[Version] 
Signature="$Chicago$" 
Provider=Vaksincom 

[DefaultInstall] 
AddReg=UnhookRegKey 
DelReg=del 

[UnhookRegKey] 
HKLM, Software\CLASSES\batfile\shell\open\command,,,"""%1"" %*" 
HKLM, Software\CLASSES\comfile\shell\open\command,,,"""%1"" %*" 
HKLM, Software\CLASSES\exefile\shell\open\command,,,"""%1"" %*" 
HKLM, Software\CLASSES\piffile\shell\open\command,,,"""%1"" %*" 
HKLM, Software\CLASSES\lnkfile\shell\open\command,,,"""%1"" %*" 
HKLM, Software\CLASSES\regfile\shell\open\command,,,"regedit.exe "%1"" 
HKLM, Software\CLASSES\scrfile\shell\open\command,,,"""%1"" %*" 
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion, ProductName,0, "Windows" 
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion, RegisteredOrganization,0, "Organization" 
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion, RegisteredOwner,0, "Owner" 
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell,0, "Explorer.exe" 
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, userinit,0, "C:\WINDOWS\system32\userinit.exe," 
HKLM, SYSTEM\ControlSet001\Control\SafeBoot, AlternateShell,0, "cmd.exe" 
HKLM, SYSTEM\ControlSet002\Control\SafeBoot, AlternateShell,0, "cmd.exe" 
HKLM, SYSTEM\ControlSet003\Control\SafeBoot, AlternateShell,0, "cmd.exe" 
HKLM, SYSTEM\CurrentControlSet\Control\SafeBoot, AlternateShell,0, "cmd.exe" 
HKCU, Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced, ShowSuperHidden,0x00010001,1 
HKCU, Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced, SuperHidden,0x00010001,1 
HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden, UncheckedValue,0x00010001,1 
HKCU, Control Panel\International, s1159,0, "AM" 
HKCU, Control Panel\International, s2359,0, "PM" 

[del] 
HKCU, Software\Microsoft\Windows\CurrentVersion\Run,cetix 
HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\Run,poison 
HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\System,DisableRegistryTools 
HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\System,DisableTaskMgr 
HKLM, SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore,DisableSR 
HKLM, SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore, DisableConfig