# Installation Report: x

Generated by InCtrl5, version 1.0.0.0
Install program: C:\Documents and Settings\Kobayashi\Desktop\sharK_0[1].6\server.exe
11/1/2006 4:21 PM

### Contents

- Registry
- Disk Contents
- Ini Files
- Text Files

## Registry

### Keys ignored: 0

- (none)

### Keys added: 8

HKEY_CURRENT_USER\Software\Microsoft\Visual Basic
HKEY_CURRENT_USER\Software\Microsoft\Visual Basic\6.0
HKEY_CURRENT_USER\Software\VB and VBA Program Settings\win
HKEY_CURRENT_USER\Software\VB and VBA Program Settings\win\options
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\l
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\l
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\l
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\l

### Keys deleted: 4

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\1
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\1
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\1
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\1

### Values added: 9

HKEY_CURRENT_USER\Software\VB and VBA Program Settings\win\options "sin"
  `Type: REG_SZ`
  `Data:`
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion "shitbit"
  `Type: REG_SZ`
  `Data: SOFTWARE\Microsoft\Windows\CurrentVersion\Run`
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "(Default)"
  `Type: REG_SZ`
  `Data: C:\WINDOWS\scvhost.exe`
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "AntiVir"
  `Type: REG_SZ`
  `Data: C:\WINDOWS\scvhost.exe`
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "icq lite"
  `Type: REG_SZ`
  `Data: C:\WINDOWS\scvhost.exe`
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "msconfig"
  `Type: REG_SZ`
  `Data: C:\WINDOWS\scvhost.exe`
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "shdef"
  `Type: REG_SZ`
  `Data: C:\WINDOWS\shdef.exe`
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Update Checker"
  `Type: REG_SZ`
  `Data: C:\WINDOWS\scvhost.exe`
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Windows Update"
  `Type: REG_SZ`
  `Data: C:\WINDOWS\scvhost.exe`

### Values changed: 5

HKEY_CLASSES_ROOT\CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\InprocServer32 "(Default)"
  `Old type: REG_SZ`
  `New type: REG_SZ`
  `Old data: C:\Documents and Settings\Kobayashi\Desktop\sharK_0[1].6\mswinsck.ocx`
  `New data: C:\WINDOWS\mswinsck.ocx`
HKEY_CLASSES_ROOT\CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\ToolboxBitmap32 "(Default)"
  `Old type: REG_SZ`
  `New type: REG_SZ`
  `Old data: C:\Documents and Settings\Kobayashi\Desktop\sharK_0[1].6\mswinsck.ocx, 1`
  `New data: C:\WINDOWS\mswinsck.ocx, 1`
HKEY_CLASSES_ROOT\CLSID\{248DD897-BB45-11CF-9ABC-0080C7E7B78D}\InprocServer32 "(Default)"
  `Old type: REG_SZ`
  `New type: REG_SZ`
  `Old data: C:\Documents and Settings\Kobayashi\Desktop\sharK_0[1].6\mswinsck.ocx`
  `New data: C:\WINDOWS\mswinsck.ocx`
HKEY_CLASSES_ROOT\TypeLib\{248DD890-BB45-11CF-9ABC-0080C7E7B78D}\1.0\0\win32 "(Default)"
  `Old type: REG_SZ`
  `New type: REG_SZ`
  `Old data: C:\Documents and Settings\Kobayashi\Desktop\sharK_0[1].6\mswinsck.ocx`
  `New data: C:\WINDOWS\mswinsck.ocx`
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\RNG "Seed"
  `Old type: REG_BINARY`
  `New type: REG_BINARY`
  `Old data: 86, F5, 26, F9, E7, 1E, 8A, 72, 5E, C5, 9B, 62, BE, 85, B0, D9, 4A, 5B, 09, E3, AC, 29, B6, 7C, DB, 6E, 99, 95, 84, 83, 04, 1F, 2C, F3, B8, 3A, AB, F4, BC, C9, 60, 1D, F1, 86, 96, FB, 37, FF, FC, 70, 80, F3, 6A, 70, 2F, 08, 66, 31, E4, CD, F7, 9E, A4, 57, 43, DB, 10, 4D, 29, 2C, D8, EB, B6, B2, 65, 11, 85, 00, D1, 97`
  `New data: 18, 90, 22, D9, 71, 8A, 33, 81, 8E, 0B, 28, 68, 70, 51, F6, C6, 0C, 01, A5, BB, 5C, 6E, 2E, 3F, 51, 10, 8A, FC, 75, 56, 44, 92, 72, 28, 7C, 6E, 0A, 56, 9B, 39, 0F, 27, 95, 5C, 02, 72, 77, 8A, 99, 4B, C4, 53, 61, C0, E0, D0, 79, 5C, B1, A2, FB, A5, F1, BE, 3D, 7B, 4C, 93, 92, F3, D4, 08, 5E, F7, 41, 43, C4, 58, 7B, E2`

To Contents

## Disk contents

### Drives tracked: 1

- c:\

### Files added: 8

c:\Documents and Settings\Kobayashi\Local Settings\Temp\~DFC402.tmp
  `Date: 11/1/2006 4:19 PM`
  `Size: 16,384 bytes`
c:\WINDOWS\mswinsck.ocx
  `Date: 11/1/2006 4:19 PM`
  `Size: 108,336 bytes`
c:\WINDOWS\nkit.dll
  `Date: 11/1/2006 4:19 PM`
  `Size: 44,544 bytes`
c:\WINDOWS\scvhost.exe
  `Date: 11/1/2006 4:14 PM`
  `Size: 510,167 bytes`
c:\WINDOWS\shdef.exe
  `Date: 11/1/2006 4:19 PM`
  `Size: 27,648 bytes`
c:\WINDOWS\Prefetch\SCVHOST.EXE-1F6B4DC9.pf
  `Date: 11/1/2006 4:20 PM`
  `Size: 22,920 bytes`
c:\WINDOWS\Prefetch\SERVER.EXE-15F57E42.pf
  `Date: 11/1/2006 4:19 PM`
  `Size: 19,908 bytes`
c:\WINDOWS\Prefetch\SHDEF.EXE-002D2CA1.pf
  `Date: 11/1/2006 4:19 PM`
  `Size: 8,812 bytes`

### Files changed: 4

c:\Documents and Settings\Kobayashi\NTUSER.DAT.LOG
  `Old date: 11/1/2006 4:19 PM`
  `New date: 11/1/2006 4:20 PM`
  `Old size: 1,024 bytes`
  `New size: 1,024 bytes`
c:\WINDOWS\Prefetch\REGSVR32.EXE-25EEFE2F.pf
  `Old date: 11/1/2006 4:04 PM`
  `New date: 11/1/2006 4:19 PM`
  `Old size: 26,564 bytes`
  `New size: 26,822 bytes`
c:\WINDOWS\system32\config\software.LOG
  `Old date: 11/1/2006 4:19 PM`
  `New date: 11/1/2006 4:20 PM`
  `Old size: 1,024 bytes`
  `New size: 1,024 bytes`
c:\WINDOWS\system32\drivers\etc\hosts
  `Old date: 7/16/2003 8:23 AM`
  `New date: 11/1/2006 4:19 PM`
  `Old size: 734 bytes`
  `New size: 254 bytes`

To Contents

## INI file

### Ini files tracked: 4

- C:\boot.ini
- c:\windows\control.ini
- c:\windows\system.ini
- c:\windows\win.ini

To Contents

## Text file

### Text files tracked: 2

- c:\windows\system32\autoexec.nt
- c:\windows\system32\config.nt

To Contents

InCtrl5, Copyright © 2000 by Ziff Davis Media, Inc.
Written by Neil J. Rubenking
First published in PC Magazine, December 5, 2000.