Which of the following registry values can be used to identify this worm?

The Klez worm is a mass-mailing worm that exploits a vulnerability to open an executable attachment even in Microsoft Outlook’s preview pane. The Klez worm gathers email addresses from the entries of the default Windows Address Book (WAB). Which of the following registry values can be used to identify this worm?

Question:

Which of the following registry values can be used to identify this worm?

Options:

HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunServices

HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun

HKEY_CURRENT_USERSoftwareMicrosoftWABWAB4Wab File Name = “file and pathname of the WAB file”

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun

Correct Answer

The Correct Answer for this Question is

HKEY_CURRENT_USERSoftwareMicrosoftWABWAB4Wab File Name = “file and pathname of the WAB file”

Leave a Comment