HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\

[jfguerra]

I was checking the registry to ensure I didn't have the
w32.swen.A@mm virus. Everything seems to be fine but I
did come across the following peculiarity.

The HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\
registry key has the normal CurrentVersion set of keys
and all the values seem to be normal. HOWEVER, right
above it I found another registry key called
CurentVersion (with one 'r' in word 'Curent'). It has
two items in it: one is called the (Default) item (with
no value set) and the other is called CommonFilesDir with
the value set to 'C:\Program Files\Common Files'.

Should I do something about this 'extra' set of keys?

Thanks!

 

[Joseph Conway [MSFT]]

You could export and delete them to check the results. That is NOT a normal
registry key but I can also say that I havent seen Swen use that either. As
long as you have the randomly generated virus file deleted and the run key
clean then you should be fine was far as its concerned.