What does HKLMSoftwareMicrosoftL=3000000 mean?

Sasha

Distinguished
Apr 8, 2004
22
0
18,510
Archived from groups: microsoft.public.win2000.registry,microsoft.public.de.windowsxp.registry,microsoft.public.windowsnt.registry (More info?)

Hi!

Found the following directory:
HKLM\Software\Microsoft\L=3000000\
This directory contains excatly only one element:
= =04 00 04 04
(This should be read as-is, i.e. the name of the item is composed of
four chars, namely the equality character and three spaces)

What does it mean?

Thanks in advance,
sasha.
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.registry,microsoft.public.de.windowsxp.registry,microsoft.public.windowsnt.registry (More info?)

In microsoft.public.win2000.registry sasha wrote:

> Hi!
>
> Found the following directory:
> HKLM\Software\Microsoft\L=3000000\
> This directory contains excatly only one element:

You are describing a KEY and (not a directory) above. It is also a
fully qualified registry path to that key.

> = =04 00 04 04
> (This should be read as-is, i.e. the name of the item is composed
of
> four chars, namely the equality character and three spaces)
>
> What does it mean?

Absolutely nothing out of context. It might mean something to the
application that put it there and reads it later. You should usually
also include that TYPE of data, but this looks like REG_SZ.

Otherwise, I do not recognize it as anything familiar to me.

Are you just exploring? Have you run a series of "Anti-*" tools
seeking malware of various types?

Did you try Google? (seems unlikely though). Perhaps someone will
already recognize it and post.
 

Sasha

Distinguished
Apr 8, 2004
22
0
18,510
Archived from groups: microsoft.public.win2000.registry,microsoft.public.de.windowsxp.registry,microsoft.public.windowsnt.registry (More info?)

> You are describing a KEY and (not a directory) above. It is also a
> fully qualified registry path to that key.
ok.
>
>
>>= =04 00 04 04
>>(This should be read as-is, i.e. the name of the item is composed
>
> of
>
>>four chars, namely the equality character and three spaces)
>>
>>What does it mean?
>
>
> Absolutely nothing out of context. It might mean something to the
> application that put it there and reads it later.
Sure.
> Are you just exploring?
Yes.
> Have you run a series of "Anti-*" tools
> seeking malware of various types?
I seem to have no malware. What checker do you suggest?
>
> Did you try Google? (seems unlikely though).
Found nothing.
> Perhaps someone will
> already recognize it and post.