# Installation Report: server

Generated by InCtrl5, version 1.0.0.0
Install program: C:\Documents and Settings\Kobayashi\Desktop\Evil Vnc\Evil Vnc\server.exe
9/10/2008 3:36 PM

### Contents

- Registry
- Disk Contents
- Ini Files
- Text Files

## Registry

### Keys ignored: 0

- (none)

### Keys added: 25

HKEY_CURRENT_USER\Software\Microsoft\Windows Script Host
HKEY_CURRENT_USER\Software\Microsoft\Windows Script Host\Settings
HKEY_CURRENT_USER\Software\ORL
HKEY_CURRENT_USER\Software\ORL\VNCHooks
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\CALC.EXE
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\CLOCK.EXE
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\explorer.exe
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\fpxpress.exe
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\Ide.exe
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\iexplore.exe
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\MSDEV.EXE
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\mspaint.exe
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\NOTEPAD.EXE
HKEY_CURRENT_USER\Software\ORL\WinVNC3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Shell_Update.exe
HKEY_LOCAL_MACHINE\SOFTWARE\ORL
HKEY_LOCAL_MACHINE\SOFTWARE\ORL\WinVNC3
HKEY_LOCAL_MACHINE\SOFTWARE\ORL\WinVNC3\Default
HKEY_LOCAL_MACHINE\SOFTWARE\UltraVnc
HKEY_LOCAL_MACHINE\SOFTWARE\UltraVnc\mslogon
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\Print\Environments\Windows NT x86\Drivers\H
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\HTTP\Parameters\
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\HTTP\Parameters\
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\SharedAccess\Parameters\

### Keys deleted: 4

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\Print\Environments\Windows NT x86\Drivers\o
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\HTTP\Parameters\N
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\HTTP\Parameters\N
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\SharedAccess\Parameters\e

### Values added: 87

HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache "C:\Documents and Settings\Kobayashi\Desktop\Evil Vnc\Evil Vnc\server.exe"
  `Type: REG_SZ`
  `Data: server`
HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache "C:\WINDOWS\regedit.exe"
  `Type: REG_SZ`
  `Data: Registry Editor`
HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache "C:\WINDOWS\Shell_Update\Shell_Update.exe"
  `Type: REG_SZ`
  `Data: Microsoft Win32 Shell Update`
HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache "C:\WINDOWS\System32\WScript.exe"
  `Type: REG_SZ`
  `Data: Microsoft (r) Windows Based Script Host`
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\CALC.EXE "use_Deferral"
  `Type: REG_DWORD`
  `Data: 01, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\CALC.EXE "use_GetUpdateRect"
  `Type: REG_DWORD`
  `Data: 01, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\CALC.EXE "use_KeyPress"
  `Type: REG_DWORD`
  `Data: 00, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\CALC.EXE "use_LButtonUp"
  `Type: REG_DWORD`
  `Data: 00, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\CALC.EXE "use_Timer"
  `Type: REG_DWORD`
  `Data: 00, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\CLOCK.EXE "use_Deferral"
  `Type: REG_DWORD`
  `Data: 01, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\CLOCK.EXE "use_GetUpdateRect"
  `Type: REG_DWORD`
  `Data: 01, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\CLOCK.EXE "use_KeyPress"
  `Type: REG_DWORD`
  `Data: 00, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\CLOCK.EXE "use_LButtonUp"
  `Type: REG_DWORD`
  `Data: 00, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\CLOCK.EXE "use_Timer"
  `Type: REG_DWORD`
  `Data: 01, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\explorer.exe "use_Deferral"
  `Type: REG_DWORD`
  `Data: 01, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\explorer.exe "use_GetUpdateRect"
  `Type: REG_DWORD`
  `Data: 01, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\explorer.exe "use_KeyPress"
  `Type: REG_DWORD`
  `Data: 01, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\explorer.exe "use_LButtonUp"
  `Type: REG_DWORD`
  `Data: 00, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\explorer.exe "use_Timer"
  `Type: REG_DWORD`
  `Data: 00, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\fpxpress.exe "use_Deferral"
  `Type: REG_DWORD`
  `Data: 01, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\fpxpress.exe "use_GetUpdateRect"
  `Type: REG_DWORD`
  `Data: 01, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\fpxpress.exe "use_KeyPress"
  `Type: REG_DWORD`
  `Data: 01, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\fpxpress.exe "use_LButtonUp"
  `Type: REG_DWORD`
  `Data: 01, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\fpxpress.exe "use_Timer"
  `Type: REG_DWORD`
  `Data: 00, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\Ide.exe "use_Deferral"
  `Type: REG_DWORD`
  `Data: 01, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\Ide.exe "use_GetUpdateRect"
  `Type: REG_DWORD`
  `Data: 01, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\Ide.exe "use_KeyPress"
  `Type: REG_DWORD`
  `Data: 01, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\Ide.exe "use_LButtonUp"
  `Type: REG_DWORD`
  `Data: 01, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\Ide.exe "use_Timer"
  `Type: REG_DWORD`
  `Data: 00, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\iexplore.exe "use_Deferral"
  `Type: REG_DWORD`
  `Data: 01, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\iexplore.exe "use_GetUpdateRect"
  `Type: REG_DWORD`
  `Data: 01, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\iexplore.exe "use_KeyPress"
  `Type: REG_DWORD`
  `Data: 01, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\iexplore.exe "use_LButtonUp"
  `Type: REG_DWORD`
  `Data: 01, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\iexplore.exe "use_Timer"
  `Type: REG_DWORD`
  `Data: 00, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\MSDEV.EXE "use_Deferral"
  `Type: REG_DWORD`
  `Data: 01, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\MSDEV.EXE "use_GetUpdateRect"
  `Type: REG_DWORD`
  `Data: 01, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\MSDEV.EXE "use_KeyPress"
  `Type: REG_DWORD`
  `Data: 00, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\MSDEV.EXE "use_LButtonUp"
  `Type: REG_DWORD`
  `Data: 01, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\MSDEV.EXE "use_Timer"
  `Type: REG_DWORD`
  `Data: 00, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\mspaint.exe "use_Deferral"
  `Type: REG_DWORD`
  `Data: 01, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\mspaint.exe "use_GetUpdateRect"
  `Type: REG_DWORD`
  `Data: 01, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\mspaint.exe "use_KeyPress"
  `Type: REG_DWORD`
  `Data: 01, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\mspaint.exe "use_LButtonUp"
  `Type: REG_DWORD`
  `Data: 01, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\mspaint.exe "use_Timer"
  `Type: REG_DWORD`
  `Data: 00, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\NOTEPAD.EXE "use_Deferral"
  `Type: REG_DWORD`
  `Data: 01, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\NOTEPAD.EXE "use_GetUpdateRect"
  `Type: REG_DWORD`
  `Data: 01, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\NOTEPAD.EXE "use_KeyPress"
  `Type: REG_DWORD`
  `Data: 01, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\NOTEPAD.EXE "use_LButtonUp"
  `Type: REG_DWORD`
  `Data: 01, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\NOTEPAD.EXE "use_Timer"
  `Type: REG_DWORD`
  `Data: 00, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\WinVNC3 "AutoPortSelect"
  `Type: REG_DWORD`
  `Data: 00, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\WinVNC3 "BlackAlphaBlending"
  `Type: REG_DWORD`
  `Data: 00, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\WinVNC3 "BlankMonitorEnabled"
  `Type: REG_DWORD`
  `Data: 01, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\WinVNC3 "CaptureAlphaBlending"
  `Type: REG_DWORD`
  `Data: 00, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\WinVNC3 "DefaultScale"
  `Type: REG_DWORD`
  `Data: 01, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\WinVNC3 "DSMPlugin"
  `Type: REG_BINARY`
  `Data: (data too large: 256 bytes)`
HKEY_CURRENT_USER\Software\ORL\WinVNC3 "FileTransferEnabled"
  `Type: REG_DWORD`
  `Data: 01, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\WinVNC3 "FTUserImpersonation"
  `Type: REG_DWORD`
  `Data: 01, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\WinVNC3 "HTTPConnect"
  `Type: REG_DWORD`
  `Data: 01, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\WinVNC3 "HTTPPortNumber"
  `Type: REG_DWORD`
  `Data: A8, 16, 00, 00`
HKEY_CURRENT_USER\Software\ORL\WinVNC3 "IdleTimeout"
  `Type: REG_DWORD`
  `Data: 00, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\WinVNC3 "InputsEnabled"
  `Type: REG_DWORD`
  `Data: 01, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\WinVNC3 "LocalInputsDisabled"
  `Type: REG_DWORD`
  `Data: 00, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\WinVNC3 "LockSetting"
  `Type: REG_DWORD`
  `Data: 00, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\WinVNC3 "Password"
  `Type: REG_BINARY`
  `Data: EA, 1C, 14, 11, CB, 1B, 12, F5`
HKEY_CURRENT_USER\Software\ORL\WinVNC3 "PortNumber"
  `Type: REG_DWORD`
  `Data: 0C, 17, 00, 00`
HKEY_CURRENT_USER\Software\ORL\WinVNC3 "QueryAccept"
  `Type: REG_DWORD`
  `Data: 01, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\WinVNC3 "QuerySetting"
  `Type: REG_DWORD`
  `Data: 02, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\WinVNC3 "QueryTimeout"
  `Type: REG_DWORD`
  `Data: 0A, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\WinVNC3 "RemoveWallpaper"
  `Type: REG_DWORD`
  `Data: 01, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\WinVNC3 "SocketConnect"
  `Type: REG_DWORD`
  `Data: 01, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\WinVNC3 "UseDSMPlugin"
  `Type: REG_DWORD`
  `Data: 00, 00, 00, 00`
HKEY_CURRENT_USER\Software\ORL\WinVNC3 "XDMCPConnect"
  `Type: REG_DWORD`
  `Data: 00, 00, 00, 00`
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Shell_Update.exe "(Default)"
  `Type: REG_SZ`
  `Data: C:\WINDOWS\Shell_Update\Shell_Update.exe`
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Win32 Shell Update"
  `Type: REG_SZ`
  `Data: C:\WINDOWS\Shell_Update\boot.vbs`
HKEY_LOCAL_MACHINE\SOFTWARE\ORL\WinVNC3 "AllowLoopback"
  `Type: REG_DWORD`
  `Data: 01, 00, 00, 00`
HKEY_LOCAL_MACHINE\SOFTWARE\ORL\WinVNC3 "ConnectPriority"
  `Type: REG_DWORD`
  `Data: 01, 00, 00, 00`
HKEY_LOCAL_MACHINE\SOFTWARE\ORL\WinVNC3 "DebugLevel"
  `Type: REG_DWORD`
  `Data: 00, 00, 00, 00`
HKEY_LOCAL_MACHINE\SOFTWARE\ORL\WinVNC3 "DebugMode"
  `Type: REG_DWORD`
  `Data: 00, 00, 00, 00`
HKEY_LOCAL_MACHINE\SOFTWARE\ORL\WinVNC3 "DisableTrayIcon"
  `Type: REG_DWORD`
  `Data: 01, 00, 00, 00`
HKEY_LOCAL_MACHINE\SOFTWARE\ORL\WinVNC3 "DSMPlugin"
  `Type: REG_BINARY`
  `Data: (data too large: 256 bytes)`
HKEY_LOCAL_MACHINE\SOFTWARE\ORL\WinVNC3 "LoopbackOnly"
  `Type: REG_DWORD`
  `Data: 00, 00, 00, 00`
HKEY_LOCAL_MACHINE\SOFTWARE\ORL\WinVNC3 "MSLogonRequired"
  `Type: REG_DWORD`
  `Data: 00, 00, 00, 00`
HKEY_LOCAL_MACHINE\SOFTWARE\ORL\WinVNC3 "NewMSLogon"
  `Type: REG_DWORD`
  `Data: 00, 00, 00, 00`
HKEY_LOCAL_MACHINE\SOFTWARE\ORL\WinVNC3 "UseDSMPlugin"
  `Type: REG_DWORD`
  `Data: 00, 00, 00, 00`
HKEY_LOCAL_MACHINE\SOFTWARE\ORL\WinVNC3\Default "AllowEditClients"
  `Type: REG_DWORD`
  `Data: 00, 00, 00, 00`
HKEY_LOCAL_MACHINE\SOFTWARE\ORL\WinVNC3\Default "AllowProperties"
  `Type: REG_DWORD`
  `Data: 01, 00, 00, 00`
HKEY_LOCAL_MACHINE\SOFTWARE\ORL\WinVNC3\Default "AllowShutdown"
  `Type: REG_DWORD`
  `Data: 00, 00, 00, 00`

### Values changed: 3

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\RNG "Seed"
  `Old type: REG_BINARY`
  `New type: REG_BINARY`
  `Old data: A1, 22, DB, 00, 48, A4, 34, FB, A3, 33, F6, 96, 84, E7, 3A, F7, A5, 76, D2, CD, 7C, BC, CF, 37, 14, 08, 1F, 13, EA, 3C, FF, 8D, C4, DE, C6, F4, 83, B9, F8, A0, 0D, 89, 0E, FE, 04, D5, 98, D3, 49, 3F, 7A, E1, C0, 08, 4B, 07, 2A, 88, 2A, 80, 5B, A5, 60, 75, A2, B9, DB, 1D, E9, 8D, 6D, 39, 89, 78, A1, F6, 73, 39, 84, F5`
  `New data: 37, 05, 83, 73, 93, C0, AC, 08, BF, 9F, 98, F4, 24, A4, CC, D3, 6F, AB, AA, 74, C0, 74, B8, 17, 7A, 2E, 5B, 47, 0A, CF, 96, 8B, A5, E9, AD, E7, 7B, F8, 25, 6F, 88, B4, FB, 77, 4D, 4D, 4C, DD, 97, BD, 67, E4, E1, 6E, CA, 2B, 57, 11, 39, 8D, 2F, 6B, 79, F7, DC, E0, 82, 9C, C1, 89, DE, 62, 29, 9D, 10, FC, 9D, 4A, 09, 72`
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Prefetcher "TracesProcessed"
  `Old type: REG_DWORD`
  `New type: REG_DWORD`
  `Old data: 1A, 00, 00, 00`
  `New data: 21, 00, 00, 00`
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Prefetcher "TracesSuccessful"
  `Old type: REG_DWORD`
  `New type: REG_DWORD`
  `Old data: 16, 00, 00, 00`
  `New data: 19, 00, 00, 00`

To Contents

## Disk contents

### Drives tracked: 1

- c:\

### Folders added: 1

c:\WINDOWS\Shell_Update

### Files added: 4

c:\WINDOWS\Shell_Update\boot.vbs
  `Date: 1/28/2008 6:55 PM`
  `Size: 758 bytes`
c:\WINDOWS\Shell_Update\install.reg
  `Date: 1/28/2008 4:52 PM`
  `Size: 10,534 bytes`
c:\WINDOWS\Shell_Update\install.vbs
  `Date: 1/28/2008 6:55 PM`
  `Size: 1,287 bytes`
c:\WINDOWS\Shell_Update\Shell_Update.exe
  `Date: 12/28/2007 3:55 PM`
  `Size: 2,297,856 bytes`

### Files changed: 7

c:\Documents and Settings\Kobayashi\NTUSER.DAT.LOG
  `Old date: 9/10/2008 3:27 PM`
  `New date: 9/10/2008 3:31 PM`
  `Old size: 1,024 bytes`
  `New size: 1,024 bytes`
c:\WINDOWS\Prefetch\WMIPRVSE.EXE-28F301A9.pf
  `Old date: 9/10/2008 3:01 PM`
  `New date: 9/10/2008 3:31 PM`
  `Old size: 28,866 bytes`
  `New size: 28,746 bytes`
c:\WINDOWS\system32\config\software.LOG
  `Old date: 9/10/2008 3:27 PM`
  `New date: 9/10/2008 3:32 PM`
  `Old size: 1,024 bytes`
  `New size: 1,024 bytes`
c:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP
  `Old date: 9/10/2008 3:05 PM`
  `New date: 9/10/2008 3:33 PM`
  `Old size: 576 bytes`
  `New size: 576 bytes`
c:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER
  `Old date: 9/10/2008 3:05 PM`
  `New date: 9/10/2008 3:33 PM`
  `Old size: 4 bytes`
  `New size: 4 bytes`
c:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP
  `Old date: 9/10/2008 3:00 PM`
  `New date: 9/10/2008 3:33 PM`
  `Old size: 3,312 bytes`
  `New size: 3,312 bytes`
c:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP
  `Old date: 9/10/2008 3:05 PM`
  `New date: 9/10/2008 3:33 PM`
  `Old size: 2,736 bytes`
  `New size: 2,736 bytes`

To Contents

## INI file

### Ini files tracked: 4

- C:\boot.ini
- c:\windows\control.ini
- c:\windows\system.ini
- c:\windows\win.ini

To Contents

## Text file

### Text files tracked: 2

- c:\windows\system32\autoexec.nt
- c:\windows\system32\config.nt

To Contents

InCtrl5, Copyright © 2000 by Ziff Davis Media, Inc.
Written by Neil J. Rubenking
First published in PC Magazine, December 5, 2000.