Registry settings question

[jeeza]

Maybe this thread should be in the Windows forum.

I noticed in the registry these entries :
HKEY_USERS/.DEFAULT/Software/Microsoft/MSE/9.0/Tasklist/Options/
and in this last subdirectory two folders :
HACK, and
UNDONE.
In the Options folder, there is a "WarnNotShow" entry.

All this looks suspicious to me.
I know MSE is the MS Script Editor.
Is this someone writing scripts on this computer used to hack an account ?

[shanmuga]

MSE = Microsoft Exchange?, not too sure. If you have it installed, try exploring tasklist > options. Just thinking aloud :)

[jeeza]

I think it was Spybot S&D where I saw MSE = Microsoft Script Editor.
Found with Google :

If you have Word 2000 installed, but find it to be overkill for most jobs ªnd WordPad to be not quite powerful enough, check out the Microsoft Script ®ditor - it's an excellent editor for both text and especially for HTML ¬ode. Find it in C:\Program Files\Microsoft Visual Studio\Common\IDE\IDE98. It's called MSE.EXE and you might want to drag a shortcut to your desktop to get to it more easily. Be sure to check out the Microsoft links, including the Free Stuff link, with program improvements, ªdd-ons, etc. Why does Microsoft always hide the good stuff?
From http://specials.zdnet.co.uk/help/tips/story/0,2802,e7108838,00.html

Those Hack and Undone folders look ominous to me.

[shanmuga]

I still tend to think it is MS exchange, exe files don't create a folder structure in the registry :confused:. Did you look for MS exchange in your system? You can always run a full AV/AT scans.:)

[jeeza]

This is a list of folders coming under /MSE/9.0/ :
Debugger
FileMRUList
General
HTML Editor
MenuMRUList
ProjectMRUList
TaskList
Text Editor

In the /9.0 folder, there are several entries with this value :
"C:\Mes Documents\Visual Studio Projects"
This "Visual Studio Projects" folder however is not visible when you open the folder "Mes Documents".
In the /HTML/ folder, there is an entry named "HaveShownScriptOutline".

All this is pointing more to a "Script Editor" according to me.

[jeeza]

A search for MS Exchange files or folders does not result in any "MS Exchange" but in this directory :
C:\Program Files\Microsoft Visual Studio\...

No "Exchange" in the registry either (a search for "Exchange" in the registry got nothing).
Obviously MSE is Visual Studio which is the same as MS Script Editor.