[Version] Signature="$Chicago$" Provider=nobody [DefaultInstall] AddReg=UnhookRegKey DelReg=del [UnhookRegKey] HKLM, Software\CLASSES\batfile\shell\open\command,,,"""%1"" %*" HKLM, Software\CLASSES\comfile\shell\open\command,,,"""%1"" %*" HKLM, Software\CLASSES\exefile\shell\open\command,,,"""%1"" %*" HKLM, Software\CLASSES\piffile\shell\open\command,,,"""%1"" %*" HKLM, Software\CLASSES\regfile\shell\open\command,,,"regedit.exe "%1"" HKLM, Software\CLASSES\scrfile\shell\open\command,,,"""%1"" %*" HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell,0, "Explorer.exe" HKCU, Control Panel\Desktop, ConvertedWallpaper,0, "" HKCU, Control Panel\Desktop, OriginalWallpaper,0, "" HKCU, Control Panel\Desktop, SCRNSAVE.EXE,0, "" HKCU, Control Panel\Desktop, Wallpaper,0, "" HKCU, Software\Microsoft\Internet Explorer\Desktop\General, BackupWallpaper,0, "" HKCU, Software\Microsoft\Internet Explorer\Desktop\General, Wallpaper,0, "" [del] HKLM, Software\Microsoft\Windows\CurrentVersion\Run, lphc7nvj0e52e HKLM, Software\Microsoft\Windows\CurrentVersion\Run, services HKLM, Software\Microsoft\Windows\CurrentVersion\Run, SMrhc3nvj0e52e HKLM, Software\Microsoft\Windows\CurrentVersion\Run, rhc3nvj0e52e.exe HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\System, NoDispBackgroundPage HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\System, NoDispScrSavPage HKLM, SYSTEM\CurrentControlSet\Services\6127a5e3 HKLM, SYSTEM\ControlSet002\Services\6127a5e3 HKLM, SYSTEM\ControlSet001\Services\6127a5e3 HKLM, SYSTEM\ControlSet001\Services\CbEvtSvc HKLM, SYSTEM\ControlSet002\Services\CbEvtSvc HKLM, SYSTEM\CurrentControlSet\Services\CbEvtSvc HKLM, SYSTEM\ControlSet001\Services\CbEvtSvc HKLM, SYSTEM\CControlSet002\Services\CbEvtSvc HKLM, SOFTWARE\Microsoft\software notifier HKLM, software\Microsoft\Windows\CurrentVersion\Uninstall\rhc3nvj0e52e HKLM, software\rhc3nvj0e52e HKLM, software\Microsoft\Windows\CurrentVersion, rhc3nvj0e52e HKLM, software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform HKLM, SOFTWARE\Microsoft\Software Notifier HKLM, SYSTEM\ControlSet001\Services\125c1fb5 HKLM, SYSTEM\ControlSet002\Services\125c1fb5 HKLM, SYSTEM\CurrentControlSet\Services\125c1fb5