Je suis piraté !!! A laide !!! - Page 2

Précédent
  • 1
  • 2
  1. Reborn17
     
    Désoler pour ce retard mais voila le raport OTM :

    ========== FILES ==========
    File/Folder C:\Program Files\PriceGong not found.
    ========== REGISTRY ==========
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1631550F-191D-4826-B069-D9439253D926}\ deleted successfully.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1631550F-191D-4826-B069-D9439253D926}\ deleted successfully.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1631550F-191D-4826-B069-D9439253D926}\ not found.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1631550F-191D-4826-B069-D9439253D926}\ not found.
    Registry key HKEY_CURRENT_USER\Software\AppDataLow\Toolbar\ deleted successfully.
    ========== COMMANDS ==========

    OTM by OldTimer - Version 3.1.16.1 log created on 10132010_204316

    Le raport SEAF :

    1. ========================= SEAF 1.0.0.9 - C_XX
    2.
    3. Commencé à: 21:02:11 le 13/10/2010
    4.
    5. Valeur(s) recherchée(s):
    6. wmplayer.exe
    7.
    8. (!) --- Calcul du Hash "MD5"
    9. (!) --- Informations supplémentaires
    10. (!) --- Recherche registre
    11.
    12. ====== Fichier(s) (TC: Date de création, TM: Date de modification, DA, Dernier accès) ======
    13.
    14.
    15. "C:\Program Files\Windows Media Player\fr-FR\wmplayer.exe.mui" [ ----A---- | 12 Ko ]
    16. TC: 10/06/2008,12:08:19 | TM: 10/06/2008,12:08:19 | DA: 10/06/2008,12:08:19
    17.
    18. Hash MD5: 148EA1AB7539FCB9272EC67AFB249484
    19.
    20. CompanyName: Microsoft Corporation
    21. ProductName: Système d'exploitation Microsoft® Windows®
    22. InternalName: wmplayer.exe
    23. OriginalFileName: wmplayer.exe.mui
    24. LegalCopyright: © Microsoft Corporation. Tous droits réservés.
    25. ProductVersion: 11.0.6000.6324
    26. FileVersion: 11.0.6000.6324 (vista_rtm.061101-2205)
    27.
    28. =========================
    29.
    30.
    31. "C:\Program Files\Windows Media Player\wmplayer.exe" [ ----A---- | 169 Ko ]
    32. TC: 26/06/2010,19:59:24 | TM: 15/07/2009,14:39:31 | DA: 26/06/2010,19:59:24
    33.
    34. Hash MD5: 8583971D160FF96B220BB87FB0B9521D
    35.
    36. CompanyName: Microsoft Corporation
    37. ProductName: Système d'exploitation Microsoft® Windows®
    38. InternalName: wmplayer.exe
    39. OriginalFileName: wmplayer.exe.mui
    40. LegalCopyright: © Microsoft Corporation. Tous droits réservés.
    41. ProductVersion: 11.0.6000.6324
    42. FileVersion: 11.0.6000.6324 (vista_rtm.061101-2205)
    43.
    44. =========================
    45.
    46.
    47. "C:\WINDOWS\Prefetch\WMPLAYER.EXE-9DE758AE.pf" [ ----A---- | 71 Ko ]
    48. TC: 30/09/2010,18:54:43 | TM: 13/10/2010,15:01:56 | DA: 30/09/2010,18:54:43
    49.
    50. Hash MD5: 1D31F682F3B289FEBA2E90678BFE95A7
    51.
    52.
    53. =========================
    54.
    55.
    56. "C:\WINDOWS\SoftwareDistribution\Download\5379e2e7b4a18994f0296313f618cada\x86_microsoft-windows-m..ayer-core.resources_31bf3856ad364e35_6.0.6001.18528_fr-fr_c5f101fed4a3e810\wmplayer.exe.mui" [ ----A---- | 12 Ko ]
    57. TC: 13/10/2010,19:14:24 | TM: 10/09/2010,20:33:03 | DA: 13/10/2010,19:14:24
    58.
    59. Hash MD5: 42A78023B83B98BAED5561704ED56207
    60.
    61. CompanyName: Microsoft Corporation
    62. ProductName: Système d'exploitation Microsoft® Windows®
    63. InternalName: wmplayer.exe
    64. OriginalFileName: wmplayer.exe.mui
    65. LegalCopyright: © Microsoft Corporation. Tous droits réservés.
    66. ProductVersion: 11.0.6001.7010
    67. FileVersion: 11.0.6001.7010 (vistasp1_gdr.100910-0521)
    68.
    69. =========================
    70.
    71.
    72. "C:\WINDOWS\SoftwareDistribution\Download\5379e2e7b4a18994f0296313f618cada\x86_microsoft-windows-m..ayer-core.resources_31bf3856ad364e35_6.0.6001.22762_fr-fr_c6495f43ede75cbb\wmplayer.exe.mui" [ ----A---- | 12 Ko ]
    73. TC: 13/10/2010,19:14:24 | TM: 13/09/2010,18:15:20 | DA: 13/10/2010,19:14:24
    74.
    75. Hash MD5: B8DD74B0D944D97F4E54D67DAA83EE95
    76.
    77. CompanyName: Microsoft Corporation
    78. ProductName: Système d'exploitation Microsoft® Windows®
    79. InternalName: wmplayer.exe
    80. OriginalFileName: wmplayer.exe.mui
    81. LegalCopyright: © Microsoft Corporation. Tous droits réservés.
    82. ProductVersion: 11.0.6001.7118
    83. FileVersion: 11.0.6001.7118 (vistasp1_ldr.100913-0337)
    84.
    85. =========================
    86.
    87.
    88. "C:\WINDOWS\SoftwareDistribution\Download\5379e2e7b4a18994f0296313f618cada\x86_microsoft-windows-m..ayer-core.resources_31bf3856ad364e35_6.0.6002.18311_fr-fr_c7db43b2d1c86d09\wmplayer.exe.mui" [ ----A---- | 12 Ko ]
    89. TC: 13/10/2010,19:14:24 | TM: 13/09/2010,17:56:53 | DA: 13/10/2010,19:14:24
    90.
    91. Hash MD5: 2FA02017EFF9142A3996D51AA85787EE
    92.
    93. CompanyName: Microsoft Corporation
    94. ProductName: Système d'exploitation Microsoft® Windows®
    95. InternalName: wmplayer.exe
    96. OriginalFileName: wmplayer.exe.mui
    97. LegalCopyright: © Microsoft Corporation. Tous droits réservés.
    98. ProductVersion: 11.0.6002.18311
    99. FileVersion: 11.0.6002.18311 (vistasp2_gdr.100913-0337)
    100.
    101. =========================
    102.
    103.
    104. "C:\WINDOWS\SoftwareDistribution\Download\5379e2e7b4a18994f0296313f618cada\x86_microsoft-windows-m..ayer-core.resources_31bf3856ad364e35_6.0.6002.22486_fr-fr_c81e327beb1a4f1d\wmplayer.exe.mui" [ ----A---- | 12 Ko ]
    105. TC: 13/10/2010,19:14:24 | TM: 13/09/2010,22:01:12 | DA: 13/10/2010,19:14:24
    106.
    107. Hash MD5: 493C6BD28A4204A4CEB1D314489F9FF5
    108.
    109. CompanyName: Microsoft Corporation
    110. ProductName: Système d'exploitation Microsoft® Windows®
    111. InternalName: wmplayer.exe
    112. OriginalFileName: wmplayer.exe.mui
    113. LegalCopyright: © Microsoft Corporation. Tous droits réservés.
    114. ProductVersion: 11.0.6002.22486
    115. FileVersion: 11.0.6002.22486 (vistasp2_ldr.100913-0337)
    116.
    117. =========================
    118.
    119.
    120. "C:\WINDOWS\SoftwareDistribution\Download\5379e2e7b4a18994f0296313f618cada\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.18528_none_0b5c2f154f22adf2\wmplayer.exe" [ ----A---- | 169 Ko ]
    121. TC: 13/10/2010,19:14:25 | TM: 10/09/2010,18:35:48 | DA: 13/10/2010,19:14:25
    122.
    123. Hash MD5: B5D2610D34142F287DF13130665F0B94
    124.
    125. CompanyName: Microsoft Corporation
    126. ProductName: Système d'exploitation Microsoft® Windows®
    127. InternalName: wmplayer.exe
    128. OriginalFileName: wmplayer.exe.mui
    129. LegalCopyright: © Microsoft Corporation. Tous droits réservés.
    130. ProductVersion: 11.0.6000.6324
    131. FileVersion: 11.0.6000.6324 (vista_rtm.061101-2205)
    132.
    133. =========================
    134.
    135.
    136. "C:\WINDOWS\SoftwareDistribution\Download\5379e2e7b4a18994f0296313f618cada\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.22762_none_0bb48c5a6866229d\wmplayer.exe" [ ----A---- | 169 Ko ]
    137. TC: 13/10/2010,19:14:25 | TM: 13/09/2010,16:44:52 | DA: 13/10/2010,19:14:25
    138.
    139. Hash MD5: 283511A489843408B7E23304FBDB3366
    140.
    141. CompanyName: Microsoft Corporation
    142. ProductName: Système d'exploitation Microsoft® Windows®
    143. InternalName: wmplayer.exe
    144. OriginalFileName: wmplayer.exe.mui
    145. LegalCopyright: © Microsoft Corporation. Tous droits réservés.
    146. ProductVersion: 11.0.6000.6324
    147. FileVersion: 11.0.6000.6324 (vista_rtm.061101-2205)
    148.
    149. =========================
    150.
    151.
    152. "C:\WINDOWS\SoftwareDistribution\Download\5379e2e7b4a18994f0296313f618cada\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6002.18311_none_0d4670c94c4732eb\wmplayer.exe" [ ----A---- | 169 Ko ]
    153. TC: 13/10/2010,19:14:25 | TM: 13/09/2010,15:56:02 | DA: 13/10/2010,19:14:25
    154.
    155. Hash MD5: 2D821AFA5A1A9CA7F9F997A1AAD09E72
    156.
    157. CompanyName: Microsoft Corporation
    158. ProductName: Système d'exploitation Microsoft® Windows®
    159. InternalName: wmplayer.exe
    160. OriginalFileName: wmplayer.exe.mui
    161. LegalCopyright: © Microsoft Corporation. Tous droits réservés.
    162. ProductVersion: 11.0.6000.6324
    163. FileVersion: 11.0.6000.6324 (vista_rtm.061101-2205)
    164.
    165. =========================
    166.
    167.
    168. "C:\WINDOWS\SoftwareDistribution\Download\5379e2e7b4a18994f0296313f618cada\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6002.22486_none_0d895f92659914ff\wmplayer.exe" [ ----A---- | 169 Ko ]
    169. TC: 13/10/2010,19:14:25 | TM: 13/09/2010,17:59:02 | DA: 13/10/2010,19:14:25
    170.
    171. Hash MD5: 1163C9DC7B707E3373E695304953C127
    172.
    173. CompanyName: Microsoft Corporation
    174. ProductName: Système d'exploitation Microsoft® Windows®
    175. InternalName: wmplayer.exe
    176. OriginalFileName: wmplayer.exe.mui
    177. LegalCopyright: © Microsoft Corporation. Tous droits réservés.
    178. ProductVersion: 11.0.6000.6324
    179. FileVersion: 11.0.6000.6324 (vista_rtm.061101-2205)
    180.
    181. =========================
    182.
    183.
    184. "C:\WINDOWS\winsxs\x86_microsoft-windows-m..ayer-core.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_c3c7d40cd7afe2df\wmplayer.exe.mui" [ ----A---- | 12 Ko ]
    185. TC: 10/06/2008,12:08:19 | TM: 10/06/2008,12:08:19 | DA: 10/06/2008,12:08:19
    186.
    187. Hash MD5: 148EA1AB7539FCB9272EC67AFB249484
    188.
    189. CompanyName: Microsoft Corporation
    190. ProductName: Système d'exploitation Microsoft® Windows®
    191. InternalName: wmplayer.exe
    192. OriginalFileName: wmplayer.exe.mui
    193. LegalCopyright: © Microsoft Corporation. Tous droits réservés.
    194. ProductVersion: 11.0.6000.6324
    195. FileVersion: 11.0.6000.6324 (vista_rtm.061101-2205)
    196.
    197. =========================
    198.
    199.
    200. "C:\WINDOWS\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.16885_none_09320a57522f812d\wmplayer.exe" [ ----A---- | 169 Ko ]
    201. TC: 26/06/2010,19:59:27 | TM: 14/07/2009,13:10:52 | DA: 26/06/2010,19:59:27
    202.
    203. Hash MD5: 1EE36A2703DB00B9235786DCCCFC8300
    204.
    205. CompanyName: Microsoft Corporation
    206. ProductName: Système d'exploitation Microsoft® Windows®
    207. InternalName: wmplayer.exe
    208. OriginalFileName: wmplayer.exe.mui
    209. LegalCopyright: © Microsoft Corporation. Tous droits réservés.
    210. ProductVersion: 11.0.6000.6324
    211. FileVersion: 11.0.6000.6324 (vista_rtm.061101-2205)
    212.
    213. =========================
    214.
    215.
    216. "C:\WINDOWS\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.21083_none_09b97eb06b4f218b\wmplayer.exe" [ ----A---- | 169 Ko ]
    217. TC: 26/06/2010,19:59:27 | TM: 15/07/2009,14:53:40 | DA: 26/06/2010,19:59:27
    218.
    219. Hash MD5: 4D0B159E6EAD023BA40A187F52BC727F
    220.
    221. CompanyName: Microsoft Corporation
    222. ProductName: Système d'exploitation Microsoft® Windows®
    223. InternalName: wmplayer.exe
    224. OriginalFileName: wmplayer.exe.mui
    225. LegalCopyright: © Microsoft Corporation. Tous droits réservés.
    226. ProductVersion: 11.0.6000.6324
    227. FileVersion: 11.0.6000.6324 (vista_rtm.061101-2205)
    228.
    229. =========================
    230.
    231.
    232. "C:\WINDOWS\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.18000_none_0b69c31f4f19b995\wmplayer.exe" [ ----A---- | 169 Ko ]
    233. TC: 21/01/2008,04:25:17 | TM: 21/01/2008,04:25:17 | DA: 21/01/2008,04:25:17
    234.
    235. Hash MD5: BE70DDF93F5E8CA9DA13CBC6F849808C
    236.
    237. CompanyName: Microsoft Corporation
    238. ProductName: Système d'exploitation Microsoft® Windows®
    239. InternalName: wmplayer.exe
    240. OriginalFileName: wmplayer.exe.mui
    241. LegalCopyright: © Microsoft Corporation. Tous droits réservés.
    242. ProductVersion: 11.0.6000.6324
    243. FileVersion: 11.0.6000.6324 (vista_rtm.061101-2205)
    244.
    245. =========================
    246.
    247.
    248. "C:\WINDOWS\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.18289_none_0b1c4a254f52777a\wmplayer.exe" [ ----A---- | 169 Ko ]
    249. TC: 26/06/2010,19:59:23 | TM: 14/07/2009,12:59:24 | DA: 26/06/2010,19:59:23
    250.
    251. Hash MD5: 7F56AA7CBD4FBD20D532C47E0BB3F55A
    252.
    253. CompanyName: Microsoft Corporation
    254. ProductName: Système d'exploitation Microsoft® Windows®
    255. InternalName: wmplayer.exe
    256. OriginalFileName: wmplayer.exe.mui
    257. LegalCopyright: © Microsoft Corporation. Tous droits réservés.
    258. ProductVersion: 11.0.6000.6324
    259. FileVersion: 11.0.6000.6324 (vista_rtm.061101-2205)
    260.
    261. =========================
    262.
    263.
    264. "C:\WINDOWS\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.22470_none_0ba7b6286870146b\wmplayer.exe" [ ----A---- | 169 Ko ]
    265. TC: 26/06/2010,19:59:24 | TM: 15/07/2009,15:06:03 | DA: 26/06/2010,19:59:24
    266.
    267. Hash MD5: 8D50C3EA6D7DC220DAA34D4962778C4D
    268.
    269. CompanyName: Microsoft Corporation
    270. ProductName: Système d'exploitation Microsoft® Windows®
    271. InternalName: wmplayer.exe
    272. OriginalFileName: wmplayer.exe.mui
    273. LegalCopyright: © Microsoft Corporation. Tous droits réservés.
    274. ProductVersion: 11.0.6000.6324
    275. FileVersion: 11.0.6000.6324 (vista_rtm.061101-2205)
    276.
    277. =========================
    278.
    279.
    280. "C:\WINDOWS\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6002.18005_none_0d553c2b4c3b84e1\wmplayer.exe" [ ----A---- | 169 Ko ]
    281. TC: 27/06/2010,17:12:58 | TM: 11/04/2009,08:28:16 | DA: 27/06/2010,17:12:58
    282.
    283. Hash MD5: 9CE523BDED3BE1D49DB8396C97B32A44
    284.
    285. CompanyName: Microsoft Corporation
    286. ProductName: Système d'exploitation Microsoft® Windows®
    287. InternalName: wmplayer.exe
    288. OriginalFileName: wmplayer.exe.mui
    289. LegalCopyright: © Microsoft Corporation. Tous droits réservés.
    290. ProductVersion: 11.0.6000.6324
    291. FileVersion: 11.0.6000.6324 (vista_rtm.061101-2205)
    292.
    293. =========================
    294.
    295.
    296. "C:\WINDOWS\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6002.18065_none_0d145ca34c6c2c87\wmplayer.exe" [ ----A---- | 169 Ko ]
    297. TC: 26/06/2010,19:59:24 | TM: 15/07/2009,14:39:31 | DA: 26/06/2010,19:59:24
    298.
    299. Hash MD5: 8583971D160FF96B220BB87FB0B9521D
    300.
    301. CompanyName: Microsoft Corporation
    302. ProductName: Système d'exploitation Microsoft® Windows®
    303. InternalName: wmplayer.exe
    304. OriginalFileName: wmplayer.exe.mui
    305. LegalCopyright: © Microsoft Corporation. Tous droits réservés.
    306. ProductVersion: 11.0.6000.6324
    307. FileVersion: 11.0.6000.6324 (vista_rtm.061101-2205)
    308.
    309. =========================
    310.
    311.
    312. "C:\WINDOWS\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6002.22172_none_0d9028a465949c3d\wmplayer.exe" [ ----A---- | 169 Ko ]
    313. TC: 26/06/2010,19:59:24 | TM: 15/07/2009,14:46:11 | DA: 26/06/2010,19:59:24
    314.
    315. Hash MD5: 2221073046740FF58E7714A90D97EB55
    316.
    317. CompanyName: Microsoft Corporation
    318. ProductName: Système d'exploitation Microsoft® Windows®
    319. InternalName: wmplayer.exe
    320. OriginalFileName: wmplayer.exe.mui
    321. LegalCopyright: © Microsoft Corporation. Tous droits réservés.
    322. ProductVersion: 11.0.6000.6324
    323. FileVersion: 11.0.6000.6324 (vista_rtm.061101-2205)
    324.
    325. =========================
    326.
    327.
    328.
    329. ====== Entrée(s) du registre ======
    330.
    331.
    332. [HKLM\Software\Classes\AIFFFile\shell\open\command]
    333. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L"" (REG_EXPAND_SZ)
    334.
    335. [HKLM\Software\Classes\AIFFFile\shell\play\command]
    336. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Play "%L"" (REG_EXPAND_SZ)
    337.
    338. [HKLM\Software\Classes\AppID\wmplayer.exe]
    339.
    340. [HKLM\Software\Classes\Applications\wmplayer.exe]
    341.
    342. [HKLM\Software\Classes\ASFFile\shell\open\command]
    343. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:7 /Open "%L"" (REG_EXPAND_SZ)
    344.
    345. [HKLM\Software\Classes\ASFFile\shell\play\command]
    346. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:7 /Play "%L"" (REG_EXPAND_SZ)
    347.
    348. [HKLM\Software\Classes\ASXFile\shell\open\command]
    349. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L"" (REG_EXPAND_SZ)
    350.
    351. [HKLM\Software\Classes\ASXFile\shell\play\command]
    352. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Play "%L"" (REG_EXPAND_SZ)
    353.
    354. [HKLM\Software\Classes\AUFile\shell\open\command]
    355. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L"" (REG_EXPAND_SZ)
    356.
    357. [HKLM\Software\Classes\AUFile\shell\play\command]
    358. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Play "%L"" (REG_EXPAND_SZ)
    359.
    360. [HKLM\Software\Classes\AVIFile\shell\open\command]
    361. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:8 /Open "%L"" (REG_EXPAND_SZ)
    362.
    363. [HKLM\Software\Classes\AVIFile\shell\play\command]
    364. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:8 /Play "%L"" (REG_EXPAND_SZ)
    365.
    366. [HKLM\Software\Classes\cdafile\shell\open\command]
    367. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L"" (REG_EXPAND_SZ)
    368.
    369. [HKLM\Software\Classes\cdafile\shell\play\command]
    370. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Play "%L"" (REG_EXPAND_SZ)
    371.
    372. [HKLM\Software\Classes\m3ufile\shell\open\command]
    373. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:6 /Open "%L"" (REG_EXPAND_SZ)
    374.
    375. [HKLM\Software\Classes\m3ufile\shell\play\command]
    376. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:6 /Play "%L"" (REG_EXPAND_SZ)
    377.
    378. [HKLM\Software\Classes\MIDFile\shell\open\command]
    379. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L"" (REG_EXPAND_SZ)
    380.
    381. [HKLM\Software\Classes\MIDFile\shell\play\command]
    382. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Play "%L"" (REG_EXPAND_SZ)
    383.
    384. [HKLM\Software\Classes\mp3file\shell\open\command]
    385. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:6 /Open "%L"" (REG_EXPAND_SZ)
    386.
    387. [HKLM\Software\Classes\mp3file\shell\play\command]
    388. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:6 /Play "%L"" (REG_EXPAND_SZ)
    389.
    390. [HKLM\Software\Classes\mpegfile\shell\open\command]
    391. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:9 /Open "%L"" (REG_EXPAND_SZ)
    392.
    393. [HKLM\Software\Classes\mpegfile\shell\play\command]
    394. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:9 /Play "%L"" (REG_EXPAND_SZ)
    395.
    396. [HKLM\Software\Classes\NetworkExplorerPlugins\urn:schemas-upnp-org:device:MediaRenderer:1\shell\Open Media Sharing\command]
    397. ""="C:\Program Files\Windows Media Player\wmplayer.exe /WMPNSSLaunch" (REG_EXPAND_SZ)
    398.
    399. [HKLM\Software\Classes\NetworkExplorerPlugins\urn:schemas-upnp-org:device:MediaServer:1\shell\Open Media Player\command]
    400. ""="C:\Program Files\Windows Media Player\wmplayer.exe" (REG_EXPAND_SZ)
    401.
    402. [HKLM\Software\Classes\SoundRec\shell\open\command]
    403. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L"" (REG_EXPAND_SZ)
    404.
    405. [HKLM\Software\Classes\SoundRec\shell\play\command]
    406. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Play "%L"" (REG_EXPAND_SZ)
    407.
    408. [HKLM\Software\Classes\SystemFileAssociations\audio\OpenWithList\WMPlayer.exe]
    409.
    410. [HKLM\Software\Classes\SystemFileAssociations\video\OpenWithList\WMPlayer.exe]
    411.
    412. [HKLM\Software\Classes\WAXFile\shell\open\command]
    413. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L"" (REG_EXPAND_SZ)
    414.
    415. [HKLM\Software\Classes\WAXFile\shell\play\command]
    416. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Play "%L"" (REG_EXPAND_SZ)
    417.
    418. [HKLM\Software\Classes\wmafile\shell\open\command]
    419. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:5 /Open "%L"" (REG_EXPAND_SZ)
    420.
    421. [HKLM\Software\Classes\wmafile\shell\play\command]
    422. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:5 /Play "%L"" (REG_EXPAND_SZ)
    423.
    424. [HKLM\Software\Classes\WMDFile\shell\open\command]
    425. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /WMPackage:"%L"" (REG_EXPAND_SZ)
    426.
    427. [HKLM\Software\Classes\WMP.AudioCD\Shell\Play\command]
    428. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:3 /device:AudioCD "%L"" (REG_EXPAND_SZ)
    429.
    430. [HKLM\Software\Classes\WMP.BurnCD\Shell\Burn\Command]
    431. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:3 /Task:CDWrite /Device:"%L" " (REG_EXPAND_SZ)
    432.
    433. [HKLM\Software\Classes\WMP.BurnDVD\Shell\Burn\Command]
    434. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:3 /Task:DVDWrite /Device:"%L" " (REG_EXPAND_SZ)
    435.
    436. [HKLM\Software\Classes\WMP.DVD\Shell\Play\command]
    437. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:4 /device:DVD "%L"" (REG_EXPAND_SZ)
    438.
    439. [HKLM\Software\Classes\WMP.DVR-MSFile\shell\open\command]
    440. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L"" (REG_EXPAND_SZ)
    441.
    442. [HKLM\Software\Classes\WMP.DVR-MSFile\shell\play\command]
    443. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Play "%L"" (REG_EXPAND_SZ)
    444.
    445. [HKLM\Software\Classes\WMP.RipCD\Shell\Rip\Command]
    446. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:3 /RipAudioCD "%L" " (REG_EXPAND_SZ)
    447.
    448. [HKLM\Software\Classes\WMP.VCD\Shell\Play\command]
    449. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:4 /device:VCD "%L"" (REG_EXPAND_SZ)
    450.
    451. [HKLM\Software\Classes\WMP11.AssocFile.AIFF\shell\open\command]
    452. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L"" (REG_EXPAND_SZ)
    453.
    454. [HKLM\Software\Classes\WMP11.AssocFile.AIFF\shell\play\command]
    455. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Play "%L"" (REG_EXPAND_SZ)
    456.
    457. [HKLM\Software\Classes\WMP11.AssocFile.ASF\shell\open\command]
    458. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:7 /Open "%L"" (REG_EXPAND_SZ)
    459.
    460. [HKLM\Software\Classes\WMP11.AssocFile.ASF\shell\play\command]
    461. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:7 /Play "%L"" (REG_EXPAND_SZ)
    462.
    463. [HKLM\Software\Classes\WMP11.AssocFile.ASX\shell\open\command]
    464. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L"" (REG_EXPAND_SZ)
    465.
    466. [HKLM\Software\Classes\WMP11.AssocFile.ASX\shell\play\command]
    467. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Play "%L"" (REG_EXPAND_SZ)
    468.
    469. [HKLM\Software\Classes\WMP11.AssocFile.AU\shell\open\command]
    470. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L"" (REG_EXPAND_SZ)
    471.
    472. [HKLM\Software\Classes\WMP11.AssocFile.AU\shell\play\command]
    473. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Play "%L"" (REG_EXPAND_SZ)
    474.
    475. [HKLM\Software\Classes\WMP11.AssocFile.AVI\shell\open\command]
    476. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:8 /Open "%L"" (REG_EXPAND_SZ)
    477.
    478. [HKLM\Software\Classes\WMP11.AssocFile.AVI\shell\play\command]
    479. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:8 /Play "%L"" (REG_EXPAND_SZ)
    480.
    481. [HKLM\Software\Classes\WMP11.AssocFile.CDA\shell\open\command]
    482. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L"" (REG_EXPAND_SZ)
    483.
    484. [HKLM\Software\Classes\WMP11.AssocFile.CDA\shell\play\command]
    485. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Play "%L"" (REG_EXPAND_SZ)
    486.
    487. [HKLM\Software\Classes\WMP11.AssocFile.m3u\shell\open\command]
    488. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:6 /Open "%L"" (REG_EXPAND_SZ)
    489.
    490. [HKLM\Software\Classes\WMP11.AssocFile.m3u\shell\play\command]
    491. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:6 /Play "%L"" (REG_EXPAND_SZ)
    492.
    493. [HKLM\Software\Classes\WMP11.AssocFile.MIDI\shell\open\command]
    494. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L"" (REG_EXPAND_SZ)
    495.
    496. [HKLM\Software\Classes\WMP11.AssocFile.MIDI\shell\play\command]
    497. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Play "%L"" (REG_EXPAND_SZ)
    498.
    499. [HKLM\Software\Classes\WMP11.AssocFile.MP3\shell\open\command]
    500. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:6 /Open "%L"" (REG_EXPAND_SZ)
    501.
    502. [HKLM\Software\Classes\WMP11.AssocFile.MP3\shell\play\command]
    503. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:6 /Play "%L"" (REG_EXPAND_SZ)
    504.
    505. [HKLM\Software\Classes\WMP11.AssocFile.MPEG\shell\open\command]
    506. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:9 /Open "%L"" (REG_EXPAND_SZ)
    507.
    508. [HKLM\Software\Classes\WMP11.AssocFile.MPEG\shell\play\command]
    509. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:9 /Play "%L"" (REG_EXPAND_SZ)
    510.
    511. [HKLM\Software\Classes\WMP11.AssocFile.WAV\shell\open\command]
    512. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L"" (REG_EXPAND_SZ)
    513.
    514. [HKLM\Software\Classes\WMP11.AssocFile.WAV\shell\play\command]
    515. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Play "%L"" (REG_EXPAND_SZ)
    516.
    517. [HKLM\Software\Classes\WMP11.AssocFile.WAX\shell\open\command]
    518. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L"" (REG_EXPAND_SZ)
    519.
    520. [HKLM\Software\Classes\WMP11.AssocFile.WAX\shell\play\command]
    521. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Play "%L"" (REG_EXPAND_SZ)
    522.
    523. [HKLM\Software\Classes\WMP11.AssocFile.WMA\shell\open\command]
    524. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:5 /Open "%L"" (REG_EXPAND_SZ)
    525.
    526. [HKLM\Software\Classes\WMP11.AssocFile.WMA\shell\play\command]
    527. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:5 /Play "%L"" (REG_EXPAND_SZ)
    528.
    529. [HKLM\Software\Classes\WMP11.AssocFile.WMD\shell\open\command]
    530. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /WMPackage:"%L"" (REG_EXPAND_SZ)
    531.
    532. [HKLM\Software\Classes\WMP11.AssocFile.WMS\shell\open\command]
    533. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /layout:"%L"" (REG_EXPAND_SZ)
    534.
    535. [HKLM\Software\Classes\WMP11.AssocFile.WMV\shell\open\command]
    536. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:7 /Open "%L"" (REG_EXPAND_SZ)
    537.
    538. [HKLM\Software\Classes\WMP11.AssocFile.WMV\shell\play\command]
    539. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:7 /Play "%L"" (REG_EXPAND_SZ)
    540.
    541. [HKLM\Software\Classes\WMP11.AssocFile.WMZ\shell\open\command]
    542. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /layout:"%L"" (REG_EXPAND_SZ)
    543.
    544. [HKLM\Software\Classes\WMP11.AssocFile.WPL\shell\open\command]
    545. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L"" (REG_EXPAND_SZ)
    546.
    547. [HKLM\Software\Classes\WMP11.AssocFile.WPL\shell\play\command]
    548. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Play "%L"" (REG_EXPAND_SZ)
    549.
    550. [HKLM\Software\Classes\WMP11.AssocFile.WVX\shell\open\command]
    551. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L"" (REG_EXPAND_SZ)
    552.
    553. [HKLM\Software\Classes\WMP11.AssocFile.WVX\shell\play\command]
    554. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Play "%L"" (REG_EXPAND_SZ)
    555.
    556. [HKLM\Software\Classes\WMP11.AssocProtocol.MMS\shell\open\command]
    557. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" "%L"" (REG_EXPAND_SZ)
    558.
    559. [HKLM\Software\Classes\WMSFile\shell\open\command]
    560. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /layout:"%L"" (REG_EXPAND_SZ)
    561.
    562. [HKLM\Software\Classes\WMVFile\shell\open\command]
    563. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:7 /Open "%L"" (REG_EXPAND_SZ)
    564.
    565. [HKLM\Software\Classes\WMVFile\shell\play\command]
    566. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:7 /Play "%L"" (REG_EXPAND_SZ)
    567.
    568. [HKLM\Software\Classes\WMZFile\shell\open\command]
    569. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /layout:"%L"" (REG_EXPAND_SZ)
    570.
    571. [HKLM\Software\Classes\WPLFile\shell\open\command]
    572. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L"" (REG_EXPAND_SZ)
    573.
    574. [HKLM\Software\Classes\WPLFile\shell\play\command]
    575. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Play "%L"" (REG_EXPAND_SZ)
    576.
    577. [HKLM\Software\Classes\WVXFile\shell\open\command]
    578. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L"" (REG_EXPAND_SZ)
    579.
    580. [HKLM\Software\Classes\WVXFile\shell\play\command]
    581. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Play "%L"" (REG_EXPAND_SZ)
    582.
    583. [HKLM\Software\Clients\Media\Windows Media Player\shell\open\command]
    584. ""="%ProgramFiles%\Windows Media Player\wmplayer.exe" (REG_EXPAND_SZ)
    585.
    586. [HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6bf52a52-394a-11d3-b153-00c04f79faa6}]
    587. "AppName"="wmplayer.exe" (REG_SZ)
    588.
    589. [HKLM\Software\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_ADDON_MANAGEMENT]
    590. "wmplayer.exe"="1" (REG_DWORD)
    591.
    592. [HKLM\Software\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BEHAVIORS]
    593. "wmplayer.exe"="1" (REG_DWORD)
    594.
    595. [HKLM\Software\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]
    596. "wmplayer.exe"="1" (REG_DWORD)
    597.
    598. [HKLM\Software\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]
    599. "wmplayer.exe"="1" (REG_DWORD)
    600.
    601. [HKLM\Software\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]
    602. "wmplayer.exe"="1" (REG_DWORD)
    603.
    604. [HKLM\Software\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_MIME_HANDLING]
    605. "wmplayer.exe"="1" (REG_DWORD)
    606.
    607. [HKLM\Software\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_MIME_SNIFFING]
    608. "wmplayer.exe"="1" (REG_DWORD)
    609.
    610. [HKLM\Software\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_OBJECT_CACHING]
    611. "wmplayer.exe"="1" (REG_DWORD)
    612.
    613. [HKLM\Software\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]
    614. "wmplayer.exe"="1" (REG_DWORD)
    615.
    616. [HKLM\Software\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]
    617. "wmplayer.exe"="1" (REG_DWORD)
    618.
    619. [HKLM\Software\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]
    620. "wmplayer.exe"="1" (REG_DWORD)
    621.
    622. [HKLM\Software\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]
    623. "wmplayer.exe"="1" (REG_DWORD)
    624.
    625. [HKLM\Software\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_SECURITYBAND]
    626. "wmplayer.exe"="1" (REG_DWORD)
    627.
    628. [HKLM\Software\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]
    629. "wmplayer.exe"="1" (REG_DWORD)
    630.
    631. [HKLM\Software\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]
    632. "wmplayer.exe"="1" (REG_DWORD)
    633.
    634. [HKLM\Software\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]
    635. "wmplayer.exe"="1" (REG_DWORD)
    636.
    637. [HKLM\Software\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]
    638. "wmplayer.exe"="1" (REG_DWORD)
    639.
    640. [HKLM\Software\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_ZONE_ELEVATION]
    641. "wmplayer.exe"="1" (REG_DWORD)
    642.
    643. [HKLM\Software\Microsoft\MediaPlayer\Setup\Installed Versions]
    644. "wmplayer.exe"="" (REG_BINARY)
    645.
    646. [HKLM\Software\Microsoft\Multimedia\DirectXMedia]
    647. ".Prog"=""%ProgramFiles%\Windows Media Player\wmplayer.exe"" (REG_EXPAND_SZ)
    648.
    649. [HKLM\Software\Microsoft\Multimedia\DirectXMedia]
    650. "OCX.ocx"=""%ProgramFiles%\Windows Media Player\wmplayer.exe"" (REG_EXPAND_SZ)
    651.
    652. [HKLM\Software\Microsoft\Multimedia\WMPlayer]
    653. "Player.Path"="%ProgramFiles%\Windows Media Player\wmplayer.exe" (REG_EXPAND_SZ)
    654.
    655. [HKLM\Software\Microsoft\Multimedia\WMPlayer]
    656. "Player.Name"="wmplayer.exe" (REG_SZ)
    657.
    658. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Devices\AudioCD]
    659. "ReplaceApps"="wmplayer.exe" (REG_SZ)
    660.
    661. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Devices\DVD]
    662. "ReplaceApps"="wmplayer.exe|dvdplay.exe" (REG_SZ)
    663.
    664. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.aif]
    665. "ReplaceApps"="wmplayer.exe|iexplore.exe" (REG_SZ)
    666.
    667. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.aifc]
    668. "ReplaceApps"="wmplayer.exe|iexplore.exe" (REG_SZ)
    669.
    670. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.aiff]
    671. "ReplaceApps"="wmplayer.exe|iexplore.exe" (REG_SZ)
    672.
    673. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.asf]
    674. "ReplaceApps"="wmplayer.exe" (REG_SZ)
    675.
    676. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.asx]
    677. "ReplaceApps"="wmplayer.exe" (REG_SZ)
    678.
    679. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.au]
    680. "ReplaceApps"="wmplayer.exe|iexplore.exe" (REG_SZ)
    681.
    682. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.avi]
    683. "ReplaceApps"="wmplayer.exe" (REG_SZ)
    684.
    685. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.cda]
    686. "ReplaceApps"="wmplayer.exe" (REG_SZ)
    687.
    688. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.dvr-ms]
    689. "ReplaceApps"="wmplayer.exe" (REG_SZ)
    690.
    691. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.m1v]
    692. "ReplaceApps"="wmplayer.exe|iexplore.exe" (REG_SZ)
    693.
    694. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.m2v]
    695. "ReplaceApps"="wmplayer.exe|iexplore.exe" (REG_SZ)
    696.
    697. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.m3u]
    698. "ReplaceApps"="wmplayer.exe" (REG_SZ)
    699.
    700. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.mid]
    701. "ReplaceApps"="wmplayer.exe|iexplore.exe" (REG_SZ)
    702.
    703. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.midi]
    704. "ReplaceApps"="wmplayer.exe|iexplore.exe" (REG_SZ)
    705.
    706. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.mod]
    707. "ReplaceApps"="wmplayer.exe|iexplore.exe" (REG_SZ)
    708.
    709. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.mp2]
    710. "ReplaceApps"="wmplayer.exe|iexplore.exe" (REG_SZ)
    711.
    712. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.mp2v]
    713. "ReplaceApps"="wmplayer.exe|iexplore.exe" (REG_SZ)
    714.
    715. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.mp3]
    716. "ReplaceApps"="wmplayer.exe" (REG_SZ)
    717.
    718. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.mpa]
    719. "ReplaceApps"="wmplayer.exe|iexplore.exe" (REG_SZ)
    720.
    721. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.mpe]
    722. "ReplaceApps"="wmplayer.exe|iexplore.exe" (REG_SZ)
    723.
    724. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.mpeg]
    725. "ReplaceApps"="wmplayer.exe|iexplore.exe" (REG_SZ)
    726.
    727. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.mpg]
    728. "ReplaceApps"="wmplayer.exe|iexplore.exe" (REG_SZ)
    729.
    730. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.mpv2]
    731. "ReplaceApps"="wmplayer.exe|iexplore.exe" (REG_SZ)
    732.
    733. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.rmi]
    734. "ReplaceApps"="wmplayer.exe|iexplore.exe" (REG_SZ)
    735.
    736. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.snd]
    737. "ReplaceApps"="wmplayer.exe|iexplore.exe" (REG_SZ)
    738.
    739. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.wav]
    740. "ReplaceApps"="wmplayer.exe" (REG_SZ)
    741.
    742. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.wax]
    743. "ReplaceApps"="wmplayer.exe" (REG_SZ)
    744.
    745. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.wm]
    746. "ReplaceApps"="wmplayer.exe" (REG_SZ)
    747.
    748. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.wma]
    749. "ReplaceApps"="wmplayer.exe" (REG_SZ)
    750.
    751. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.wmd]
    752. "ReplaceApps"="wmplayer.exe" (REG_SZ)
    753.
    754. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.wms]
    755. "ReplaceApps"="wmplayer.exe" (REG_SZ)
    756.
    757. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.wmv]
    758. "ReplaceApps"="wmplayer.exe" (REG_SZ)
    759.
    760. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.wmx]
    761. "ReplaceApps"="wmplayer.exe" (REG_SZ)
    762.
    763. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.wmz]
    764. "ReplaceApps"="wmplayer.exe" (REG_SZ)
    765.
    766. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.wpl]
    767. "ReplaceApps"="wmplayer.exe" (REG_SZ)
    768.
    769. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.wvx]
    770. "ReplaceApps"="wmplayer.exe" (REG_SZ)
    771.
    772. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\application/vnd.ms-wpl]
    773. "ReplaceApps"="wmplayer.exe" (REG_SZ)
    774.
    775. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\application/x-mplayer2]
    776. "ReplaceApps"="wmplayer.exe" (REG_SZ)
    777.
    778. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\application/x-ms-wmd]
    779. "ReplaceApps"="wmplayer.exe" (REG_SZ)
    780.
    781. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\application/x-ms-wmz]
    782. "ReplaceApps"="wmplayer.exe" (REG_SZ)
    783.
    784. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\audio/aiff]
    785. "ReplaceApps"="wmplayer.exe|iexplore.exe" (REG_SZ)
    786.
    787. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\audio/basic]
    788. "ReplaceApps"="wmplayer.exe" (REG_SZ)
    789.
    790. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\audio/mid]
    791. "ReplaceApps"="wmplayer.exe" (REG_SZ)
    792.
    793. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\audio/midi]
    794. "ReplaceApps"="wmplayer.exe" (REG_SZ)
    795.
    796. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\audio/mp3]
    797. "ReplaceApps"="wmplayer.exe" (REG_SZ)
    798.
    799. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\audio/mpeg]
    800. "ReplaceApps"="wmplayer.exe" (REG_SZ)
    801.
    802. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\audio/mpegurl]
    803. "ReplaceApps"="wmplayer.exe" (REG_SZ)
    804.
    805. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\audio/mpg]
    806. "ReplaceApps"="wmplayer.exe" (REG_SZ)
    807.
    808. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\audio/wav]
    809. "ReplaceApps"="wmplayer.exe" (REG_SZ)
    810.
    811. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-aiff]
    812. "ReplaceApps"="wmplayer.exe|iexplore.exe" (REG_SZ)
    813.
    814. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-mid]
    815. "ReplaceApps"="wmplayer.exe" (REG_SZ)
    816.
    817. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-midi]
    818. "ReplaceApps"="wmplayer.exe" (REG_SZ)
    819.
    820. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-mp3]
    821. "ReplaceApps"="wmplayer.exe" (REG_SZ)
    822.
    823. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-mpeg]
    824. "ReplaceApps"="wmplayer.exe" (REG_SZ)
    825.
    826. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-mpegurl]
    827. "ReplaceApps"="wmplayer.exe" (REG_SZ)
    828.
    829. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-mpg]
    830. "ReplaceApps"="wmplayer.exe" (REG_SZ)
    831.
    832. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-ms-wax]
    833. "ReplaceApps"="wmplayer.exe" (REG_SZ)
    834.
    835. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-ms-wma]
    836. "ReplaceApps"="wmplayer.exe" (REG_SZ)
    837.
    838. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-wav]
    839. "ReplaceApps"="wmplayer.exe" (REG_SZ)
    840.
    841. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\midi/mid]
    842. "ReplaceApps"="wmplayer.exe" (REG_SZ)
    843.
    844. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\unknown]
    845. "ReplaceApps"="wmplayer.exe" (REG_SZ)
    846.
    847. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\video/avi]
    848. "ReplaceApps"="wmplayer.exe" (REG_SZ)
    849.
    850. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\video/mpeg]
    851. "ReplaceApps"="wmplayer.exe" (REG_SZ)
    852.
    853. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\video/mpg]
    854. "ReplaceApps"="wmplayer.exe" (REG_SZ)
    855.
    856. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\video/msvideo]
    857. "ReplaceApps"="wmplayer.exe" (REG_SZ)
    858.
    859. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-mpeg]
    860. "ReplaceApps"="wmplayer.exe" (REG_SZ)
    861.
    862. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-mpeg2a]
    863. "ReplaceApps"="wmplayer.exe" (REG_SZ)
    864.
    865. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-asf]
    866. "ReplaceApps"="wmplayer.exe" (REG_SZ)
    867.
    868. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-asf-plugin]
    869. "ReplaceApps"="wmplayer.exe" (REG_SZ)
    870.
    871. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-wm]
    872. "ReplaceApps"="wmplayer.exe" (REG_SZ)
    873.
    874. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-wmv]
    875. "ReplaceApps"="wmplayer.exe" (REG_SZ)
    876.
    877. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-wmx]
    878. "ReplaceApps"="wmplayer.exe" (REG_SZ)
    879.
    880. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-wvx]
    881. "ReplaceApps"="wmplayer.exe" (REG_SZ)
    882.
    883. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-msvideo]
    884. "ReplaceApps"="wmplayer.exe" (REG_SZ)
    885.
    886. [HKLM\Software\Microsoft\RADAR\HeapLeakDetection\DiagnosedApplications\wmplayer.exe]
    887.
    888. [HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\mplayer2.exe]
    889. ""="%ProgramFiles%\Windows Media Player\wmplayer.exe" (REG_EXPAND_SZ)
    890.
    891. [HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\wmplayer.exe]
    892.
    893. [HKLM\Software\Microsoft\Windows\CurrentVersion\explorer\AutoplayHandlers\Handlers\MSPlayCDAudioOnArrival]
    894. "DefaultIcon"="%ProgramFiles%\Windows Media Player\wmplayer.exe,0" (REG_EXPAND_SZ)
    895.
    896. [HKLM\Software\Microsoft\Windows\CurrentVersion\explorer\AutoplayHandlers\Handlers\MSPlayDVDMovieOnArrival]
    897. "DefaultIcon"="%ProgramFiles%\Windows Media Player\wmplayer.exe,0" (REG_EXPAND_SZ)
    898.
    899. [HKLM\Software\Microsoft\Windows\CurrentVersion\explorer\AutoplayHandlers\Handlers\MSPlayMediaOnArrival]
    900. "DefaultIcon"="%ProgramFiles%\Windows Media Player\wmplayer.exe,0" (REG_EXPAND_SZ)
    901.
    902. [HKLM\Software\Microsoft\Windows\CurrentVersion\explorer\AutoplayHandlers\Handlers\MSPlaySuperVideoCDMovieOnArrival]
    903. "DefaultIcon"="%ProgramFiles%\Windows Media Player\wmplayer.exe,0" (REG_EXPAND_SZ)
    904.
    905. [HKLM\Software\Microsoft\Windows\CurrentVersion\explorer\AutoplayHandlers\Handlers\MSPlayVideoCDMovieOnArrival]
    906. "DefaultIcon"="%ProgramFiles%\Windows Media Player\wmplayer.exe,0" (REG_EXPAND_SZ)
    907.
    908. [HKLM\Software\Microsoft\Windows\CurrentVersion\explorer\AutoplayHandlers\Handlers\MSRipCDAudioOnArrival]
    909. "DefaultIcon"="%ProgramFiles%\Windows Media Player\wmplayer.exe,0" (REG_EXPAND_SZ)
    910.
    911. [HKLM\Software\Microsoft\Windows\CurrentVersion\explorer\AutoplayHandlers\Handlers\MSWMDMHandler]
    912. "DefaultIcon"="%ProgramFiles%\Windows Media Player\wmplayer.exe,0" (REG_EXPAND_SZ)
    913.
    914. [HKLM\Software\Microsoft\Windows\CurrentVersion\explorer\AutoplayHandlers\Handlers\MSWMPBurnCDOnArrival]
    915. "DefaultIcon"="%ProgramFiles%\Windows Media Player\wmplayer.exe,0" (REG_EXPAND_SZ)
    916.
    917. [HKLM\Software\Microsoft\Windows\CurrentVersion\explorer\AutoplayHandlers\Handlers\MSWMPBurnDataDVDArrival]
    918. "DefaultIcon"="%ProgramFiles%\Windows Media Player\wmplayer.exe,0" (REG_EXPAND_SZ)
    919.
    920. [HKLM\Software\Microsoft\Windows\CurrentVersion\Parental Controls\HTTPExemptions]
    921. "C:\Program Files\Windows Media Player\wmplayer.exe"="C:\Program Files\Windows Media Player\wmplayer.exe" (REG_SZ)
    922.
    923. [HKLM\Software\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\Components\x86_microsoft-windows-m..ayer-core.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_c3c7d40cd7afe2df]
    924. "f!wmplayer.exe.mui"="wmplayer.exe.mui" (REG_BINARY)
    925.
    926. [HKLM\Software\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\Components\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.16885_none_09320a57522f812d]
    927. "f!wmplayer.exe"="wmplayer.exe" (REG_BINARY)
    928.
    929. [HKLM\Software\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\Components\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.21083_none_09b97eb06b4f218b]
    930. "f!wmplayer.exe"="wmplayer.exe" (REG_BINARY)
    931.
    932. [HKLM\Software\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\Components\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.18000_none_0b69c31f4f19b995]
    933. "f!wmplayer.exe"="wmplayer.exe" (REG_BINARY)
    934.
    935. [HKLM\Software\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\Components\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.18289_none_0b1c4a254f52777a]
    936. "f!wmplayer.exe"="wmplayer.exe" (REG_BINARY)
    937.
    938. [HKLM\Software\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\Components\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.22470_none_0ba7b6286870146b]
    939. "f!wmplayer.exe"="wmplayer.exe" (REG_BINARY)
    940.
    941. [HKLM\Software\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\Components\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6002.18005_none_0d553c2b4c3b84e1]
    942. "f!wmplayer.exe"="wmplayer.exe" (REG_BINARY)
    943.
    944. [HKLM\Software\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\Components\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6002.18065_none_0d145ca34c6c2c87]
    945. "f!wmplayer.exe"="wmplayer.exe" (REG_BINARY)
    946.
    947. [HKLM\Software\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\Components\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6002.22172_none_0d9028a465949c3d]
    948. "f!wmplayer.exe"="wmplayer.exe" (REG_BINARY)
    949.
    950. [HKLM\Software\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\VersionedIndex\6.0.6002.18005_001c11ba\ComponentFamilies\x86_microsoft-windows-m..ayer-core.resources_31bf3856ad364e35_fr-fr_4da8aaa1ff39f44f\f256!wmplayer.exe.mui]
    951.
    952. [HKLM\Software\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\VersionedIndex\6.0.6002.18005_001c11ba\ComponentFamilies\x86_microsoft-windows-m..ayer-core.resources_31bf3856ad364e35_fr-fr_4da8aaa1ff39f44f\v!6.0.6001.18528\UnstagedFiles]
    953. "wmplayer.exe.mui"="" (REG_BINARY)
    954.
    955. [HKLM\Software\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\VersionedIndex\6.0.6002.18005_001c11ba\ComponentFamilies\x86_microsoft-windows-m..ayer-core.resources_31bf3856ad364e35_fr-fr_4da8aaa1ff39f44f\v!6.0.6001.22762\UnstagedFiles]
    956. "wmplayer.exe.mui"="" (REG_BINARY)
    957.
    958. [HKLM\Software\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\VersionedIndex\6.0.6002.18005_001c11ba\ComponentFamilies\x86_microsoft-windows-m..ayer-core.resources_31bf3856ad364e35_fr-fr_4da8aaa1ff39f44f\v!6.0.6002.18311\UnstagedFiles]
    959. "wmplayer.exe.mui"="" (REG_BINARY)
    960.
    961. [HKLM\Software\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\VersionedIndex\6.0.6002.18005_001c11ba\ComponentFamilies\x86_microsoft-windows-m..ayer-core.resources_31bf3856ad364e35_fr-fr_4da8aaa1ff39f44f\v!6.0.6002.22486\UnstagedFiles]
    962. "wmplayer.exe.mui"="" (REG_BINARY)
    963.
    964. [HKLM\Software\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\VersionedIndex\6.0.6002.18005_001c11ba\ComponentFamilies\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_none_4614e31b7fd688fd\f256!wmplayer.exe]
    965.
    966. [HKLM\Software\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\VersionedIndex\6.0.6002.18005_001c11ba\ComponentFamilies\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_none_4614e31b7fd688fd\v!6.0.6000.16386\UnstagedFiles]
    967. "wmplayer.exe"="" (REG_BINARY)
    968.
    969. [HKLM\Software\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\VersionedIndex\6.0.6002.18005_001c11ba\ComponentFamilies\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_none_4614e31b7fd688fd\v!6.0.6001.18528\UnstagedFiles]
    970. "wmplayer.exe"="" (REG_BINARY)
    971.
    972. [HKLM\Software\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\VersionedIndex\6.0.6002.18005_001c11ba\ComponentFamilies\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_none_4614e31b7fd688fd\v!6.0.6001.22762\UnstagedFiles]
    973. "wmplayer.exe"="" (REG_BINARY)
    974.
    975. [HKLM\Software\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\VersionedIndex\6.0.6002.18005_001c11ba\ComponentFamilies\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_none_4614e31b7fd688fd\v!6.0.6002.18311\UnstagedFiles]
    976. "wmplayer.exe"="" (REG_BINARY)
    977.
    978. [HKLM\Software\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\VersionedIndex\6.0.6002.18005_001c11ba\ComponentFamilies\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_none_4614e31b7fd688fd\v!6.0.6002.22486\UnstagedFiles]
    979. "wmplayer.exe"="" (REG_BINARY)
    980.
    981. [HKLM\System\ControlSet001\Control\Class\{4D36E968-E325-11CE-BFC1-08002BE10318}\0000]
    982. "_WmPlayer.exe:D3DOGL_67207556"="" (REG_BINARY)
    983.
    984. [HKLM\System\ControlSet001\Control\Video\{33903231-5528-449B-BCFF-33971DBDBF7B}\0000]
    985. "_WmPlayer.exe:D3DOGL_67207556"="" (REG_BINARY)
    986.
    987. [HKLM\System\ControlSet001\Control\Video\{33903231-5528-449B-BCFF-33971DBDBF7B}\0001]
    988. "_WmPlayer.exe:D3DOGL_67207556"="" (REG_BINARY)
    989.
    990. [HKLM\System\ControlSet001\Services\SharedAccess\Defaults\FirewallPolicy\FirewallRules]
    991. "WMP-In-UDP"="v2.0|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|Profile=Private|Profile=Public|App=%ProgramFiles%\Windows Media Player\wmplayer.exe|Name=@FirewallAPI.dll,-31003|Desc=@FirewallAPI.dll,-31006|EmbedCtxt=@FirewallAPI.dll,-31002|Edge=FALSE|" (REG_SZ)
    992.
    993. [HKLM\System\ControlSet001\Services\SharedAccess\Defaults\FirewallPolicy\FirewallRules]
    994. "WMP-Out-UDP"="v2.0|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|Profile=Private|Profile=Public|App=%ProgramFiles%\Windows Media Player\wmplayer.exe|Name=@FirewallAPI.dll,-31007|Desc=@FirewallAPI.dll,-31010|EmbedCtxt=@FirewallAPI.dll,-31002|Edge=FALSE|" (REG_SZ)
    995.
    996. [HKLM\System\ControlSet001\Services\SharedAccess\Defaults\FirewallPolicy\FirewallRules]
    997. "WMP-Out-TCP"="v2.0|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|Profile=Private|Profile=Public|App=%ProgramFiles%\Windows Media Player\wmplayer.exe|Name=@FirewallAPI.dll,-31011|Desc=@FirewallAPI.dll,-31014|EmbedCtxt=@FirewallAPI.dll,-31002|Edge=FALSE|" (REG_SZ)
    998.
    999. [HKLM\System\ControlSet001\Services\SharedAccess\Defaults\FirewallPolicy\FirewallRules]
    1000. "WMPNSS-WMP-In-UDP-NoScope"="v2.0|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|App=%ProgramFiles%\Windows Media Player\wmplayer.exe|Name=@FirewallAPI.dll,-31293|Desc=@FirewallAPI.dll,-31296|EmbedCtxt=@FirewallAPI.dll,-31252|Edge=FALSE|" (REG_SZ)
    1001.
    1002. [HKLM\System\ControlSet001\Services\SharedAccess\Defaults\FirewallPolicy\FirewallRules]
    1003. "WMPNSS-WMP-Out-UDP-NoScope"="v2.0|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|App=%ProgramFiles%\Windows Media Player\wmplayer.exe|Name=@FirewallAPI.dll,-31297|Desc=@FirewallAPI.dll,-31300|EmbedCtxt=@FirewallAPI.dll,-31252|Edge=FALSE|" (REG_SZ)
    1004.
    1005. [HKLM\System\ControlSet001\Services\SharedAccess\Defaults\FirewallPolicy\FirewallRules]
    1006. "WMPNSS-WMP-Out-TCP-NoScope"="v2.0|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|App=%ProgramFiles%\Windows Media Player\wmplayer.exe|Name=@FirewallAPI.dll,-31301|Desc=@FirewallAPI.dll,-31304|EmbedCtxt=@FirewallAPI.dll,-31252|Edge=FALSE|" (REG_SZ)
    1007.
    1008. [HKLM\System\ControlSet001\Services\SharedAccess\Defaults\FirewallPolicy\FirewallRules]
    1009. "WMPNSS-WMP-In-UDP"="v2.0|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Private|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%ProgramF
    0
    1. Reborn17
       
      Heu....On dirai que il n'y a pas tous mais ou trouver le document ou il y a ce raport ? Car je ne le retrouve plus.
      0
    2. Reborn17
       
      Et aussi pour quoi wmplayer ( Windows media player ) ?
      0
    3. Karel7 Messages postés 737 Statut Contributeur 58
       
      J'avais un doute qu'il existerai un fichier trafiké...
      Je ne suis plus en état de continuer (pas maintenant en tout cas)
      Si Jacques.gache voudrai bien continuer, ce serai sympa :-/
      0
    4. Reborn17
       
      Pourquoi ?
      0
    5. jacques.gache Messages postés 34829 Statut Contributeur sécurité 1 645
       
      bonjour , karel7 à surement des petits souci , et comme il me demande de continué , j'aimerais bien que tu me postes un nouveau zhpdiag pour faire le point , merci

      Double cliques sur le raccourci ZHPDiag sur ton Bureau pour XP sinon clique droit et en tant que administrateur !!

      Clique sur le Tournevis puis sur Tous pour cocher toutes les cases des options.

      Cliques sur la loupe pour lancer l'analyse.

      Laisses l'outil travailler, il peut être assez long.

      A la fin de l'analyse,clique sur l'appareil photo et enregistre le rapport sur ton Bureau.


      Fermes ZHPDiag en fin d'analyse.


      Pour me le transmettre clique sur ce lien :

      http://www.cijoint.fr/index.php

      Clique sur Parcourir et cherche le fichier C:\Documents and settings\le_nom_de_ta_session\bureau\.ZHPDiag.txt

      ou directement en choisissant bureau et ZHPDiag.txt clique dessus

      Clique sur Ouvrir.

      Clique sur "Cliquez ici pour déposer le fichier".

      Un lien de cette forme :

      http://www.cijoint.fr/cjlink.php?file=cj200905/cib7SU.txt

      est ajouté dans la page.

      Copie ce lien dans ta réponse.
      0
  2. jfkpresident Messages postés 13877 Statut Contributeur sécurité 1 175
     
    Pour essayer de faire avancer les choses :

    Rends toi sur ce site :

    https://www.virustotal.com/gui/

    Clique sur parcourir et cherche ce fichier : C:\Program Files\FreeTime\FormatFactory\FormatFactory.exe

    Clique sur Send File.

    Un rapport va s'élaborer ligne à ligne.

    Attends la fin. Il doit comprendre la taille du fichier envoyé.

    Sauvegarde le rapport avec le bloc-note.

    Copie le dans ta réponse.

    ================

    Ensuite relance Zhpdiag mais ce coup ci ,clique sur "options" (petit tournevis vert) et coche la case 082 (CKF) et colle le nouveau rapport .
    0
    1. Reborn17
       
      pourquoi format factorie ( en + je vien de le télécharger a 11h44 ) ...
      0
  3. jfkpresident Messages postés 13877 Statut Contributeur sécurité 1 175
     
    pourquoi format factorie ( en + je vien de le télécharger a 11h44 ) ...


    Je n'ai aucunes dates d'inscrite sur le rapport.

    Maintenant j'essaie de t'aider ...A toi de voir si tu veux continuer ou aller voir ailleurs .

    Par ailleurs : http://virus-com.com/viruscom/viruscom_95499.html
    0
    1. Reborn17
       
      Ok escuse moi je savais pas que formatfactorie étai un virus mais es ce que c'est possible que se soit le pirate ?
      0
  4. jfkpresident Messages postés 13877 Statut Contributeur sécurité 1 175
     
    Il est possible que ce soit un "Backdoor" qui ouvre une porte et donc l'acces a ton pc ...Il se peut qu'il soit également assimiler ou creer a partir d'un autre fichier infecté ou driver infecté ...

    Maintenant si tu pouvais faire les manips ,on avancerait peut etre un peu :)
    0
    1. Reborn17
       
      Ok je vais la faire
      0
    2. Reborn17
       
      Le problem c'est que il ne trouve pas
      C:\Program Files\FreeTime\FormatFactory\FormatFactory.exe
      0
    3. jfkpresident Messages postés 13877 Statut Contributeur sécurité 1 175
        
      Le problem c'est que il ne trouve pas
C:\Program Files\FreeTime\FormatFactory\FormatFactory.exe


      Et tu sais pourquoi ? Parceque c'est un malware .

      Maintenant colle moi le rapport de Zhpdiag comme demandé ici
      0
    4. jacques.gache Messages postés 34829 Statut Contributeur sécurité 1 645
       
      jfkpresident bonjour, comptant de te voir ici !! perso j'ai C:\Program Files\FreeTime\FormatFactory\FormatFactory.exe cela sur mon pc depuis plusieurs années et pas de problème !!! mais bon tu as surement tes raisons !!!
      0
    5. jfkpresident Messages postés 13877 Statut Contributeur sécurité 1 175
       
      Salut Jacques -;)

      Je me trompe peut etre ?!
      0

  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. Reborn17
     
    J'ai petetre trouver un indice :

    Lorsque le pirate ma contacter avec MSN petetre qu'il a fait des manip pour obtenir mon adresse IP et ce connecter a mon bureau avec le logiciel qui est instaler dans windows
    0
  7. jfkpresident Messages postés 13877 Statut Contributeur sécurité 1 175
     
    Il vient ce rapport ZhpDiag ??
    0
  8. Reborn17
     
    Voila le lien du raport :

    http://www.cijoint.fr/cj201010/cij7PIKgIS.txt
    0
  9. jfkpresident Messages postés 13877 Statut Contributeur sécurité 1 175
     
    Télécharge ATF Cleaner par Atribune:
    http://www.atribune.org/ccount/click.php?id=1
    Double-clique ATF-Cleaner.exe afin de lancer le programme.
    Sous l'onglet Main, choisis : Select All
    Clique sur le bouton Empty Selected
    Si tu utilises le navigateur Firefox :
    Clique Firefox au haut et choisis : Select All
    Clique le bouton Empty Selected
    NOTE : Si tu veux conserver tes mots de passe sauvegardés, clique No à l'invite.
    Si tu utilises le navigateur Opera :
    Clique Opera au haut et choisis : Select All
    Clique le bouton Empty Selected
    NOTE : Si tu veux conserver tes mots de passe sauvegardés, clique No à l'invite.
    Clique Exit, du menu prinicipal, afin de fermer le programme.
    Pour obtenir du Support technique, double-clique l'adresse électronique située au bas de chacun des menus.
    0
  10. Reborn17
     
    Télécharge ATF Cleaner par Atribune:
    http://www.atribune.org/ccount/click.php?id=1
    Double-clique ATF-Cleaner.exe afin de lancer le programme.
    Sous l'onglet Main, choisis : Select All
    Clique sur le bouton Empty Selected
    Si tu utilises le navigateur Firefox :
    Clique Firefox au haut et choisis : Select All
    Clique le bouton Empty Selected
    NOTE : Si tu veux conserver tes mots de passe sauvegardés, clique No à l'invite.
    Si tu utilises le navigateur Opera :
    Clique Opera au haut et choisis : Select All
    Clique le bouton Empty Selected
    NOTE : Si tu veux conserver tes mots de passe sauvegardés, clique No à l'invite.
    Clique Exit, du menu prinicipal, afin de fermer le programme.
    Pour obtenir du Support technique, double-clique l'adresse électronique située au bas de chacun des menus.

    Mais pourquoi tu menvoie pas mail petetre que quelqu'un d'autre auras besoin de ca plus tard...
    0
    1. Reborn17
       
      Sinon je ferai sa plus tard se soir ou mercredit car j'ai cour ....
      0
  11. jfkpresident Messages postés 13877 Statut Contributeur sécurité 1 175
     
    Mais pourquoi tu menvoie pas mail petetre que quelqu'un d'autre auras besoin de ca plus tard...


    Rien compris a ta phrase ?!
    0
    1. Reborn17
       
      jfkpresident tu ma envoiller des instruction pas mail et moi je dit que si quelqu'un a le meme problem et qu'il vien voir sur ce forum sa l'aidera.
      0
    2. Bidouilleu_R Messages postés 1209 Statut Membre 296
       
      Je me permets une incruste ...
      il a dit : traduction française ..."mais pourquoi tu m'envois par e-mail des instructions?
      je pense que quelqu'un d'autres pourrait en avoir besoin plus tard, n'est-il pas?"

      et la réponse est :... personne ne t'as envoyé de mail... donc suit les instruction ici et point barre.
      0
  12. Reborn17
     
    Je télécharge Kaspersky et j'annalise ensuite je fait votre truk .

    PS : vraiment désoler car j'ai pas vu que tu avai mis le truk avec ATF Cleaner ici car je navai pas cliquer sur " afficher tous les comentaire encor désoler...
    0
  13. Adultère
     
    1)Télécharge MalwareByte's, Fais un scan du système COMPLET ! Supprime toute tes infections.
    2) Fais un nettoyage de disque.
    Et tu verras que ton pc ne sera plus piraté, et fonctionnera plus rapidement.
    -1
Précédent
  • 1
  • 2

Discussions similaires

Compte Epic Games piraté (Mot de passe et Mail changé)
Jibey -
CanardSage71 -

39 réponses
Explication de la chanson comme des enfants
jamyursc -
Zadig -

14 réponses
Message : votre iPhone a été piraté. Que faire ?
Paqi5241 -
LeRoiBerny -

12 réponses
message iphone piraté
enzo -
Panth33ra -

3 réponses