Re: Winhlpp32.exe/ W32.HLLW.Gaobot

From: Bob (Bob_at_discussions.microsoft.com)
Date: 03/04/05 

Date: Thu, 3 Mar 2005 17:19:03 -0800

Here are contents of two reg keys from a WXP Pro SP2 client on the network.
Do you also want the one from the isolated client as well?

Thanks....

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Search Assistant\ACMru\5603]
"000"="winhlpp32.exe"
"001"="msconfig.exe"
"002"="*.mpg"
"003"="*.ppt"

Windows Registry Editor Version 5.00

[HKEY_USERS\S-1-5-21-583907252-651377827-725345543-1110\Software\Microsoft\Search Assistant\ACMru\5603]
"000"="winhlpp32.exe"
"001"="msconfig.exe"
"002"="*.mpg"
"003"="*.ppt"

Quantcast