WMSDKNS.XML
• %Application Data%\Microsoft\Windows Media\9.0\WMSDKNS.DTD

(註： %Start Menu%フォルダは、通常、Windows 98 および MEの場合、"C:\Windows\Profiles\＜ユーザ名＞\Start Menu" 、Windows NTの場合、"C:\WINNT\Profiles\＜ユーザ名＞\Start Menu "、Windows 2000、XP、Server 2003の場合、"C:\Windows\Start Menu" および "C:\Documents and Settings\＜ユーザ名＞\Start Menu " です。. %Application Data%フォルダは、 Windows 2000、XP、Server 2003 の場合 "C:\Documents and Settings\＜ユーザ名＞\Local Settings\Application Data" 、 Windows NTの場合 "C:\WINNT\Profiles\＜ユーザ名＞\Application Data"、Windows 98 および MEの場合、"C:\Windows\Profiles\＜ユーザ名＞\Application Data" です。)

マルウェアは、以下のファイルを削除します。

• %System%\drivers\etc\hosts
• %Start Menu%\Programs\Accessories\Entertainment\ActiveMovie Control.lnk
• %Desktop%\ActiveMovie Control.lnk
• %Start Menu%\Programs\Accessories\Entertainment\ActiveMovie File Types.lnk
• %Desktop%\ActiveMovie File Types.lnk
• Windows Media Player.lnk
• %Start Menu%\Programs\Accessories\Entertainment\Beta Windows Media Player.lnk
• %User Profile%\Quick Launch\Beta Windows Media Player.lnk
• %Start Menu%\Programs\Beta Windows Media Player.lnk
• %Windows% Media Player.lnk
• %Application Data%\Microsoft\Windows Media\9.0\WMSDKNSR.XML

(註：%System%はWindowsの種類とインストール時の設定などにより異なります。標準設定では、Windows 98 および MEの場合、"C:\Windows\System"、Windows NT および 2000 の場合、"C:\WinNT\System32"、Windows XP および Server 2003 の場合、"C:\Windows\System32" です。. %Start Menu%フォルダは、通常、Windows 98 および MEの場合、"C:\Windows\Profiles\＜ユーザ名＞\Start Menu" 、Windows NTの場合、"C:\WINNT\Profiles\＜ユーザ名＞\Start Menu "、Windows 2000、XP、Server 2003の場合、"C:\Windows\Start Menu" および "C:\Documents and Settings\＜ユーザ名＞\Start Menu " です。. %Desktop%フォルダは、Windows 98 および MEの場合、通常 "C:\Windows\Profiles\＜ユーザ名＞\デスクトップ" です。 Windows NTの場合、"C:\WINNT\Profiles\＜ユーザ名＞\デスクトップ"、Windows 2000、XP、Server 2003の場合は "C:\Documents and Settings\＜ユーザ名＞\デスクトップ" です。. %User Profile% フォルダは、Windows 98 および MEの場合、"C:\Windows\Profiles\＜ユーザ名＞"、Windows NTでは、"C:\WINNT\Profiles\＜ユーザ名＞"、Windows 2000, XP, Server 2003の場合は、"C:\Documents and Settings\＜ユーザ名＞" です。. %Windows%はWindowsの種類とインストール時の設定などにより異なります。標準設定では、Windows9x、Me、XP、Server 2003の場合、"C:\Window"、WindowsNT および 2000の場合、"C:\WINNT" です。. %Application Data%フォルダは、 Windows 2000、XP、Server 2003 の場合 "C:\Documents and Settings\＜ユーザ名＞\Local Settings\Application Data" 、 Windows NTの場合 "C:\WINNT\Profiles\＜ユーザ名＞\Application Data"、Windows 98 および MEの場合、"C:\Windows\Profiles\＜ユーザ名＞\Application Data" です。)

マルウェアは、以下のフォルダを削除します。

• %Start Menu%\Programs\Accessories\Entertainment
• %Start Menu%\Programs\Accessories\Entertainment\

(註： %Start Menu%フォルダは、通常、Windows 98 および MEの場合、"C:\Windows\Profiles\＜ユーザ名＞\Start Menu" 、Windows NTの場合、"C:\WINNT\Profiles\＜ユーザ名＞\Start Menu "、Windows 2000、XP、Server 2003の場合、"C:\Windows\Start Menu" および "C:\Documents and Settings\＜ユーザ名＞\Start Menu " です。)

マルウェアは、以下のレジストリキーを追加します。

HKEY_CURRENT_USER\Software\WinRAR SFX

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}\
Default MidiOut Device

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}\
Default DirectSound Device

HKEY_CURRENT_USER\Software\Microsoft\
Multimedia\ActiveMovie\Filter Cache

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Setup\UserOptions

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\RunOnce

HKEY_LOCAL_MACHINE\Software\Microsoft\
Windows\CurrentVersion\Uninstall\
MPlayer2

HKEY_CLASSES_ROOT\WMP.DeskBand.1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMP.DeskBand.1\CLSID

HKEY_CLASSES_ROOT\WMP.DeskBand

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMP.DeskBand\CLSID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{0A4286EA-E355-44FB-8086-AF3DF7645BD9}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{0A4286EA-E355-44FB-8086-AF3DF7645BD9}\ProgID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{0A4286EA-E355-44FB-8086-AF3DF7645BD9}\VersionIndependentProgID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{0A4286EA-E355-44FB-8086-AF3DF7645BD9}\InprocServer32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{B6DD1ED6-573F-40FD-99A1-F28D8BF23916}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{B6DD1ED6-573F-40FD-99A1-F28D8BF23916}\1.0

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{B6DD1ED6-573F-40FD-99A1-F28D8BF23916}\1.0\
FLAGS

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{B6DD1ED6-573F-40FD-99A1-F28D8BF23916}\1.0\
0

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{B6DD1ED6-573F-40FD-99A1-F28D8BF23916}\1.0\
0\win32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{B6DD1ED6-573F-40FD-99A1-F28D8BF23916}\1.0\
HELPDIR

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{0A55922C-3B1F-469B-8D0D-B15060499A52}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{0A55922C-3B1F-469B-8D0D-B15060499A52}\ProxyStubClsid

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{0A55922C-3B1F-469B-8D0D-B15060499A52}\ProxyStubClsid32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{0A55922C-3B1F-469B-8D0D-B15060499A52}\TypeLib

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Health\{C426A1A3-4A13-4558-BCC3-9995D52C061B}

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\DropDown

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences\ProxySettings

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences\ProxySettings\
MMS

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences\ProxySettings\
HTTP

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences\ProxySettings\
RTSP

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences\EqualizerSettings

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Player\RecentFileList

マルウェアは、以下のレジストリ値を追加します。

HKEY_CURRENT_USER\Software\WinRAR SFX
C%%DOCUME~1%Wilbert%LOCALS~1%Temp = "%User Temp%"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
MediaPlayer
MP2.SaveDir = "%Program Files%\Windows Media Player"

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}\
Default MidiOut Device
FriendlyName = "Default MidiOut Device"

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}\
Default MidiOut Device
CLSID = "{07B65360-C445-11CE-AFDE-00AA006C14F4}"

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}\
Default MidiOut Device
FilterData = {random values}

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}\
Default MidiOut Device
MidiOutId = ffffffff

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}\
Default DirectSound Device
FriendlyName = "Default DirectSound Device"

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}\
Default DirectSound Device
CLSID = "{79376820-07D0-11CF-A24D-0020AFD79767}"

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}\
Default DirectSound Device
FilterData = {random values}

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}\
Default DirectSound Device
DSGuid = "{00000000-0000-0000-0000-000000000000}"

HKEY_CURRENT_USER\Software\Microsoft\
Multimedia\ActiveMovie\Filter Cache
0 = {random values}

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences
AcceptedPrivacyStatement = 1

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences
MetadataRetrieval = 3

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences
SendUserGUID = {random values}

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences
SilentAcquisition = 1

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Setup\UserOptions
DesktopShortcut = "no"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Setup\UserOptions
QuickLaunchShortcut = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayCDAudioOnArrival
Action = "@wmploc.dll,-6503"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayCDAudioOnArrival
Provider = "@wmploc.dll,-6502"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayCDAudioOnArrival
InvokeProgID = "WMP.AudioCD"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayCDAudioOnArrival
InvokeVerb = "play"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayCDAudioOnArrival
DefaultIcon = "%ProgramFiles%\Windows Media Player\wmplayer.exe,0"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSRipCDAudioOnArrival
Action = "@wmploc.dll,-6506"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSRipCDAudioOnArrival
Provider = "@wmploc.dll,-6502"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSRipCDAudioOnArrival
InvokeProgID = "WMP.RipCD"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSRipCDAudioOnArrival
InvokeVerb = "Rip"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSRipCDAudioOnArrival
DefaultIcon = "%ProgramFiles%\Windows Media Player\wmplayer.exe,0"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMPBurnCDOnArrival
Action = "@wmploc.dll,-6505"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMPBurnCDOnArrival
Provider = "@wmploc.dll,-6502"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMPBurnCDOnArrival
InvokeProgID = "WMP.BurnCD"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMPBurnCDOnArrival
InvokeVerb = "Burn"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMPBurnCDOnArrival
DefaultIcon = "%ProgramFiles%\Windows Media Player\wmplayer.exe,0"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayDVDMovieOnArrival
Action = "@wmploc.dll,-6504"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayDVDMovieOnArrival
Provider = "@wmploc.dll,-6502"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayDVDMovieOnArrival
InvokeProgID = "WMP.DVD"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayDVDMovieOnArrival
InvokeVerb = "play"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayDVDMovieOnArrival
DefaultIcon = "%ProgramFiles%\Windows Media Player\wmplayer.exe,0"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMDMHandler
Action = "Transfer Files"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMDMHandler
CLSIDForCancel = "{91778246-9BE4-4713-A651-E833B853CC30}"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMDMHandler
DefaultIcon = "%ProgramFiles%\Windows Media Player\wmplayer.exe,0"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMDMHandler
InitCmdLine = {random characters}

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMDMHandler
ProgID = "Shell.HWEventHandlerShellExecute"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMDMHandler
Provider = "@wmploc.dll,-6502"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wma
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wma\OpenWithProgIds
WMAFile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
wmafile
PreferExecuteOnMismatch = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
wmafile
EditFlags = {random values}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
wmafile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
wmafile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wma
Content Type = "audio/x-ms-wma"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wma
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wma
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wax
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wax\OpenWithProgIds
WAXFile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WAXFile
PreferExecuteOnMismatch = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WAXFile
EditFlags = {random values}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WAXFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WAXFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wax
Content Type = "audio/x-ms-wax"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wax
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wax
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-ms-wma
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/x-ms-wma = "wma"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE17 = "audio/x-ms-wma"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/x-ms-wma = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\User Trusted External Applications
"C:\PROGRA~1\WINDOW~2\wmplayer.exe" = "Yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\User Trusted External Applications
%Program Files%\WINDOW~2\wmplayer.exe = "Yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\User Trusted External Applications
"C:\Program Files\Windows Media Player\wmplayer.exe" = "Yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\User Trusted External Applications
%Program Files%\Windows Media Player\wmplayer.exe = "Yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-ms-wma
CLSID = "{cd3afa84-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-ms-wma
Extension = ".wma"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-ms-wma
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-ms-wax
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/x-ms-wax = "wax"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE16 = "audio/x-ms-wax"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/x-ms-wax = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-ms-wax
CLSID = "{cd3afa83-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-ms-wax
Extension = ".wax"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-ms-wax
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wmv
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wmv\OpenWithProgIds
WMVFile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMVFile
PreferExecuteOnMismatch = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMVFile
EditFlags = {random values}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMVFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMVFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wmv
Content Type = "video/x-ms-wmv"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wmv
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wmv
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wvx
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wvx\OpenWithProgIds
WVXFile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WVXFile
PreferExecuteOnMismatch = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WVXFile
EditFlags = {random values}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WVXFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WVXFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wvx
Content Type = "video/x-ms-wvx"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wvx
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wvx
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-wmv
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/x-ms-wmv = "wmv"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE29 = "video/x-ms-wmv"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/x-ms-wmv = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-wmv
CLSID = "{cd3afa94-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-wmv
Extension = ".wmv"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-wmv
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-wvx
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/x-ms-wvx = "wvx"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE31 = "video/x-ms-wvx"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/x-ms-wvx = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-wvx
CLSID = "{cd3afa95-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-wvx
Extension = ".wvx"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-wvx
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.asf
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.asf\OpenWithProgIds
ASFFile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
ASFFile
PreferExecuteOnMismatch = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
ASFFile
EditFlags = {random values}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
ASFFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
ASFFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.asf
Content Type = "video/x-ms-asf"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.asf
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.asf
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.asx
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.asx\OpenWithProgIds
ASXFile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
ASXFile
PreferExecuteOnMismatch = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
ASXFile
EditFlags = {random values}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
ASXFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
ASXFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.asx
Content Type = "video/x-ms-asf"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.asx
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.asx
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.dvr-ms
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.dvr-ms\OpenWithProgIds
WMP.DVR-MSFile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMP.DVR-MSFile
PreferExecuteOnMismatch = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMP.DVR-MSFile
EditFlags = {random values}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMP.DVR-MSFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMP.DVR-MSFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.dvr-ms
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wpl
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wpl\OpenWithProgIds
WPLFile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WPLFile
PreferExecuteOnMismatch = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WPLFile
EditFlags = {random values}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WPLFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WPLFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wpl
Content Type = "application/vnd.ms-wpl"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wpl
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wpl
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wm
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wm\OpenWithProgIds
ASFFile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wm
Content Type = "video/x-ms-wm"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wm
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wm
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wmx
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wmx\OpenWithProgIds
ASXFile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wmx
Content Type = "video/x-ms-wmx"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wmx
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wmx
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wmd
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wmd\OpenWithProgIds
WMDFile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMDFile
PreferExecuteOnMismatch = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMDFile
EditFlags = {random values}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wmd
Content Type = "application/x-ms-wmd"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wmd
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wmd
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wmz
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wmz\OpenWithProgIds
WMZFile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMZFile
PreferExecuteOnMismatch = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMZFile
EditFlags = {random values}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wmz
Content Type = "application/x-ms-wmz"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wmz
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wmz
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
application/x-mplayer2
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
application/x-mplayer2
CLSID = "{cd3afa8f-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
application/x-mplayer2
Extension = ".asx"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
application/x-mplayer2
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
application/vnd.ms-wpl
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
application/vnd.ms-wpl
CLSID = "{cd3afa95-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
application/vnd.ms-wpl
Extension = ".wpl"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
application/vnd.ms-wpl
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-asf
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/x-ms-asf = "asf,asx,wm,wmx"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE26 = "video/x-ms-asf"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/x-ms-asf = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-asf
CLSID = "{cd3afa8f-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-asf
Extension = ".asx"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-asf
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-asf-plugin
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/x-ms-asf-plugin = "asf,asx,wm,wmx"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE27 = "video/x-ms-asf-plugin"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/x-ms-asf-plugin = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-asf-plugin
CLSID = "{cd3afa8f-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-asf-plugin
Extension = ".asx"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-asf-plugin
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-wm
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/x-ms-wm = "asf,asx,wm,wmx"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE28 = "video/x-ms-wm"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/x-ms-wm = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-wm
CLSID = "{cd3afa92-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-wm
Extension = ".wm"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-wm
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-wmx
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/x-ms-wmx = "asf,asx,wm,wmx"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE30 = "video/x-ms-wmx"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/x-ms-wmx = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-wmx
CLSID = "{cd3afa93-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-wmx
Extension = ".wmx"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-wmx
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
application/x-ms-wmd
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
application/x-ms-wmd
CLSID = "{ee4da6a4-8c52-4a63-bbb8-97c93d7e1b6c}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
application/x-ms-wmd
Extension = ".wmd"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
application/x-ms-wmd
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
application/x-ms-wmz
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
application/x-ms-wmz
CLSID = "{cd3afa71-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
application/x-ms-wmz
Extension = ".wmz"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
application/x-ms-wmz
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Protocols\
mms
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MMS
Source Filter = "{6B6D0800-9ADA-11d0-A520-00A0D10129C0}"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Protocols\
mms
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Protocols\
mmst
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MMST
Source Filter = "{6B6D0800-9ADA-11d0-A520-00A0D10129C0}"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Protocols\
mmst
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Protocols\
mmsu
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MMSU
Source Filter = "{6B6D0800-9ADA-11d0-A520-00A0D10129C0}"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Protocols\
mmsu
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Protocols\
msbd
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MSBD
Source Filter = "{6B6D0800-9ADA-11d0-A520-00A0D10129C0}"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Protocols\
msbd
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.cda
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.cda\OpenWithProgIds
CDAFile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
cdafile
PreferExecuteOnMismatch = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
cdafile
EditFlags = {random values}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
cdafile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.cda
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Devices\
AudioCD
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AudioCD\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Devices\
AudioCD
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mp3
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mp3\OpenWithProgIds
mp3file = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
mp3file
PreferExecuteOnMismatch = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
mp3file
EditFlags = {random values}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
mp3file\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
mp3file\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mp3
Content Type = "audio/mpeg"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.mp3
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mp3
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.m3u
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.m3u\OpenWithProgIds
m3ufile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
m3ufile
PreferExecuteOnMismatch = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
m3ufile
EditFlags = {random values}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
m3ufile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
m3ufile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.m3u
Content Type = "audio/x-mpegurl"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.m3u
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.m3u
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mpeg
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/mpeg = "mp3"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE5 = "audio/mpeg"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/mpeg = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mpeg
CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mpeg
Extension = ".mp3"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mpeg
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mpg
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/mpg = "mp3"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE7 = "audio/mpg"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/mpg = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mpg
CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mpg
Extension = ".mp3"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mpg
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mp3
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/mp3 = "mp3"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE4 = "audio/mp3"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/mp3 = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mp3
CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mp3
Extension = ".mp3"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mp3
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mpeg
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/x-mpeg = "mp3"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE13 = "audio/x-mpeg"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/x-mpeg = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mpeg
CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mpeg
Extension = ".mp3"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mpeg
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mpg
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/x-mpg = "mp3"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE15 = "audio/x-mpg"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/x-mpg = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mpg
CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mpg
Extension = ".mp3"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mpg
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mp3
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/x-mp3 = "mp3"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE12 = "audio/x-mp3"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/x-mp3 = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mp3
CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mp3
Extension = ".mp3"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mp3
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mpegurl
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/mpegurl = "m3u"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE6 = "audio/mpegurl"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/mpegurl = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mpegurl
CLSID = "{cd3afa78-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mpegurl
Extension = ".m3u"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mpegurl
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mpegurl
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/x-mpegurl = "m3u"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE14 = "audio/x-mpegurl"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/x-mpegurl = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mpegurl
CLSID = "{cd3afa78-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mpegurl
Extension = ".m3u"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mpegurl
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.avi
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.avi\OpenWithProgIds
avifile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AVIFile
PreferExecuteOnMismatch = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AVIFile
EditFlags = {random values}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AVIFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AVIFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.avi
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.avi
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/avi
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/avi = "avi"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE20 = "video/avi"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/avi = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/avi
CLSID = "{cd3afa88-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/avi
Extension = ".avi"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/avi
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/msvideo
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/msvideo = "avi"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE23 = "video/msvideo"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/msvideo = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/msvideo
CLSID = "{cd3afa88-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/msvideo
Extension = ".avi"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/msvideo
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-msvideo
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/x-msvideo = "avi"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE32 = "video/x-msvideo"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/x-msvideo = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-msvideo
CLSID = "{cd3afa88-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-msvideo
Extension = ".avi"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-msvideo
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wav
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wav\OpenWithProgIds
soundrec = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SoundRec
PreferExecuteOnMismatch = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SoundRec
EditFlags = {random values}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SoundRec\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SoundRec\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wav
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wav
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/wav
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/wav = "wav"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE8 = "audio/wav"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/wav = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/wav
CLSID = "{cd3afa7b-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/wav
Extension = ".wav"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/wav
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-wav
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/x-wav = "wav"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE18 = "audio/x-wav"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/x-wav = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-wav
CLSID = "{cd3afa7b-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-wav
Extension = ".wav"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-wav
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpeg
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpeg\OpenWithProgIds
mpegfile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
mpegfile
PreferExecuteOnMismatch = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
mpegfile
EditFlags = {random values}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
mpegfile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
mpegfile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpeg
Content Type = "video/mpeg"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.mpeg
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpeg
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpg
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpg\OpenWithProgIds
mpegfile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpg
Content Type = "video/mpeg"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.mpg
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpg
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpe
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpe\OpenWithProgIds
mpegfile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpe
Content Type = "video/mpeg"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.mpe
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpe
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.m1v
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.m1v\OpenWithProgIds
mpegfile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.m1v
Content Type = "video/mpeg"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.m1v
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.m1v
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mp2
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mp2\OpenWithProgIds
mpegfile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mp2
Content Type = "video/mpeg"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.mp2
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mp2
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpv2
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpv2\OpenWithProgIds
mpegfile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpv2
Content Type = "video/mpeg"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.mpv2
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpv2
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mp2v
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mp2v\OpenWithProgIds
mpegfile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mp2v
Content Type = "video/mpeg"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.mp2v
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mp2v
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpa
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpa\OpenWithProgIds
mpegfile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpa
Content Type = "video/mpeg"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.mpa
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpa
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/mpeg
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/mpeg = "mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE21 = "video/mpeg"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/mpeg = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/mpeg
CLSID = "{cd3afa89-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/mpeg
Extension = ".mpeg"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/mpeg
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-mpeg
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/x-mpeg = "mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE24 = "video/x-mpeg"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/x-mpeg = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-mpeg
CLSID = "{cd3afa89-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-mpeg
Extension = ".mpeg"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-mpeg
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-mpeg2a
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/x-mpeg2a = "mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE25 = "video/x-mpeg2a"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/x-mpeg2a = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-mpeg2a
CLSID = "{cd3afa89-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-mpeg2a
Extension = ".mpeg"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-mpeg2a
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/mpg
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/mpg = "mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE22 = "video/mpg"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/mpg = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/mpg
CLSID = "{cd3afa89-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/mpg
Extension = ".mpeg"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/mpg
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mid
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mid\OpenWithProgIds
midfile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIDFile
PreferExecuteOnMismatch = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIDFile
EditFlags = {random values}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIDFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIDFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mid
Content Type = "audio/mid"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.mid
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mid
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.midi
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.midi\OpenWithProgIds
midfile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.midi
Content Type = "audio/mid"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.midi
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.midi
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.rmi
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.rmi\OpenWithProgIds
midfile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.rmi
Content Type = "audio/mid"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.rmi
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.rmi
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mid
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/mid = "mid,midi,rmi"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE2 = "audio/mid"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/mid = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mid
CLSID = "{cd3afa74-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mid
Extension = ".mid"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mid
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/midi
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/midi = "mid,midi,rmi"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE3 = "audio/midi"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/midi = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/midi
CLSID = "{cd3afa74-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/midi
Extension = ".mid"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/midi
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mid
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/x-mid = "mid,midi,rmi"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE10 = "audio/x-mid"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/x-mid = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mid
CLSID = "{cd3afa74-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mid
Extension = ".mid"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mid
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-midi
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/x-midi = "mid,midi,rmi"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE11 = "audio/x-midi"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/x-midi = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-midi
CLSID = "{cd3afa74-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-midi
Extension = ".mid"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-midi
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
midi/mid
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
midi/mid = "mid,midi,rmi"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE19 = "midi/mid"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
midi/mid = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
midi/mid
CLSID = "{cd3afa74-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
midi/mid
Extension = ".mid"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
midi/mid
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.aif
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.aif\OpenWithProgIds
AIFFFile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AIFFFile
PreferExecuteOnMismatch = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AIFFFile
EditFlags = {random values}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AIFFFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AIFFFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.aif
Content Type = "audio/aiff"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.aif
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.aif
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.aifc
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.aifc\OpenWithProgIds
AIFFFile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.aifc
Content Type = "audio/aiff"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.aifc
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.aifc
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.aiff
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.aiff\OpenWithProgIds
AIFFFile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.aiff
Content Type = "audio/aiff"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.aiff
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.aiff
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-aiff
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/x-aiff = "aif,aifc,aiff"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE9 = "audio/x-aiff"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/x-aiff = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-aiff
CLSID = "{cd3afa72-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-aiff
Extension = ".aiff"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-aiff
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/aiff
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/aiff = "aif,aifc,aiff"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE0 = "audio/aiff"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/aiff = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/aiff
CLSID = "{cd3afa72-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/aiff
Extension = ".aiff"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/aiff
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.au
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.au\OpenWithProgIds
AUFile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AUFile
PreferExecuteOnMismatch = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AUFile
EditFlags = {random values}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AUFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AUFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.au
Content Type = "audio/basic"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.au
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.au
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.snd
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.snd\OpenWithProgIds
AUFile = "[REG_NONE, size: 0 bytes]"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.snd
Content Type = "audio/basic"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.snd
MPlayer2.Set = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.snd
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/basic
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/basic = "au,snd"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE1 = "audio/basic"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/basic = ""%Program Files%\WINDOW~2\wmplayer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/basic
CLSID = "{cd3afa73-b84f-48f0-9393-7edc34128127}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/basic
Extension = ".au"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/basic
AlreadyRegistered = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
MediaPlayer\PlayerUpgrade
PlayerVersion = "9,0,0,3250"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
MediaPlayer\Preferences
MyPlayLists = "%User Profile%\My Music\Sample Playlists"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{0A4286EA-E355-44FB-8086-AF3DF7645BD9}\InprocServer32
ThreadingModel = "Apartment"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{0A55922C-3B1F-469B-8D0D-B15060499A52}\TypeLib
Version = "1.0"

HKEY_LOCAL_MACHINE\SOFTWARE\Clients\
Media\Windows Media Player\InstallInfo
IconsVisible = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Setup\
Oc Manager\Subcomponents
wmpocm = 1

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Setup\CreatedLinks
AppName = "%Program Files%\WINDOW~2\wmplayer.exe"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Setup\CreatedLinks
Shortcut2 = "%Start Menu%\Programs\Accessories\Entertainment\Windows Media Player.lnk"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Setup\CreatedLinks
Shortcut4 = "%User Profile%\Quick Launch\Windows Media Player.lnk"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Setup\CreatedLinks
Shortcut3 = "%Start Menu%\Programs\Windows Media Player.lnk"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences
LaunchIndex = 1

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Player\Tasks\
NowPlaying
InitFlags = 1

HKEY_CURRENT_USER\Software\Microsoft\
Windows Media\WMSDK\General
UniqueID = "{E093AE47-8983-45BD-A0C7-472EAA1C9F1D}"

HKEY_CURRENT_USER\Software\Microsoft\
Windows Media\WMSDK\General
ComputerName = "WILBERT-68E5850"

HKEY_CURRENT_USER\Software\Microsoft\
Windows Media\WMSDK\General
VolumeSerialNumber = 68adfd

HKEY_CURRENT_USER\Software\Microsoft\
Windows Media\WMSDK\Namespace
LocalBase = "%Application Data%\Microsoft\Windows Media\9.0\WMSDKNS.XML"

HKEY_CURRENT_USER\Software\Microsoft\
Windows Media\WMSDK\Namespace
DTDFile = "%Application Data%\Microsoft\Windows Media\9.0\WMSDKNS.DTD"

HKEY_CURRENT_USER\Software\Microsoft\
Windows Media\WMSDK\Namespace
LocalDelta = "%Application Data%\Microsoft\Windows Media\9.0\WMSDKNSD.XML"

HKEY_CURRENT_USER\Software\Microsoft\
Windows Media\WMSDK\Namespace
RemoteDelta = "%Application Data%\Microsoft\Windows Media\9.0\WMSDKNSR.XML"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences\ProxySettings\
MMS
ProxyPort = 6db

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences\ProxySettings\
HTTP
ProxyStyle = 1

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences\ProxySettings\
HTTP
ProxyPort = 5

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences\ProxySettings\
RTSP
ProxyPort = 22a

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Player\RecentFileList
File0 = "%User Temp%\video78634.avi"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
DrWatson
NumberOfCrashes = 1

マルウェアは、以下のレジストリキーを削除します。

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\MUILanguages\
FileVersions

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wma

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\audio/x-ms-wma

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wma

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\audio/x-ms-wma

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wax

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\audio/x-ms-wax

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wax

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\audio/x-ms-wax

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wmv

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\video/x-ms-wmv

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wmv

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\video/x-ms-wmv

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wvx

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\video/x-ms-wvx

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wvx

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\video/x-ms-wvx

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.asf

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\video/x-ms-asf

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.asf

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\video/x-ms-asf

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.asx

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.asx

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wpl

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\application/vnd.ms-wpl

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wpl

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\application/vnd.ms-wpl

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wm

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\video/x-ms-wm

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wm

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\video/x-ms-wm

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wmx

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\video/x-ms-wmx

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wmx

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\video/x-ms-wmx

HKEY_CLASSES_ROOT\WMDFile\shellex\
ContextMenuHandlers\WMPPlayAsPlaylist

HKEY_CLASSES_ROOT\WMDFile\shellex\
ContextMenuHandlers\WMPAddToPlaylist

HKEY_CLASSES_ROOT\WMDFile\shellex\
ContextMenuHandlers\WMPBurnAudioCD

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wmd

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\application/x-ms-wmd

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wmd

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\application/x-ms-wmd

HKEY_CLASSES_ROOT\WMZFile\shellex\
ContextMenuHandlers\WMPPlayAsPlaylist

HKEY_CLASSES_ROOT\WMZFile\shellex\
ContextMenuHandlers\WMPAddToPlaylist

HKEY_CLASSES_ROOT\WMZFile\shellex\
ContextMenuHandlers\WMPBurnAudioCD

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wmz

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\application/x-ms-wmz

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wmz

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\application/x-ms-wmz

HKEY_CLASSES_ROOT\CDAFile\shellex\
ContextMenuHandlers\WMPPlayAsPlaylist

HKEY_CLASSES_ROOT\CDAFile\shellex\
ContextMenuHandlers\WMPAddToPlaylist

HKEY_CLASSES_ROOT\CDAFile\shellex\
ContextMenuHandlers\WMPBurnAudioCD

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.mp3

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\audio/mpeg

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.mp3

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\audio/mpeg

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.m3u

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\audio/x-mpegurl

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.m3u

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\audio/x-mpegurl

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.avi

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\video/avi

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.avi

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\video/avi

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wav

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\audio/wav

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wav

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\audio/wav

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.mpeg

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\video/mpeg

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.mpeg

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\video/mpeg

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.mpg

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.mpg

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.mpe

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.mpe

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.m1v

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.m1v

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.mp2

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.mp2

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.mpv2

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.mpv2

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.mp2v

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.mp2v

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.mpa

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.mpa

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.mid

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\audio/mid

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.mid

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\audio/mid

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.midi

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.midi

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.rmi

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.rmi

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.au

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\audio/basic

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.au

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\audio/basic

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.snd

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.snd

HKEY_LOCAL_MACHINE\Software\Microsoft\
Windows\CurrentVersion\Uninstall\
WMP7

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\MPlayer2\Groups\
Video\QT

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\MPlayer2\Extensions\
.mov

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\MPlayer2\Extensions\
.qt

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\MPlayer2\MIME Types\
video/quicktime

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.ivf

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ivf

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Groups\
Video\IVF

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
MediaPlayer\Control\Advanced Options\
Windows Media

HKEY_CURRENT_USER\Software\Microsoft\
Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
PCHealth\ErrorReporting\DW

作成活動

マルウェアは、以下のファイルを作成します。

• __tmp_rar_sfx_access_check_54234
• xZ34sJS.cmd
• MSh34kS.exe
• video78634.avi
• xSkSjs4.exe
• hosts
• %User Profile%\HTML Help\hh.dat
• %User Profile%\Quick Launch\Windows Media Player.lnk
• %Application Data%\Microsoft\Windows Media\9.0\WMSDKNS.XML.bak
• %Application Data%\Microsoft\Windows Media\9.0\WMSDKNS.XML.done
• %Application Data%\Microsoft\Windows Media\9.0\WMSDKNSD.XML
• %User Profile%\Dr Watson\drwtsn32.log
• %User Profile%\Dr Watson\user.dmp
• %Application Data%\Microsoft\Windows Media\9.0\WMSDKNS.XML

(註：%User Profile% フォルダは、Windows 98 および MEの場合、"C:\Windows\Profiles\＜ユーザ名＞"、Windows NTでは、"C:\WINNT\Profiles\＜ユーザ名＞"、Windows 2000, XP, Server 2003の場合は、"C:\Documents and Settings\＜ユーザ名＞" です。. %Application Data%フォルダは、 Windows 2000、XP、Server 2003 の場合 "C:\Documents and Settings\＜ユーザ名＞\Local Settings\Application Data" 、 Windows NTの場合 "C:\WINNT\Profiles\＜ユーザ名＞\Application Data"、Windows 98 および MEの場合、"C:\Windows\Profiles\＜ユーザ名＞\Application Data" です。)

このウイルス情報は、自動解析システムにより作成されました。

---

  対応方法

ご利用はいかがでしたか？　アンケートにご協力ください