# Installation Report: server

Generated by InCtrl5, version 1.0.0.0
Install program: C:\Documents and Settings\Kobayashi\Desktop\C[1].C.M_Profesional_RAT_Demo\C[1].C.M_Profesional_RAT_Demo\server.exe
10/9/2006 5:11 PM

### Contents

- Registry
- Disk Contents
- Ini Files
- Text Files

## Registry

### Keys ignored: 0

- (none)

### Keys added: 4

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\

### Keys deleted: 4

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\h
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\h
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\h
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\h

### Values changed: 2

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections "SavedLegacySettings"
  `Old type: REG_BINARY`
  `New type: REG_BINARY`
  `Old data: 3C, 00, 00, 00, 81, 00, 00, 00, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 04, 00, 00, 00, 00, 00, 00, 00, 00, B8, A9, A4, 2C, B1, C4, 01, 01, 00, 00, 00, C0, A8, 00, 03, 00, 00, 00, 00, 00, 00, 00, 00`
  `New data: 3C, 00, 00, 00, 82, 00, 00, 00, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 04, 00, 00, 00, 00, 00, 00, 00, 00, B8, A9, A4, 2C, B1, C4, 01, 01, 00, 00, 00, C0, A8, 00, 03, 00, 00, 00, 00, 00, 00, 00, 00`
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\RNG "Seed"
  `Old type: REG_BINARY`
  `New type: REG_BINARY`
  `Old data: CD, C3, F0, 06, 0D, FD, 47, E2, 08, EF, F8, FD, 13, 1D, CE, 50, AB, 47, 9F, D7, 93, EE, CE, BD, EE, 5C, 28, E8, 2B, 8B, 66, 7D, BC, AC, FD, 11, A4, FE, 2E, 9F, DE, 59, B2, 30, 54, 53, 06, 64, E0, 0C, 2B, EF, 84, C8, C4, 03, 6F, B7, 85, DB, 34, E5, 4E, 5B, 84, 9A, 4C, B4, C0, 0C, B8, 41, 4F, 7A, E8, 2C, B7, 10, 2C, BA`
  `New data: 8A, 77, AD, 72, 58, D9, 84, 39, 4A, 50, 3D, B8, 47, 3D, 89, FC, A6, A3, 5C, E4, 54, CA, BA, E5, FB, B3, 1B, 7B, AF, 89, 93, C9, 02, 30, 42, FD, BF, B2, C4, BA, 30, 54, 70, 6C, 19, B6, 2E, 47, 23, CD, EF, 00, 0C, 07, 1C, 85, 43, F8, A0, 7B, 0B, BB, 6B, 64, CB, D9, 9B, DF, 19, 12, 7B, 8A, B2, B0, 20, 9D, 2E, E9, C9, F2`

To Contents

## Disk contents

### Drives tracked: 1

- c:\

### Files added: 1

c:\WINDOWS\Prefetch\SERVER.EXE-199373C4.pf
  `Date: 10/9/2006 5:10 PM`
  `Size: 14,918 bytes`

### Files changed: 5

c:\Documents and Settings\Kobayashi\NTUSER.DAT.LOG
  `Old date: 10/9/2006 5:09 PM`
  `New date: 10/9/2006 5:10 PM`
  `Old size: 1,024 bytes`
  `New size: 1,024 bytes`
c:\Documents and Settings\Kobayashi\Cookies\index.dat
  `Old date: 10/9/2006 4:51 PM`
  `New date: 10/9/2006 5:10 PM`
  `Old size: 32,768 bytes`
  `New size: 32,768 bytes`
c:\Documents and Settings\Kobayashi\Local Settings\History\History.IE5\index.dat
  `Old date: 10/9/2006 4:51 PM`
  `New date: 10/9/2006 5:10 PM`
  `Old size: 49,152 bytes`
  `New size: 49,152 bytes`
c:\Documents and Settings\Kobayashi\Local Settings\Temporary Internet Files\Content.IE5\index.dat
  `Old date: 10/9/2006 4:51 PM`
  `New date: 10/9/2006 5:10 PM`
  `Old size: 655,360 bytes`
  `New size: 655,360 bytes`
c:\WINDOWS\system32\config\software.LOG
  `Old date: 10/9/2006 5:09 PM`
  `New date: 10/9/2006 5:10 PM`
  `Old size: 1,024 bytes`
  `New size: 1,024 bytes`

To Contents

## INI file

### Ini files tracked: 4

- C:\boot.ini
- c:\windows\control.ini
- c:\windows\system.ini
- c:\windows\win.ini

To Contents

## Text file

### Text files tracked: 2

- c:\windows\system32\autoexec.nt
- c:\windows\system32\config.nt

To Contents

InCtrl5, Copyright © 2000 by Ziff Davis Media, Inc.
Written by Neil J. Rubenking
First published in PC Magazine, December 5, 2000.