regcreateval "(default)"? (was Re: ILOVEYOU version 2.0 ..)

[Peter Samuelson]

[Todd Sabin <tas at webspan.net>]
> Well, these values which show as "(Default)" in regedit (and "<No
> Name>" in regedt32) actually have "" as their value-name.  Yes,
> that's the Null string.

I suspected as much.

> Why MS lets you create values with no name is beyond me.  Anyway,
> samba-tng's rpcclient (at least) can create these with a small patch.
> Here it is against samba-tng-alpha.2.5.3:

Woohoo!  I haven't tried it yet, but (assuming it works) many thanks!
Full remote access to NT registries!  Well, except for ACLs, but I
don't really need those.

> regcreateval HKCR\Software\Foo\ 1 bar
> 
> Which creates a value with no name under key Foo.  Note the trailing
> backslash.  That might be confusing to some, but I don't have a
> better idea for how to handle it.

No, that's absolutely intuitive.  That's what I was trying to do before
(and rpcclient of course wouldn't let me).

Definitely you need the trailing slash, because it is possible to have
a key and value of the same name under the same key.  *That* is the
confusing part, in my opinion, and as usual, it's All Microsoft's
Fault. (:

Peter