# Installation Report: messengerwinks

Generated by InCtrl5, version 1.0.0.0
Install program: C:\Documents and Settings\Kobayashi\Desktop\Hotmail.Hacker.Log.Edition.5\Hotmail.Hacker.Log.Edition.5\Server.exe
11/11/2007 3:13 PM

### Contents

- Registry
- Disk Contents
- Ini Files
- Text Files

## Registry

### Keys ignored: 0

- (none)

### Keys added: 4

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\

### Values added: 1

HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache "C:\Documents and Settings\Kobayashi\Desktop\Hotmail.Hacker.Log.Edition.5\Hotmail.Hacker.Log.Edition.5\Server.exe"
  `Type: REG_SZ`
  `Data: Server`

### Values changed: 2

HKEY_CURRENT_USER\SessionInformation "ProgramCount"
  `Old type: REG_DWORD`
  `New type: REG_DWORD`
  `Old data: 04, 00, 00, 00`
  `New data: 05, 00, 00, 00`
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\RNG "Seed"
  `Old type: REG_BINARY`
  `New type: REG_BINARY`
  `Old data: 0F, 19, 1F, 0A, EA, 74, AF, D3, 61, 22, F5, C8, E3, 85, 62, 5B, AE, 56, D2, 5F, BB, 3A, 1E, 67, FD, 68, A1, C1, D4, 2A, 4B, 44, C8, 7A, 52, B6, BE, 04, DE, 18, D4, 34, 7B, 1F, E6, 55, 3D, 4F, B8, 8E, E6, 15, A8, 87, 29, E3, B1, 5D, 1B, 46, 5F, AC, 3B, 04, 31, F3, 91, 00, 63, 9E, 31, AE, D2, CF, 59, 47, 4F, 26, D0, 87`
  `New data: 58, 92, DE, 25, 9E, 85, D0, 0B, 2F, 91, 02, 23, 7D, AC, 24, BD, 09, 16, EB, 20, 4D, 3A, 60, C0, 9F, CB, 09, E0, 7F, 1D, F9, 93, D1, E1, B1, 52, 71, 8C, 13, CE, 31, 8F, 90, 1B, 31, C0, 76, 31, 79, 1D, 5E, 7D, 13, 8A, A2, EC, 5F, 5C, 69, CC, 2B, C1, 24, EB, 32, 06, 6B, 32, B9, 8F, 36, 0A, A1, 07, 35, 07, 00, CA, C2, 95`

To Contents

## Disk contents

### Drives tracked: 1

- c:\

### Files added: 2

c:\Documents and Settings\Kobayashi\Local Settings\Temp\~DF398A.tmp
  `Date: 11/11/2007 3:12 PM`
  `Size: 16,384 bytes`
c:\WINDOWS\Prefetch\SERVER.EXE-00F52477.pf
  `Date: 11/11/2007 3:12 PM`
  `Size: 13,906 bytes`

### Files changed: 2

c:\Documents and Settings\Kobayashi\NTUSER.DAT.LOG
  `Old date: 11/11/2007 3:11 PM`
  `New date: 11/11/2007 3:12 PM`
  `Old size: 1,024 bytes`
  `New size: 1,024 bytes`
c:\WINDOWS\system32\config\software.LOG
  `Old date: 11/11/2007 3:11 PM`
  `New date: 11/11/2007 3:12 PM`
  `Old size: 1,024 bytes`
  `New size: 1,024 bytes`

To Contents

## INI file

### Ini files tracked: 4

- C:\boot.ini
- c:\windows\control.ini
- c:\windows\system.ini
- c:\windows\win.ini

To Contents

## Text file

### Text files tracked: 2

- c:\windows\system32\autoexec.nt
- c:\windows\system32\config.nt

To Contents

InCtrl5, Copyright © 2000 by Ziff Davis Media, Inc.
Written by Neil J. Rubenking
First published in PC Magazine, December 5, 2000.