Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

"Hkey_Current_User is missing "CurrentVersion"


  • Please log in to reply
4 replies to this topic

#1 gerryw01

gerryw01

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:06:53 PM

Posted 12 October 2011 - 11:57 AM

Hi,
I have received notice of a possibe Security Alert, (see below) so I followed the Registry path as far \Microsoft\ but there it ended because I seem to have a missing... \CurrentVersion\?

Is this normal or do I have a major problem?


Security Alert: W32.Masavebe

W32.Masavebe a worm that spreads between PCs via removable drives. It creates the following file on infected systems:
%Temp%\​34542.exe
In addition to creating this file, it also creates the following registry entry:
HKEY_CURRENT_USER\​Software\​Microsoft\​CurrentVersion\​Run\​"MSN" = "%Temp%\​34542.exe"

BC AdBot (Login to Remove)

 


#2 .X.

.X.

  • Members
  • 490 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:01:53 PM

Posted 12 October 2011 - 12:05 PM

It's Microsoft\Windows\CurrentVersion not Microsoft\CurrentVersion

#3 Eyesee

Eyesee

    Bleepin Teck Shop


  • BC Advisor
  • 3,545 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:In the middle of Kansas
  • Local time:12:53 PM

Posted 12 October 2011 - 12:11 PM

Hello and welcome to the forum!

Could you please post a link to this alert.

Since they are missing a key part of the registry path it might be dubious.
Might also be a typo on their part. I spotted their mistake immediately.

Also, be advised that one should not tinker with the registry as it may render your system unusable.

Edit: .X. spotted their error as well. It would still be nice to see the link though.

Edited by Eyesee, 12 October 2011 - 12:13 PM.

In the beginning there was the command line.

#4 gerryw01

gerryw01
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:06:53 PM

Posted 13 October 2011 - 05:42 AM

Hi,
Thanks for your reply x!

The article was part of an Email Newsletter from "Windows Secrets" and received 'Date:Wed, 12 Oct 2011 17:05.'
and as requested I have insert the link below.

Windows Secret Web Site

Thanks again

#5 Eyesee

Eyesee

    Bleepin Teck Shop


  • BC Advisor
  • 3,545 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:In the middle of Kansas
  • Local time:12:53 PM

Posted 13 October 2011 - 11:45 AM

I am really suprised that they made such a glaring mistake.

Oh well, we are all human!
In the beginning there was the command line.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users