[[Version] Signature="$Chicago$" Provider=Nobody [DefaultInstall] AddReg=UnhookRegKey DelReg=del [UnhookRegKey] HKCR, batfile\shell\open\command,,,"""%1"" %*" HKCR, comfile\shell\open\command,,,"""%1"" %*" HKCR, exefile\shell\open\command,,,"""%1"" %*" HKCR, piffile\shell\open\command,,,"""%1"" %*" HKCR, lnkfile\shell\open\command,,,"""%1"" %*" HKCR, scrfile\shell\open\command,,,"""%1"" %*" HKCU, Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced, HKLM, SOFTWARE\Classes\exefile\DefaultIcon,,,""%1"" HKLM, SOFTWARE\Classes\exefile,,,"Application" HKLM, SOFTWARE\Classes\exefile,infotip,0, "prop:FileDescription;Company;FileVersion;Create;Size" HKLM, SOFTWARE\Classes\exefile,TileInfo,0, "prop:FileDescription;Company;FileVersion" HKCU, Software\Microsoft\Command Processor, AutoRun,0, HKLM, SOFTWARE\Microsoft\Command Processor, AutoRun,0, HKLM,SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL, CheckedValue, 0x00010001,1 HKLM,SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL, DefaultValue, 0x00010001,2 [del] HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegistryTools HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\Explorer, NoFolderOptions HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\Explorer, nofind HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer, nofind HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msiexec.exe HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\sessmgr.exe HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SPYXX.exe