If you have search properly, you will find the following:http://www.google.com.my/search?q=HKLM\SOFTWARE\Classes\*\OpenWithList\Winword.exe&ie=utf-8&oe=utf-8&aq=t&rls=org.mozilla:en-US:official&client=firefox-ahttp://www.threatexp...2e38625e93b1c1ahttp://www.threatexp...80f7cece4579c7fhttp://www.threatexp...1e-574b1e61588f
From McAfee site, the registry refers below might be created by "potentially unwanted program" or PUPhttp://vil.nai.com/v...nt/v_283029.htmhttp://vil.nai.com/v...nt/v_295598.htm
This software is not a virus or a Trojan. It is detected as a "potentially unwanted program" (PUP). PUPs are any piece of software that a reasonably security- or privacy-minded computer user may want to be informed of and, in some cases, remove. PUPs are often made by a legitimate corporate entity for some beneficial purpose, but they alter the security state of the computer on which they are installed, or the privacy posture of the user of the system, such that most users will want to be aware of them.
But at the same time, the line can be legitimate.http://support.microsoft.com/kb/258860http://www.internetf...wer/IF00276.htmOpenWith
list is a list that is associated with respective application when we right click
our mouse and select an application to be Open WithExample Here
To make matter worse, some programs, such as Opera, Firefox, Microsoft Office Picture Manager (OIS.exe), OpenOffice.org and Windows Media Center (WMC) automatically associate themselves with certain filetypes and file extensions, especially for images and video files such as HTML, JPG, JPEG, PNG, GIF, BMP and etc, even if the users never use the program to open the file type. Some programs does not remove its entry in Open With recommended programs list when it’s been uninstalled, effectively mean that users have to manually remove and delete the entry in registry to clear and get rid of unwanted, unneeded or unused programs in Open With or Recommended Programs list.
Note: The programs on the Open With or Recommended Programs list for each file type are independent of that file’s registered or default associated program(s). Thus, deleting or removing a program from Open With list does not unassociate file type with its default program, nor affect the ability to automatically open the file in its default program when double click or click on Open command while right click. However, deletion of some registry keys does remove program’s default definition of file types and extensions it can handle at Default Programs.
Since you mentioned that the system is under VM environment and freshly installed, i would rather think it is a default key in the registry.
Please correct me if i am wrong and sorry for my bad english.
Edited by rozario44, 25 October 2010 - 10:28 AM.