[Version] Signature="$Chicago$" Provider=nobody [DefaultInstall] AddReg=inject DelReg=remove [inject] HKLM, Software\CLASSES\batfile\shell\open\command,,,"""%1"" %*" HKLM, Software\CLASSES\comfile\shell\open\command,,,"""%1"" %*" HKLM, Software\CLASSES\exefile\shell\open\command,,,"""%1"" %*" HKLM, Software\CLASSES\piffile\shell\open\command,,,"""%1"" %*" HKLM, Software\CLASSES\regfile\shell\open\command,,,"regedit.exe "%1"" HKLM, Software\CLASSES\scrfile\shell\open\command,,,"""%1"" %*" HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell,0, "Explorer.exe" HKCU, Software\Microsoft\Internet Explorer\Main, Start Page,0, "about:blank" HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon,userinit,0, "userinit.exe" [remove] HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\Run,reader_s HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\Run,47543326 HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\Run,PromoReg HKCU, SOFTWARE\Microsoft\Windows\CurrentVersion\Run,reader_s HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\System,EnableProfileQuota HKLM, SOFTWARE\AGProtect HKLM, SOFTWARE\47543326 HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Network, UID HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion, Rlist HKU, .DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\{43BF8CD1-C5D5-2230-7BB2-98F22C2B7DC6} HKU, .DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\{8FFA689D-2C2B-2B2E-D865-74C04CA4EF06}