Link to home
Create AccountLog in
Avatar of David Johnson, CD
David Johnson, CDFlag for Canada

asked on

Weird Registry Entries

While investigating another users question I found a bunch of WEIRD entries in my registry

Windows Registry Editor Version 5.00
[HKEY_CLASSES_ROOT\.mht\OpenWithList\Microsoft Word]
[HKEY_CLASSES_ROOT\.mht\OpenWithList\Microsoft Word\shell]
[HKEY_CLASSES_ROOT\.mht\OpenWithList\Microsoft Word\shell\edit]
@="&Open"
[HKEY_CLASSES_ROOT\.mht\OpenWithList\Microsoft Word\shell\edit\command]
@="\"C:\\Program Files (x86)\\Microsoft Office\\Office15\\WINWORD.EXE\" /n \"%1\" /o \"%u\""
"command"=hex(7):7a,00,71,00,50,00,5e,00,56,00,35,00,21,00,21,00,21,00,21,00,\
  21,00,21,00,21,00,21,00,21,00,4d,00,4b,00,4b,00,53,00,6b,00,57,00,4f,00,52,\
  00,44,00,46,00,69,00,6c,00,65,00,73,00,3e,00,21,00,32,00,2d,00,31,00,26,00,\
  6d,00,26,00,38,00,79,00,40,00,4e,00,6d,00,6f,00,32,00,72,00,29,00,5e,00,66,\
  00,2d,00,43,00,20,00,2f,00,6e,00,20,00,22,00,25,00,31,00,22,00,20,00,2f,00,\
  6f,00,20,00,22,00,25,00,75,00,22,00,00,00,00,00

"command" value as seen in regedit
zqP^V5!!!!!!!!!MKKSkWORDFiles>!2-1&m&8y@Nmo2r)^f-C /n "%1" /o "%u"

Is this normal or do I have a potential problem?
Avatar of Dave Baldwin
Dave Baldwin
Flag of United States of America image

The 'mht' entries are probably alright.  'mht' is a compressed format for saving complete HTML pages include all files and images.
ASKER CERTIFIED SOLUTION
Avatar of CSI-Windows_com
CSI-Windows_com
Flag of United States of America image

Link to home
membership
Create an account to see this answer
Signing up is free. No credit card required.
Create Account
Avatar of David Johnson, CD

ASKER

zqP^V5!!!!!!!!!MKKSkWORDFiles>!2-1&m&8y@Nmo2r)^f-C /n "%1" /o "%u"

this is the part that I'm curious about..

zqP^V5!!!!!!!!!MKKSkWORDFiles>!2-1&m&8y@Nmo2r)^f-C translates to:
C:\\Program Files (x86)\\Microsoft Office\\Office15\\WINWORD.EXE\    ?????

The tail is the same /n \"%1\" /o \"%u\

If I edit the bottom to match the top.. Word loads 1000% faster, probably will get the same speed up if I do the same with the other office products..  I may lose the word command line options though as it strips the %1

@DaveBaldwin: the extension .mht wasn't the part that I'm curious about.  It was the hex values that look like something that is obfuscated
It is a darwin descriptor vice identifier (close enough that I could search on it)
http://msdn.microsoft.com/en-us/library/aa302344.aspx

I normally don't muck around in the registry except for specific changes to enable/disable features, but I was tracing how a file is executed by using file extension, following the class-id's when I ran across this..

Thank you for the great assistance