# Installation Report: ErrMess Server

Generated by InCtrl5, version 1.0.0.0
Install program: C:\Documents and Settings\Kobayashi\Desktop\err41rc2\err_rc2\errserver.exe
7/27/2008 4:46 PM

### Contents

- Registry
- Disk Contents
- Ini Files
- Text Files

## Registry

### Keys ignored: 0

- (none)

### Keys added: 61

HKEY_CURRENT_USER\Software\Microsoft\Microsoft Agent
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\BitBucket\c
HKEY_CLASSES_ROOT\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402}
HKEY_CLASSES_ROOT\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402}\Control
HKEY_CLASSES_ROOT\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402}\Implemented Categories
HKEY_CLASSES_ROOT\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402}\Implemented Categories\{0DE86A52-2BAA-11CF-A229-00AA003D7352}
HKEY_CLASSES_ROOT\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402}\Implemented Categories\{0DE86A53-2BAA-11CF-A229-00AA003D7352}
HKEY_CLASSES_ROOT\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402}\Implemented Categories\{0DE86A57-2BAA-11CF-A229-00AA003D7352}
HKEY_CLASSES_ROOT\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402}\Implemented Categories\{40FC6ED4-2438-11CF-A3DB-080036F12502}
HKEY_CLASSES_ROOT\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402}\Implemented Categories\{40FC6ED5-2438-11CF-A3DB-080036F12502}
HKEY_CLASSES_ROOT\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402}\Implemented Categories\{7DD95802-9882-11CF-9FA9-00AA006C42C4}
HKEY_CLASSES_ROOT\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402}\InprocServer32
HKEY_CLASSES_ROOT\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402}\MiscStatus
HKEY_CLASSES_ROOT\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402}\MiscStatus\1
HKEY_CLASSES_ROOT\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402}\ProgID
HKEY_CLASSES_ROOT\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402}\Programmable
HKEY_CLASSES_ROOT\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402}\ToolboxBitmap32
HKEY_CLASSES_ROOT\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402}\TypeLib
HKEY_CLASSES_ROOT\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402}\Version
HKEY_CLASSES_ROOT\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402}\VersionIndependentProgID
HKEY_CLASSES_ROOT\CLSID\{78E5A540-1850-11CF-9D53-00AA003C9CB6}
HKEY_CLASSES_ROOT\CLSID\{78E5A540-1850-11CF-9D53-00AA003C9CB6}\InprocServer32
HKEY_CLASSES_ROOT\CLSID\{AFC634B0-4B8B-11CF-8989-00AA00688B10}
HKEY_CLASSES_ROOT\CLSID\{AFC634B0-4B8B-11CF-8989-00AA00688B10}\InprocServer32
HKEY_CLASSES_ROOT\CLSID\{B617B991-A767-4F05-99BA-AC6FCABB102E}
HKEY_CLASSES_ROOT\CLSID\{B617B991-A767-4F05-99BA-AC6FCABB102E}\InprocServer32
HKEY_CLASSES_ROOT\Interface\{3B7C8862-D78F-101B-B9B5-04021C009402}
HKEY_CLASSES_ROOT\Interface\{3B7C8862-D78F-101B-B9B5-04021C009402}\ProxyStubClsid
HKEY_CLASSES_ROOT\Interface\{3B7C8862-D78F-101B-B9B5-04021C009402}\ProxyStubClsid32
HKEY_CLASSES_ROOT\Interface\{3B7C8862-D78F-101B-B9B5-04021C009402}\TypeLib
HKEY_CLASSES_ROOT\Interface\{859321D0-3FD1-11CF-8981-00AA00688B10}
HKEY_CLASSES_ROOT\Interface\{859321D0-3FD1-11CF-8981-00AA00688B10}\ProxyStubClsid
HKEY_CLASSES_ROOT\Interface\{859321D0-3FD1-11CF-8981-00AA00688B10}\ProxyStubClsid32
HKEY_CLASSES_ROOT\Interface\{859321D0-3FD1-11CF-8981-00AA00688B10}\TypeLib
HKEY_CLASSES_ROOT\Interface\{E9A5593C-CAB0-11D1-8C0B-0000F8754DA1}
HKEY_CLASSES_ROOT\Interface\{E9A5593C-CAB0-11D1-8C0B-0000F8754DA1}\ProxyStubClsid
HKEY_CLASSES_ROOT\Interface\{E9A5593C-CAB0-11D1-8C0B-0000F8754DA1}\ProxyStubClsid32
HKEY_CLASSES_ROOT\Interface\{E9A5593C-CAB0-11D1-8C0B-0000F8754DA1}\TypeLib
HKEY_CLASSES_ROOT\Interface\{ED117630-4090-11CF-8981-00AA00688B10}
HKEY_CLASSES_ROOT\Interface\{ED117630-4090-11CF-8981-00AA00688B10}\ProxyStubClsid
HKEY_CLASSES_ROOT\Interface\{ED117630-4090-11CF-8981-00AA00688B10}\ProxyStubClsid32
HKEY_CLASSES_ROOT\Interface\{ED117630-4090-11CF-8981-00AA00688B10}\TypeLib
HKEY_CLASSES_ROOT\RICHTEXT.RichtextCtrl
HKEY_CLASSES_ROOT\RICHTEXT.RichtextCtrl\CLSID
HKEY_CLASSES_ROOT\RICHTEXT.RichtextCtrl\CurVer
HKEY_CLASSES_ROOT\RICHTEXT.RichtextCtrl.1
HKEY_CLASSES_ROOT\RICHTEXT.RichtextCtrl.1\CLSID
HKEY_CLASSES_ROOT\TypeLib\{3B7C8863-D78F-101B-B9B5-04021C009402}
HKEY_CLASSES_ROOT\TypeLib\{3B7C8863-D78F-101B-B9B5-04021C009402}\1.2
HKEY_CLASSES_ROOT\TypeLib\{3B7C8863-D78F-101B-B9B5-04021C009402}\1.2\0
HKEY_CLASSES_ROOT\TypeLib\{3B7C8863-D78F-101B-B9B5-04021C009402}\1.2\0\win32
HKEY_CLASSES_ROOT\TypeLib\{3B7C8863-D78F-101B-B9B5-04021C009402}\1.2\FLAGS
HKEY_CLASSES_ROOT\TypeLib\{3B7C8863-D78F-101B-B9B5-04021C009402}\1.2\HELPDIR
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\Print\Environments\Windows NT x86\Drivers\n
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\HTTP\Parameters\S
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\HTTP\Parameters\S
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\SharedAccess\Parameters\S
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List

### Keys deleted: 4

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\Print\Environments\Windows NT x86\Drivers\L
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\HTTP\Parameters\
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\HTTP\Parameters\
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\SharedAccess\Parameters\

### Values added: 56

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count "HRZR_EHACNGU:P:\Qbphzragf naq Frggvatf\Xbonlnfuv\Qrfxgbc\ree41ep2\ree_ep2\reefreire.rkr"
  `Type: REG_BINARY`
  `Data: 06, 00, 00, 00, 06, 00, 00, 00, 30, 51, 11, 70, 42, F0, C8, 01`
HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache "C:\Documents and Settings\Kobayashi\Desktop\err41rc2\err_rc2\errserver.exe"
  `Type: REG_SZ`
  `Data: ErrMess Server`
HKEY_CLASSES_ROOT\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402} "(Default)"
  `Type: REG_SZ`
  `Data: Microsoft Rich Textbox Control 6.0 (SP4)`
HKEY_CLASSES_ROOT\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402}\InprocServer32 "(Default)"
  `Type: REG_SZ`
  `Data: C:\Documents and Settings\Kobayashi\Desktop\err41rc2\err_rc2\RICHTX32.OCX`
HKEY_CLASSES_ROOT\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402}\InprocServer32 "ThreadingModel"
  `Type: REG_SZ`
  `Data: Apartment`
HKEY_CLASSES_ROOT\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402}\MiscStatus "(Default)"
  `Type: REG_SZ`
  `Data: 0`
HKEY_CLASSES_ROOT\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402}\MiscStatus\1 "(Default)"
  `Type: REG_SZ`
  `Data: 131473`
HKEY_CLASSES_ROOT\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402}\ProgID "(Default)"
  `Type: REG_SZ`
  `Data: RICHTEXT.RichtextCtrl.1`
HKEY_CLASSES_ROOT\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402}\ToolboxBitmap32 "(Default)"
  `Type: REG_SZ`
  `Data: C:\Documents and Settings\Kobayashi\Desktop\err41rc2\err_rc2\RICHTX32.OCX, 1`
HKEY_CLASSES_ROOT\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402}\TypeLib "(Default)"
  `Type: REG_SZ`
  `Data: {3B7C8863-D78F-101B-B9B5-04021C009402}`
HKEY_CLASSES_ROOT\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402}\Version "(Default)"
  `Type: REG_SZ`
  `Data: 1.2`
HKEY_CLASSES_ROOT\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402}\VersionIndependentProgID "(Default)"
  `Type: REG_SZ`
  `Data: RICHTEXT.RichtextCtrl`
HKEY_CLASSES_ROOT\CLSID\{78E5A540-1850-11CF-9D53-00AA003C9CB6} "(Default)"
  `Type: REG_SZ`
  `Data: RichText General Property Page Object`
HKEY_CLASSES_ROOT\CLSID\{78E5A540-1850-11CF-9D53-00AA003C9CB6}\InprocServer32 "(Default)"
  `Type: REG_SZ`
  `Data: C:\Documents and Settings\Kobayashi\Desktop\err41rc2\err_rc2\RICHTX32.OCX`
HKEY_CLASSES_ROOT\CLSID\{AFC634B0-4B8B-11CF-8989-00AA00688B10} "(Default)"
  `Type: REG_SZ`
  `Data: RichText Apppearance Property Page Object`
HKEY_CLASSES_ROOT\CLSID\{AFC634B0-4B8B-11CF-8989-00AA00688B10}\InprocServer32 "(Default)"
  `Type: REG_SZ`
  `Data: C:\Documents and Settings\Kobayashi\Desktop\err41rc2\err_rc2\RICHTX32.OCX`
HKEY_CLASSES_ROOT\CLSID\{B617B991-A767-4F05-99BA-AC6FCABB102E} "(Default)"
  `Type: REG_SZ`
  `Data: Microsoft Rich Textbox Control 6.0 (SP4)`
HKEY_CLASSES_ROOT\CLSID\{B617B991-A767-4F05-99BA-AC6FCABB102E}\InprocServer32 "(Default)"
  `Type: REG_SZ`
  `Data: C:\Documents and Settings\Kobayashi\Desktop\err41rc2\err_rc2\RICHTX32.OCX`
HKEY_CLASSES_ROOT\CLSID\{B617B991-A767-4F05-99BA-AC6FCABB102E}\InprocServer32 "ThreadingModel"
  `Type: REG_SZ`
  `Data: Apartment`
HKEY_CLASSES_ROOT\Interface\{3B7C8862-D78F-101B-B9B5-04021C009402} "(Default)"
  `Type: REG_SZ`
  `Data: DRichTextEvents`
HKEY_CLASSES_ROOT\Interface\{3B7C8862-D78F-101B-B9B5-04021C009402}\ProxyStubClsid "(Default)"
  `Type: REG_SZ`
  `Data: {00020420-0000-0000-C000-000000000046}`
HKEY_CLASSES_ROOT\Interface\{3B7C8862-D78F-101B-B9B5-04021C009402}\ProxyStubClsid32 "(Default)"
  `Type: REG_SZ`
  `Data: {00020420-0000-0000-C000-000000000046}`
HKEY_CLASSES_ROOT\Interface\{3B7C8862-D78F-101B-B9B5-04021C009402}\TypeLib "(Default)"
  `Type: REG_SZ`
  `Data: {3B7C8863-D78F-101B-B9B5-04021C009402}`
HKEY_CLASSES_ROOT\Interface\{3B7C8862-D78F-101B-B9B5-04021C009402}\TypeLib "Version"
  `Type: REG_SZ`
  `Data: 1.2`
HKEY_CLASSES_ROOT\Interface\{859321D0-3FD1-11CF-8981-00AA00688B10} "(Default)"
  `Type: REG_SZ`
  `Data: IOLEObjects`
HKEY_CLASSES_ROOT\Interface\{859321D0-3FD1-11CF-8981-00AA00688B10}\ProxyStubClsid "(Default)"
  `Type: REG_SZ`
  `Data: {00020424-0000-0000-C000-000000000046}`
HKEY_CLASSES_ROOT\Interface\{859321D0-3FD1-11CF-8981-00AA00688B10}\ProxyStubClsid32 "(Default)"
  `Type: REG_SZ`
  `Data: {00020424-0000-0000-C000-000000000046}`
HKEY_CLASSES_ROOT\Interface\{859321D0-3FD1-11CF-8981-00AA00688B10}\TypeLib "(Default)"
  `Type: REG_SZ`
  `Data: {3B7C8863-D78F-101B-B9B5-04021C009402}`
HKEY_CLASSES_ROOT\Interface\{859321D0-3FD1-11CF-8981-00AA00688B10}\TypeLib "Version"
  `Type: REG_SZ`
  `Data: 1.2`
HKEY_CLASSES_ROOT\Interface\{E9A5593C-CAB0-11D1-8C0B-0000F8754DA1} "(Default)"
  `Type: REG_SZ`
  `Data: IRichText`
HKEY_CLASSES_ROOT\Interface\{E9A5593C-CAB0-11D1-8C0B-0000F8754DA1}\ProxyStubClsid "(Default)"
  `Type: REG_SZ`
  `Data: {00020424-0000-0000-C000-000000000046}`
HKEY_CLASSES_ROOT\Interface\{E9A5593C-CAB0-11D1-8C0B-0000F8754DA1}\ProxyStubClsid32 "(Default)"
  `Type: REG_SZ`
  `Data: {00020424-0000-0000-C000-000000000046}`
HKEY_CLASSES_ROOT\Interface\{E9A5593C-CAB0-11D1-8C0B-0000F8754DA1}\TypeLib "(Default)"
  `Type: REG_SZ`
  `Data: {3B7C8863-D78F-101B-B9B5-04021C009402}`
HKEY_CLASSES_ROOT\Interface\{E9A5593C-CAB0-11D1-8C0B-0000F8754DA1}\TypeLib "Version"
  `Type: REG_SZ`
  `Data: 1.2`
HKEY_CLASSES_ROOT\Interface\{ED117630-4090-11CF-8981-00AA00688B10} "(Default)"
  `Type: REG_SZ`
  `Data: IOLEObject`
HKEY_CLASSES_ROOT\Interface\{ED117630-4090-11CF-8981-00AA00688B10}\ProxyStubClsid "(Default)"
  `Type: REG_SZ`
  `Data: {00020424-0000-0000-C000-000000000046}`
HKEY_CLASSES_ROOT\Interface\{ED117630-4090-11CF-8981-00AA00688B10}\ProxyStubClsid32 "(Default)"
  `Type: REG_SZ`
  `Data: {00020424-0000-0000-C000-000000000046}`
HKEY_CLASSES_ROOT\Interface\{ED117630-4090-11CF-8981-00AA00688B10}\TypeLib "(Default)"
  `Type: REG_SZ`
  `Data: {3B7C8863-D78F-101B-B9B5-04021C009402}`
HKEY_CLASSES_ROOT\Interface\{ED117630-4090-11CF-8981-00AA00688B10}\TypeLib "Version"
  `Type: REG_SZ`
  `Data: 1.2`
HKEY_CLASSES_ROOT\RICHTEXT.RichtextCtrl "(Default)"
  `Type: REG_SZ`
  `Data: Microsoft Rich Textbox Control 6.0 (SP4)`
HKEY_CLASSES_ROOT\RICHTEXT.RichtextCtrl\CLSID "(Default)"
  `Type: REG_SZ`
  `Data: {3B7C8860-D78F-101B-B9B5-04021C009402}`
HKEY_CLASSES_ROOT\RICHTEXT.RichtextCtrl\CurVer "(Default)"
  `Type: REG_SZ`
  `Data: RICHTEXT.RichtextCtrl.1`
HKEY_CLASSES_ROOT\RICHTEXT.RichtextCtrl.1 "(Default)"
  `Type: REG_SZ`
  `Data: Microsoft Rich Textbox Control 6.0 (SP4)`
HKEY_CLASSES_ROOT\RICHTEXT.RichtextCtrl.1\CLSID "(Default)"
  `Type: REG_SZ`
  `Data: {3B7C8860-D78F-101B-B9B5-04021C009402}`
HKEY_CLASSES_ROOT\TypeLib\{3B7C8863-D78F-101B-B9B5-04021C009402}\1.2 "(Default)"
  `Type: REG_SZ`
  `Data: Microsoft Rich Textbox Control 6.0 (SP4)`
HKEY_CLASSES_ROOT\TypeLib\{3B7C8863-D78F-101B-B9B5-04021C009402}\1.2\0\win32 "(Default)"
  `Type: REG_SZ`
  `Data: C:\Documents and Settings\Kobayashi\Desktop\err41rc2\err_rc2\RICHTX32.OCX`
HKEY_CLASSES_ROOT\TypeLib\{3B7C8863-D78F-101B-B9B5-04021C009402}\1.2\FLAGS "(Default)"
  `Type: REG_SZ`
  `Data: 2`
HKEY_CLASSES_ROOT\TypeLib\{3B7C8863-D78F-101B-B9B5-04021C009402}\1.2\HELPDIR "(Default)"
  `Type: REG_SZ`
  `Data:`
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List "6000:TCP"
  `Type: REG_SZ`
  `Data: 6000:TCP:*:Enabled:errmess`
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List "6001:TCP"
  `Type: REG_SZ`
  `Data: 6001:TCP:*:Enabled:errmess`
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List "6002:TCP"
  `Type: REG_SZ`
  `Data: 6002:TCP:*:Enabled:errmess`
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List "6003:TCP"
  `Type: REG_SZ`
  `Data: 6003:TCP:*:Enabled:errmess`
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List "6000:TCP"
  `Type: REG_SZ`
  `Data: 6000:TCP:*:Enabled:errmess`
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List "6001:TCP"
  `Type: REG_SZ`
  `Data: 6001:TCP:*:Enabled:errmess`
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List "6002:TCP"
  `Type: REG_SZ`
  `Data: 6002:TCP:*:Enabled:errmess`
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List "6003:TCP"
  `Type: REG_SZ`
  `Data: 6003:TCP:*:Enabled:errmess`

### Values changed: 11

HKEY_CURRENT_USER\SessionInformation "ProgramCount"
  `Old type: REG_DWORD`
  `New type: REG_DWORD`
  `Old data: 04, 00, 00, 00`
  `New data: 05, 00, 00, 00`
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon "(Default)"
  `Old type: REG_EXPAND_SZ`
  `New type: REG_EXPAND_SZ`
  `Old data: %SystemRoot%\SYSTEM32\shell32.dll,31`
  `New data: %SystemRoot%\SYSTEM32\shell32.dll,32`
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count "HRZR_EHACNGU"
  `Old type: REG_BINARY`
  `New type: REG_BINARY`
  `Old data: 06, 00, 00, 00, 65, 00, 00, 00, E0, 5B, 9C, 67, 41, F0, C8, 01`
  `New data: 06, 00, 00, 00, 66, 00, 00, 00, 10, B0, 09, 70, 42, F0, C8, 01`
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached "{E88DCCE0-B7B3-11D1-A9F0-00AA0060FA31} {0000013A-0000-0000-C000-000000000046} 0x401"
  `Old type: REG_BINARY`
  `New type: REG_BINARY`
  `Old data: 00, 00, 00, 00, 37, 00, 38, 00, 30, FB, 74, 51, 41, F0, C8, 01`
  `New data: 00, 00, 00, 00, 37, 00, 38, 00, 40, 05, 90, 65, 42, F0, C8, 01`
HKEY_CLASSES_ROOT\Interface\{2334D2B1-713E-11CF-8AE5-00AA00C00905}\TypeLib "(Default)"
  `Old type: REG_SZ`
  `New type: REG_SZ`
  `Old data: {BDC217C8-ED16-11CD-956C-0000C04E4C0A}`
  `New data: {3B7C8863-D78F-101B-B9B5-04021C009402}`
HKEY_CLASSES_ROOT\Interface\{2334D2B1-713E-11CF-8AE5-00AA00C00905}\TypeLib "Version"
  `Old type: REG_SZ`
  `New type: REG_SZ`
  `Old data: 1.1`
  `New data: 1.2`
HKEY_CLASSES_ROOT\Interface\{2334D2B3-713E-11CF-8AE5-00AA00C00905}\TypeLib "(Default)"
  `Old type: REG_SZ`
  `New type: REG_SZ`
  `Old data: {BDC217C8-ED16-11CD-956C-0000C04E4C0A}`
  `New data: {3B7C8863-D78F-101B-B9B5-04021C009402}`
HKEY_CLASSES_ROOT\Interface\{2334D2B3-713E-11CF-8AE5-00AA00C00905}\TypeLib "Version"
  `Old type: REG_SZ`
  `New type: REG_SZ`
  `Old data: 1.1`
  `New data: 1.2`
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\RNG "Seed"
  `Old type: REG_BINARY`
  `New type: REG_BINARY`
  `Old data: 4D, 16, 0D, 30, 73, 62, 69, BB, 9B, DB, 60, F9, 74, 67, 1C, A3, 79, B0, 38, 03, 0D, 91, DE, 37, F7, 22, 88, CE, 13, 36, 9A, 4E, 5A, 83, F6, 82, 6C, B0, 13, 3B, 18, 78, B1, A8, 72, 68, 5D, E0, 70, 8B, C1, E8, 5E, E7, B3, 2B, 86, 38, 6F, 1A, 36, EA, BD, B7, A8, 32, E1, AE, 5B, 43, FA, BA, 0A, 51, 4A, 61, 0F, E3, 2D, C3`
  `New data: AE, A6, 02, 42, A9, 08, 54, C7, D6, A6, 5A, C5, D2, E5, 0B, 30, 58, C1, 0D, DA, 01, 09, 95, 40, 02, 58, 98, 78, 62, CB, C0, 29, 60, 80, 6D, 31, 33, 81, 3E, 7B, B8, 2B, 96, 1B, E1, B8, F3, E5, 82, 62, 8F, 85, 9B, DC, 06, 8B, 8C, FD, F0, D1, 30, 95, 4D, 4C, D2, 54, 9B, 2D, 17, 2E, 15, 23, C9, C1, 83, 7A, 1F, 88, B1, 01`
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Epoch "Epoch"
  `Old type: REG_DWORD`
  `New type: REG_DWORD`
  `Old data: 55, 00, 00, 00`
  `New data: 56, 00, 00, 00`
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Epoch "Epoch"
  `Old type: REG_DWORD`
  `New type: REG_DWORD`
  `Old data: 55, 00, 00, 00`
  `New data: 56, 00, 00, 00`

To Contents

## Disk contents

### Drives tracked: 1

- c:\

### Files added: 9

c:\Documents and Settings\Kobayashi\Desktop\err41rc2\err_rc2\Richtx32.ocx
  `Date: 12/6/2000 3:20 PM`
  `Size: 203,976 bytes`
c:\Documents and Settings\Kobayashi\Desktop\err41rc2\err_rc2\settings.ini
  `Date: 7/27/2008 4:42 PM`
  `Size: 43 bytes`
c:\Documents and Settings\Kobayashi\Local Settings\Temp\~DF8962.tmp
  `Date: 7/27/2008 4:42 PM`
  `Size: 16,384 bytes`
c:\WINDOWS\Prefetch\AGENTSVR.EXE-002E45AB.pf
  `Date: 7/27/2008 4:42 PM`
  `Size: 12,300 bytes`
c:\WINDOWS\Prefetch\ERRSERVER.EXE-3AA461C7.pf
  `Date: 7/27/2008 4:42 PM`
  `Size: 59,000 bytes`
c:\WINDOWS\system32\FILEDEL.avi
  `Date: 7/27/2008 4:42 PM`
  `Size: 12,724 bytes`
c:\WINDOWS\system32\filemove.avi
  `Date: 7/27/2008 4:42 PM`
  `Size: 19,248 bytes`
c:\WINDOWS\system32\TABCTL32.OCX
  `Date: 7/27/2008 4:42 PM`
  `Size: 224,016 bytes`
c:\WINDOWS\system32\vic32.dll
  `Date: 7/27/2008 4:42 PM`
  `Size: 123,904 bytes`

### Files changed: 10

c:\Documents and Settings\Kobayashi\NTUSER.DAT.LOG
  `Old date: 7/27/2008 4:35 PM`
  `New date: 7/27/2008 4:42 PM`
  `Old size: 1,024 bytes`
  `New size: 1,024 bytes`
c:\WINDOWS\Prefetch\VERCLSID.EXE-3667BD89.pf
  `Old date: 7/27/2008 4:34 PM`
  `New date: 7/27/2008 4:42 PM`
  `Old size: 17,796 bytes`
  `New size: 17,868 bytes`
c:\WINDOWS\Prefetch\WINRAR.EXE-39C6DAD9.pf
  `Old date: 7/27/2008 4:34 PM`
  `New date: 7/27/2008 4:42 PM`
  `Old size: 26,198 bytes`
  `New size: 26,306 bytes`
c:\WINDOWS\system32\config\software
  `Old date: 7/27/2008 4:34 PM`
  `New date: 7/27/2008 4:42 PM`
  `Old size: 14,155,776 bytes`
  `New size: 14,155,776 bytes`
c:\WINDOWS\system32\config\software.LOG
  `Old date: 7/27/2008 4:35 PM`
  `New date: 7/27/2008 4:42 PM`
  `Old size: 1,024 bytes`
  `New size: 1,024 bytes`
c:\WINDOWS\system32\config\system.LOG
  `Old date: 7/27/2008 4:35 PM`
  `New date: 7/27/2008 4:42 PM`
  `Old size: 1,024 bytes`
  `New size: 1,024 bytes`
c:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP
  `Old date: 7/27/2008 4:37 PM`
  `New date: 7/27/2008 4:44 PM`
  `Old size: 576 bytes`
  `New size: 576 bytes`
c:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER
  `Old date: 7/27/2008 4:37 PM`
  `New date: 7/27/2008 4:44 PM`
  `Old size: 4 bytes`
  `New size: 4 bytes`
c:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP
  `Old date: 7/27/2008 2:54 PM`
  `New date: 7/27/2008 4:44 PM`
  `Old size: 3,312 bytes`
  `New size: 3,312 bytes`
c:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP
  `Old date: 7/27/2008 4:37 PM`
  `New date: 7/27/2008 4:44 PM`
  `Old size: 2,736 bytes`
  `New size: 2,736 bytes`

To Contents

## INI file

### Ini files tracked: 4

- C:\boot.ini
- c:\windows\control.ini
- c:\windows\system.ini
- c:\windows\win.ini

To Contents

## Text file

### Text files tracked: 2

- c:\windows\system32\autoexec.nt
- c:\windows\system32\config.nt

To Contents

InCtrl5, Copyright © 2000 by Ziff Davis Media, Inc.
Written by Neil J. Rubenking
First published in PC Magazine, December 5, 2000.