Archived from groups: microsoft.public.windowsxp.perform_maintain (More info?)
I was browsing through my registry today when i discovered the following
litle snippet of text prefacing many different registry entries. Thinking
that it could only be the result of a virus or spyware infection i began to
delete every occurence but when they became quite numerous i began to think
maybe they were supposed to be there. can anyone tell me anything about this?
Google turns up nothing...
for example, one registry key is
[HKEY_CLASSES_ROOT\Word.Document.8\shell\Print\command]
which has as an entry named (default) which is a REG_SZ key with the
following.
"C:\Program Files\Microsoft Office\Office10\WINWORD.EXE" /x /n /dde
and then right below it is an entry named (command) which is a REG_MULTI_SZ
which displays the following
(f'^Vn-}f(YR]eAR6.jiWORDFiles>L&rfUmW.cG.e%fI4G}jd /x /n /dde
and an export of that key shows up as...
"command"=hex(7):28,00,66,00,27,00,5e,00,56,00,6e,00,2d,00,7d,00,66,00,28,00,\
59,00,52,00,5d,00,65,00,41,00,52,00,36,00,2e,00,6a,00,69,00,57,00,4f,00,52,\
00,44,00,46,00,69,00,6c,00,65,00,73,00,3e,00,4c,00,26,00,72,00,66,00,55,00,\
6d,00,57,00,2e,00,63,00,47,00,2e,00,65,00,25,00,66,00,49,00,34,00,47,00,7d,\
00,6a,00,64,00,20,00,2f,00,78,00,20,00,2f,00,6e,00,20,00,2f,00,64,00,64,00,\
65,00,00,00,00,00
any clues or help would be appreciated
--
Pastor Bob Parker
I was browsing through my registry today when i discovered the following
litle snippet of text prefacing many different registry entries. Thinking
that it could only be the result of a virus or spyware infection i began to
delete every occurence but when they became quite numerous i began to think
maybe they were supposed to be there. can anyone tell me anything about this?
Google turns up nothing...
for example, one registry key is
[HKEY_CLASSES_ROOT\Word.Document.8\shell\Print\command]
which has as an entry named (default) which is a REG_SZ key with the
following.
"C:\Program Files\Microsoft Office\Office10\WINWORD.EXE" /x /n /dde
and then right below it is an entry named (command) which is a REG_MULTI_SZ
which displays the following
(f'^Vn-}f(YR]eAR6.jiWORDFiles>L&rfUmW.cG.e%fI4G}jd /x /n /dde
and an export of that key shows up as...
"command"=hex(7):28,00,66,00,27,00,5e,00,56,00,6e,00,2d,00,7d,00,66,00,28,00,\
59,00,52,00,5d,00,65,00,41,00,52,00,36,00,2e,00,6a,00,69,00,57,00,4f,00,52,\
00,44,00,46,00,69,00,6c,00,65,00,73,00,3e,00,4c,00,26,00,72,00,66,00,55,00,\
6d,00,57,00,2e,00,63,00,47,00,2e,00,65,00,25,00,66,00,49,00,34,00,47,00,7d,\
00,6a,00,64,00,20,00,2f,00,78,00,20,00,2f,00,6e,00,20,00,2f,00,64,00,64,00,\
65,00,00,00,00,00
any clues or help would be appreciated
--
Pastor Bob Parker