Pre-Summer Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: validbest

Discussions
  1. Home
  2. Discussions
  3. GIAC
  4. Security Administration
  5. GCIH Discussions
  6. GCIH Exam Topic 3 Question 24 Discussion
 GIAC Discussions
Exam GCIH All Questions
Exam GCIH All Questions

View all questions & answers for the GCIH exam

Go to Exam

GIAC Security Administration GCIH Question # 24 Topic 3 Discussion

GCIH Exam Topic 3 Question 24 Discussion:
Question #: 24
Topic #: 3

The Klez worm is a mass-mailing worm that exploits a vulnerability to open an executable attachment even in Microsoft Outlook's preview pane. The Klez worm gathers email addresses from the entries of the default Windows Address Book (WAB). Which of the following registry values can be used to identify this worm?
A.

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices

B.

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run

C.

HKEY_CURRENT_USER\Software\Microsoft\WAB\WAB4\Wab File Name = "file and pathname of the WAB file"

D.

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

Get Premium GCIH Questions
Actual exam question for GIAC GCIH exam by Quill91495 at Apr 30, 2026, 9:40:26 AM

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.

Submit