# Installation Report: ?????? www.zg77hk.com

Generated by InCtrl5, version 1.0.0.0
Install program: C:\Documents and Settings\Kobayashi\Desktop\zg77hk\zg77hk_Server.exe\zg77hk_Server.exe
6/14/2005 4:16 PM

### Contents

- Registry
- Disk Contents
- Ini Files
- Text Files

## Registry

### Keys ignored: 0

- (none)

### Keys added: 2

HKEY_CURRENT_USER\Software\Microsoft\Visual Basic
HKEY_CURRENT_USER\Software\Microsoft\Visual Basic\6.0

### Values added: 2

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run " AutoUpdate"
  `Type: REG_SZ`
  `Data: C:\DOCUME~1\KOBAYA~1\LOCALS~1\Temp\taskngr.exe`
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run " AutoUpdate"
  `Type: REG_SZ`
  `Data: C:\WINDOWS\System32\sass.exe`

### Values changed: 4

HKEY_CURRENT_USER\SessionInformation "ProgramCount"
  `Old type: REG_DWORD`
  `New type: REG_DWORD`
  `Old data: 06, 00, 00, 00`
  `New data: 07, 00, 00, 00`
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\RNG "Seed"
  `Old type: REG_BINARY`
  `New type: REG_BINARY`
  `Old data: 07, 6E, 6D, B2, 70, 92, 1D, 1C, 18, 85, 02, 51, F7, DA, 12, E2, A5, 6D, 84, F0, AF, 48, C0, 99, FE, F5, 6D, C9, 12, 54, 72, 64, FC, BC, 6D, AC, 58, 12, 10, D7, 6E, EA, C6, 9A, 24, 1A, E7, AB, 44, D1, 82, 8F, B7, 16, 42, E4, F2, 5C, 7B, 98, 5E, 72, 62, 05, 2A, 7F, 5E, B8, 1D, C9, 24, 39, BF, C4, 04, 35, B4, DE, D9, 92`
  `New data: 63, E9, 28, F7, 15, 05, 4C, 07, 53, 43, C1, 11, 22, 83, E3, 07, 3B, 1A, 71, 2A, 6A, AE, BB, 86, F0, E1, D3, 4A, 26, FA, 78, 77, 9C, BD, 07, 49, 25, 5D, 91, CD, CD, 33, 0D, 4A, 8B, 8B, 08, D4, AD, AE, 94, 4C, 36, 65, E6, 91, A1, 82, 79, 95, C5, C1, B4, 2C, BF, 6F, EB, E2, F4, 66, 25, C5, BD, 39, 12, 91, 6B, 0D, 46, A8`
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Prefetcher "TracesProcessed"
  `Old type: REG_DWORD`
  `New type: REG_DWORD`
  `Old data: 0D, 00, 00, 00`
  `New data: 37, 00, 00, 00`
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Prefetcher "TracesSuccessful"
  `Old type: REG_DWORD`
  `New type: REG_DWORD`
  `Old data: 08, 00, 00, 00`
  `New data: 11, 00, 00, 00`

To Contents

## Disk contents

### Drives tracked: 1

- c:\

### Files added: 4

c:\Documents and Settings\Kobayashi\Local Settings\Temp\-Kobayashi-06M14D16h15m-Error.txt
  `Date: 6/14/2005 4:15 PM`
  `Size: 546 bytes`
c:\Documents and Settings\Kobayashi\Local Settings\Temp\Ser.txt
  `Date: 6/14/2005 4:15 PM`
  `Size: 0 bytes`
c:\Documents and Settings\Kobayashi\Local Settings\Temp\taskngr.exe
  `Date: 2/27/2005 10:11 AM`
  `Size: 606,208 bytes`
c:\WINDOWS\system32\sass.exe
  `Date: 2/27/2005 10:11 AM`
  `Size: 606,208 bytes`

### Files deleted: 1

c:\Documents and Settings\Kobayashi\Desktop\zg77hk\zg77hk_Server.exe\zg77hk_Server.exe
  `Date: 2/27/2005 10:11 AM`
  `Size: 606,208 bytes`

### Files changed: 3

c:\Documents and Settings\Kobayashi\NTUSER.DAT.LOG
  `Old date: 6/14/2005 4:15 PM`
  `New date: 6/14/2005 4:15 PM`
  `Old size: 1,024 bytes`
  `New size: 1,024 bytes`
c:\WINDOWS\Prefetch\CMD.EXE-087B4001.pf
  `Old date: 6/14/2005 4:14 PM`
  `New date: 6/14/2005 4:15 PM`
  `Old size: 7,186 bytes`
  `New size: 7,978 bytes`
c:\WINDOWS\system32\config\software.LOG
  `Old date: 6/14/2005 4:14 PM`
  `New date: 6/14/2005 4:15 PM`
  `Old size: 1,024 bytes`
  `New size: 1,024 bytes`

To Contents

## INI file

### Ini files tracked: 4

- C:\boot.ini
- c:\windows\control.ini
- c:\windows\system.ini
- c:\windows\win.ini

To Contents

## Text file

### Text files tracked: 2

- c:\windows\system32\autoexec.nt
- c:\windows\system32\config.nt

To Contents

InCtrl5, Copyright © 2000 by Ziff Davis Media, Inc.
Written by Neil J. Rubenking
First published in PC Magazine, December 5, 2000.