Home » Resources » Software » Reviews » The Evidence Eliminator Documents
Installation Report: Evidence Eliminator v4.5
Installation Report: Evidence Eliminator v4.5
Generated by InCtrl5, version 1.0.0.0
Install program: insteelm.exe
------------------------------------------------------------
Registry
********
Keys ignored: 0
---------------
* (none)
Keys added: 172
---------------
HKEY_CURRENT_USER\Software\Evidence Eliminator
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\StreamMRU
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Streams
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Streams\0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Streams\Desktop
HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\Evidence Eliminator
HKEY_CLASSES_ROOT\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\shell\Evidence Eliminator Safe Restart
HKEY_CLASSES_ROOT\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\shell\Evidence Eliminator Safe Restart\Command
HKEY_CLASSES_ROOT\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\shell\Evidence Eliminator Safe Shutdown
HKEY_CLASSES_ROOT\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\shell\Evidence Eliminator Safe Shutdown\Command
HKEY_CLASSES_ROOT\CLSID\{307C5040-76B3-11CE-BF00-0080AD0EF894}
HKEY_CLASSES_ROOT\CLSID\{307C5040-76B3-11CE-BF00-0080AD0EF894}\Control
HKEY_CLASSES_ROOT\CLSID\{307C5040-76B3-11CE-BF00-0080AD0EF894}\InprocServer32
HKEY_CLASSES_ROOT\CLSID\{307C5040-76B3-11CE-BF00-0080AD0EF894}\MiscStatus
HKEY_CLASSES_ROOT\CLSID\{307C5040-76B3-11CE-BF00-0080AD0EF894}\MiscStatus\1
HKEY_CLASSES_ROOT\CLSID\{307C5040-76B3-11CE-BF00-0080AD0EF894}\ProgID
HKEY_CLASSES_ROOT\CLSID\{307C5040-76B3-11CE-BF00-0080AD0EF894}\ToolboxBitmap32
HKEY_CLASSES_ROOT\CLSID\{307C5040-76B3-11CE-BF00-0080AD0EF894}\TypeLib
HKEY_CLASSES_ROOT\CLSID\{307C5040-76B3-11CE-BF00-0080AD0EF894}\Version
HKEY_CLASSES_ROOT\CLSID\{307C5044-76B3-11CE-BF00-0080AD0EF894}
HKEY_CLASSES_ROOT\CLSID\{307C5044-76B3-11CE-BF00-0080AD0EF894}\InprocServer32
HKEY_CLASSES_ROOT\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402}
HKEY_CLASSES_ROOT\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402}\Control
HKEY_CLASSES_ROOT\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402}\Implemented Categories
HKEY_CLASSES_ROOT\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402}\Implemented Categories\{0DE86A52-2BAA-11CF-A229-00AA003D7352}
HKEY_CLASSES_ROOT\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402}\Implemented Categories\{0DE86A53-2BAA-11CF-A229-00AA003D7352}
HKEY_CLASSES_ROOT\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402}\Implemented Categories\{0DE86A57-2BAA-11CF-A229-00AA003D7352}
HKEY_CLASSES_ROOT\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402}\Implemented Categories\{40FC6ED4-2438-11CF-A3DB-080036F12502}
HKEY_CLASSES_ROOT\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402}\Implemented Categories\{40FC6ED5-2438-11CF-A3DB-080036F12502}
HKEY_CLASSES_ROOT\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402}\Implemented Categories\{7DD95802-9882-11CF-9FA9-00AA006C42C4}
HKEY_CLASSES_ROOT\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402}\InprocServer32
HKEY_CLASSES_ROOT\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402}\MiscStatus
HKEY_CLASSES_ROOT\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402}\MiscStatus\1
HKEY_CLASSES_ROOT\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402}\ProgID
HKEY_CLASSES_ROOT\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402}\Programmable
HKEY_CLASSES_ROOT\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402}\ToolboxBitmap32
HKEY_CLASSES_ROOT\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402}\TypeLib
HKEY_CLASSES_ROOT\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402}\Version
HKEY_CLASSES_ROOT\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402}\VersionIndependentProgID
HKEY_CLASSES_ROOT\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\Shell
HKEY_CLASSES_ROOT\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\Shell\Evidence Eliminator Safe Recycle
HKEY_CLASSES_ROOT\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\Shell\Evidence Eliminator Safe Recycle\Command
HKEY_CLASSES_ROOT\CLSID\{78E5A540-1850-11CF-9D53-00AA003C9CB6}
HKEY_CLASSES_ROOT\CLSID\{78E5A540-1850-11CF-9D53-00AA003C9CB6}\InprocServer32
HKEY_CLASSES_ROOT\CLSID\{7DA06D40-54A0-11CF-A521-0080C77A7786}
HKEY_CLASSES_ROOT\CLSID\{7DA06D40-54A0-11CF-A521-0080C77A7786}\InprocServer32
HKEY_CLASSES_ROOT\CLSID\{AFC634B0-4B8B-11CF-8989-00AA00688B10}
HKEY_CLASSES_ROOT\CLSID\{AFC634B0-4B8B-11CF-8989-00AA00688B10}\InprocServer32
HKEY_CLASSES_ROOT\CLSID\{BDC217C5-ED16-11CD-956C-0000C04E4C0A}
HKEY_CLASSES_ROOT\CLSID\{BDC217C5-ED16-11CD-956C-0000C04E4C0A}\Control
HKEY_CLASSES_ROOT\CLSID\{BDC217C5-ED16-11CD-956C-0000C04E4C0A}\Implemented Categories
HKEY_CLASSES_ROOT\CLSID\{BDC217C5-ED16-11CD-956C-0000C04E4C0A}\Implemented Categories\{0DE86A52-2BAA-11CF-A229-00AA003D7352}
HKEY_CLASSES_ROOT\CLSID\{BDC217C5-ED16-11CD-956C-0000C04E4C0A}\Implemented Categories\{0DE86A53-2BAA-11CF-A229-00AA003D7352}
HKEY_CLASSES_ROOT\CLSID\{BDC217C5-ED16-11CD-956C-0000C04E4C0A}\Implemented Categories\{0DE86A57-2BAA-11CF-A229-00AA003D7352}
HKEY_CLASSES_ROOT\CLSID\{BDC217C5-ED16-11CD-956C-0000C04E4C0A}\Implemented Categories\{40FC6ED4-2438-11CF-A3DB-080036F12502}
HKEY_CLASSES_ROOT\CLSID\{BDC217C5-ED16-11CD-956C-0000C04E4C0A}\Implemented Categories\{40FC6ED5-2438-11CF-A3DB-080036F12502}
HKEY_CLASSES_ROOT\CLSID\{BDC217C5-ED16-11CD-956C-0000C04E4C0A}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4}
HKEY_CLASSES_ROOT\CLSID\{BDC217C5-ED16-11CD-956C-0000C04E4C0A}\Implemented Categories\{7DD95802-9882-11CF-9FA9-00AA006C42C4}
HKEY_CLASSES_ROOT\CLSID\{BDC217C5-ED16-11CD-956C-0000C04E4C0A}\InprocServer32
HKEY_CLASSES_ROOT\CLSID\{BDC217C5-ED16-11CD-956C-0000C04E4C0A}\MiscStatus
HKEY_CLASSES_ROOT\CLSID\{BDC217C5-ED16-11CD-956C-0000C04E4C0A}\MiscStatus\1
HKEY_CLASSES_ROOT\CLSID\{BDC217C5-ED16-11CD-956C-0000C04E4C0A}\ProgID
HKEY_CLASSES_ROOT\CLSID\{BDC217C5-ED16-11CD-956C-0000C04E4C0A}\Programmable
HKEY_CLASSES_ROOT\CLSID\{BDC217C5-ED16-11CD-956C-0000C04E4C0A}\Required Categories
HKEY_CLASSES_ROOT\CLSID\{BDC217C5-ED16-11CD-956C-0000C04E4C0A}\Required Categories\{D40C2700-FFA1-11CF-8234-00AA00C1AB85}
HKEY_CLASSES_ROOT\CLSID\{BDC217C5-ED16-11CD-956C-0000C04E4C0A}\ToolboxBitmap32
HKEY_CLASSES_ROOT\CLSID\{BDC217C5-ED16-11CD-956C-0000C04E4C0A}\TypeLib
HKEY_CLASSES_ROOT\CLSID\{BDC217C5-ED16-11CD-956C-0000C04E4C0A}\Version
HKEY_CLASSES_ROOT\CLSID\{BDC217C5-ED16-11CD-956C-0000C04E4C0A}\VersionIndependentProgID
HKEY_CLASSES_ROOT\CLSID\{F6D331E6-3AAD-11D2-9889-204C4F4F5020}
HKEY_CLASSES_ROOT\CLSID\{F6D331E6-3AAD-11D2-9889-204C4F4F5020}\Implemented Categories
HKEY_CLASSES_ROOT\CLSID\{F6D331E6-3AAD-11D2-9889-204C4F4F5020}\Implemented Categories\{7DD95802-9882-11CF-9FA9-00AA006C42C4}
HKEY_CLASSES_ROOT\CLSID\{F6D331E6-3AAD-11D2-9889-204C4F4F5020}\InprocServer32
HKEY_CLASSES_ROOT\CLSID\{F6D331E6-3AAD-11D2-9889-204C4F4F5020}\ProgID
HKEY_CLASSES_ROOT\CLSID\{F6D331E6-3AAD-11D2-9889-204C4F4F5020}\Programmable
HKEY_CLASSES_ROOT\CLSID\{F6D331E6-3AAD-11D2-9889-204C4F4F5020}\VersionIndependentProgID
HKEY_CLASSES_ROOT\Folder\shellex\ContextMenuHandlers\Evidence Eliminator
HKEY_CLASSES_ROOT\Interface\{2334D2B1-713E-11CF-8AE5-00AA00C00905}
HKEY_CLASSES_ROOT\Interface\{2334D2B1-713E-11CF-8AE5-00AA00C00905}\ProxyStubClsid
HKEY_CLASSES_ROOT\Interface\{2334D2B1-713E-11CF-8AE5-00AA00C00905}\ProxyStubClsid32
HKEY_CLASSES_ROOT\Interface\{2334D2B1-713E-11CF-8AE5-00AA00C00905}\TypeLib
HKEY_CLASSES_ROOT\Interface\{2334D2B3-713E-11CF-8AE5-00AA00C00905}
HKEY_CLASSES_ROOT\Interface\{2334D2B3-713E-11CF-8AE5-00AA00C00905}\ProxyStubClsid
HKEY_CLASSES_ROOT\Interface\{2334D2B3-713E-11CF-8AE5-00AA00C00905}\ProxyStubClsid32
HKEY_CLASSES_ROOT\Interface\{2334D2B3-713E-11CF-8AE5-00AA00C00905}\TypeLib
HKEY_CLASSES_ROOT\Interface\{2A4FCCB0-DFF1-11CF-8E74-00A0C90F26F8}
HKEY_CLASSES_ROOT\Interface\{2A4FCCB0-DFF1-11CF-8E74-00A0C90F26F8}\ProxyStubClsid
HKEY_CLASSES_ROOT\Interface\{2A4FCCB0-DFF1-11CF-8E74-00A0C90F26F8}\ProxyStubClsid32
HKEY_CLASSES_ROOT\Interface\{2A4FCCB0-DFF1-11CF-8E74-00A0C90F26F8}\TypeLib
HKEY_CLASSES_ROOT\Interface\{307C5041-76B3-11CE-BF00-0080AD0EF894}
HKEY_CLASSES_ROOT\Interface\{307C5041-76B3-11CE-BF00-0080AD0EF894}\ProxyStubClsid
HKEY_CLASSES_ROOT\Interface\{307C5041-76B3-11CE-BF00-0080AD0EF894}\ProxyStubClsid32
HKEY_CLASSES_ROOT\Interface\{307C5041-76B3-11CE-BF00-0080AD0EF894}\TypeLib
HKEY_CLASSES_ROOT\Interface\{307C5042-76B3-11CE-BF00-0080AD0EF894}
HKEY_CLASSES_ROOT\Interface\{307C5042-76B3-11CE-BF00-0080AD0EF894}\ProxyStubClsid
HKEY_CLASSES_ROOT\Interface\{307C5042-76B3-11CE-BF00-0080AD0EF894}\ProxyStubClsid32
HKEY_CLASSES_ROOT\Interface\{307C5042-76B3-11CE-BF00-0080AD0EF894}\TypeLib
HKEY_CLASSES_ROOT\Interface\{3B7C8862-D78F-101B-B9B5-04021C009402}
HKEY_CLASSES_ROOT\Interface\{3B7C8862-D78F-101B-B9B5-04021C009402}\ProxyStubClsid
HKEY_CLASSES_ROOT\Interface\{3B7C8862-D78F-101B-B9B5-04021C009402}\ProxyStubClsid32
HKEY_CLASSES_ROOT\Interface\{3B7C8862-D78F-101B-B9B5-04021C009402}\TypeLib
HKEY_CLASSES_ROOT\Interface\{859321D0-3FD1-11CF-8981-00AA00688B10}
HKEY_CLASSES_ROOT\Interface\{859321D0-3FD1-11CF-8981-00AA00688B10}\ProxyStubClsid
HKEY_CLASSES_ROOT\Interface\{859321D0-3FD1-11CF-8981-00AA00688B10}\ProxyStubClsid32
HKEY_CLASSES_ROOT\Interface\{859321D0-3FD1-11CF-8981-00AA00688B10}\TypeLib
HKEY_CLASSES_ROOT\Interface\{AC1ECC62-3AA9-11D2-9889-204C4F4F5020}
HKEY_CLASSES_ROOT\Interface\{AC1ECC62-3AA9-11D2-9889-204C4F4F5020}\ProxyStubClsid
HKEY_CLASSES_ROOT\Interface\{AC1ECC62-3AA9-11D2-9889-204C4F4F5020}\ProxyStubClsid32
HKEY_CLASSES_ROOT\Interface\{AC1ECC62-3AA9-11D2-9889-204C4F4F5020}\TypeLib
HKEY_CLASSES_ROOT\Interface\{BDC217C7-ED16-11CD-956C-0000C04E4C0A}
HKEY_CLASSES_ROOT\Interface\{BDC217C7-ED16-11CD-956C-0000C04E4C0A}\ProxyStubClsid
HKEY_CLASSES_ROOT\Interface\{BDC217C7-ED16-11CD-956C-0000C04E4C0A}\ProxyStubClsid32
HKEY_CLASSES_ROOT\Interface\{BDC217C7-ED16-11CD-956C-0000C04E4C0A}\TypeLib
HKEY_CLASSES_ROOT\Interface\{E9A5593C-CAB0-11D1-8C0B-0000F8754DA1}
HKEY_CLASSES_ROOT\Interface\{E9A5593C-CAB0-11D1-8C0B-0000F8754DA1}\ProxyStubClsid
HKEY_CLASSES_ROOT\Interface\{E9A5593C-CAB0-11D1-8C0B-0000F8754DA1}\ProxyStubClsid32
HKEY_CLASSES_ROOT\Interface\{E9A5593C-CAB0-11D1-8C0B-0000F8754DA1}\TypeLib
HKEY_CLASSES_ROOT\Interface\{ED117630-4090-11CF-8981-00AA00688B10}
HKEY_CLASSES_ROOT\Interface\{ED117630-4090-11CF-8981-00AA00688B10}\ProxyStubClsid
HKEY_CLASSES_ROOT\Interface\{ED117630-4090-11CF-8981-00AA00688B10}\ProxyStubClsid32
HKEY_CLASSES_ROOT\Interface\{ED117630-4090-11CF-8981-00AA00688B10}\TypeLib
HKEY_CLASSES_ROOT\Interface\{F6D331E5-3AAD-11D2-9889-204C4F4F5020}
HKEY_CLASSES_ROOT\Interface\{F6D331E5-3AAD-11D2-9889-204C4F4F5020}\ProxyStubClsid
HKEY_CLASSES_ROOT\Interface\{F6D331E5-3AAD-11D2-9889-204C4F4F5020}\ProxyStubClsid32
HKEY_CLASSES_ROOT\Interface\{F6D331E5-3AAD-11D2-9889-204C4F4F5020}\TypeLib
HKEY_CLASSES_ROOT\Interface\{F6D331E7-3AAD-11D2-9889-204C4F4F5020}
HKEY_CLASSES_ROOT\Interface\{F6D331E7-3AAD-11D2-9889-204C4F4F5020}\ProxyStubClsid
HKEY_CLASSES_ROOT\Interface\{F6D331E7-3AAD-11D2-9889-204C4F4F5020}\ProxyStubClsid32
HKEY_CLASSES_ROOT\Interface\{F6D331E7-3AAD-11D2-9889-204C4F4F5020}\TypeLib
HKEY_CLASSES_ROOT\RICHTEXT.RichtextCtrl
HKEY_CLASSES_ROOT\RICHTEXT.RichtextCtrl\CLSID
HKEY_CLASSES_ROOT\RICHTEXT.RichtextCtrl\CurVer
HKEY_CLASSES_ROOT\RICHTEXT.RichtextCtrl.1
HKEY_CLASSES_ROOT\RICHTEXT.RichtextCtrl.1\CLSID
HKEY_CLASSES_ROOT\SGFileSys.Enumerator
HKEY_CLASSES_ROOT\SGFileSys.Enumerator\CLSID
HKEY_CLASSES_ROOT\SGFileSys.Enumerator\CurVer
HKEY_CLASSES_ROOT\SGFileSys.Enumerator.1
HKEY_CLASSES_ROOT\SGFileSys.Enumerator.1\CLSID
HKEY_CLASSES_ROOT\TabDlg.SSTab
HKEY_CLASSES_ROOT\TabDlg.SSTab\CLSID
HKEY_CLASSES_ROOT\TabDlg.SSTab\CurVer
HKEY_CLASSES_ROOT\TabDlg.SSTab.1
HKEY_CLASSES_ROOT\TabDlg.SSTab.1\CLSID
HKEY_CLASSES_ROOT\TypeLib\{307C5043-76B3-11CE-BF00-0080AD0EF894}
HKEY_CLASSES_ROOT\TypeLib\{307C5043-76B3-11CE-BF00-0080AD0EF894}\1.0
HKEY_CLASSES_ROOT\TypeLib\{307C5043-76B3-11CE-BF00-0080AD0EF894}\1.0\0
HKEY_CLASSES_ROOT\TypeLib\{307C5043-76B3-11CE-BF00-0080AD0EF894}\1.0\0\win32
HKEY_CLASSES_ROOT\TypeLib\{307C5043-76B3-11CE-BF00-0080AD0EF894}\1.0\FLAGS
HKEY_CLASSES_ROOT\TypeLib\{307C5043-76B3-11CE-BF00-0080AD0EF894}\1.0\HELPDIR
HKEY_CLASSES_ROOT\TypeLib\{3B7C8863-D78F-101B-B9B5-04021C009402}
HKEY_CLASSES_ROOT\TypeLib\{3B7C8863-D78F-101B-B9B5-04021C009402}\1.2
HKEY_CLASSES_ROOT\TypeLib\{3B7C8863-D78F-101B-B9B5-04021C009402}\1.2\0
HKEY_CLASSES_ROOT\TypeLib\{3B7C8863-D78F-101B-B9B5-04021C009402}\1.2\0\win32
HKEY_CLASSES_ROOT\TypeLib\{3B7C8863-D78F-101B-B9B5-04021C009402}\1.2\FLAGS
HKEY_CLASSES_ROOT\TypeLib\{3B7C8863-D78F-101B-B9B5-04021C009402}\1.2\HELPDIR
HKEY_CLASSES_ROOT\TypeLib\{AC1ECC53-3AA9-11D2-9889-204C4F4F5020}
HKEY_CLASSES_ROOT\TypeLib\{AC1ECC53-3AA9-11D2-9889-204C4F4F5020}\1.0
HKEY_CLASSES_ROOT\TypeLib\{AC1ECC53-3AA9-11D2-9889-204C4F4F5020}\1.0\0
HKEY_CLASSES_ROOT\TypeLib\{AC1ECC53-3AA9-11D2-9889-204C4F4F5020}\1.0\0\win32
HKEY_CLASSES_ROOT\TypeLib\{AC1ECC53-3AA9-11D2-9889-204C4F4F5020}\1.0\FLAGS
HKEY_CLASSES_ROOT\TypeLib\{AC1ECC53-3AA9-11D2-9889-204C4F4F5020}\1.0\HELPDIR
HKEY_CLASSES_ROOT\TypeLib\{BDC217C8-ED16-11CD-956C-0000C04E4C0A}
HKEY_CLASSES_ROOT\TypeLib\{BDC217C8-ED16-11CD-956C-0000C04E4C0A}\1.1
HKEY_CLASSES_ROOT\TypeLib\{BDC217C8-ED16-11CD-956C-0000C04E4C0A}\1.1\0
HKEY_CLASSES_ROOT\TypeLib\{BDC217C8-ED16-11CD-956C-0000C04E4C0A}\1.1\0\win32
HKEY_CLASSES_ROOT\TypeLib\{BDC217C8-ED16-11CD-956C-0000C04E4C0A}\1.1\FLAGS
HKEY_CLASSES_ROOT\TypeLib\{BDC217C8-ED16-11CD-956C-0000C04E4C0A}\1.1\HELPDIR
HKEY_CLASSES_ROOT\VBHT.Msghook
HKEY_CLASSES_ROOT\VBHT.Msghook\CLSID
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Evidence Eliminator
Keys deleted: 1
---------------
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\ActiveX Compatibility\{3B7C8860-D78F-101B-B9B5-04021C009402}
Values added: 163
-----------------
HKEY_CURRENT_USER\Software\Evidence Eliminator 'App.Path'
Type: REG_SZ
Data: C:\PROGRA~1\EVIDEN~1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu\&Programs\InCtrl5 'Order'
Type: REG_BINARY
Data: 08, 00, 00, 00, 02, 00, 00, 00, 7A, 00, 00, 00, 01, 00, 00, 00, 02, 00, 00, 00, 3A, 00, 00, 00, 00, 00, 00, 00, 2C, 00, 32, 00, 6D, 01, 00, 00, 6B, 2A, DD, 12, 20, 00, 49, 6E, 43, 74, 72, 6C, 35, 20, 48, 65, 6C, 70, 2E, 6C, 6E, 6B, 00, 49, 4E, 43, 54, 52, 4C, 7E, 31, 2E, 4C, 4E, 4B, 00, 00, 00, 00, 00, 00, 00, 34, 00, 00, 00, 01, 00, 00, 00, 26, 00, 32, 00, 71, 01, 00, 00, 6B, 2A, E0, 12, 20, 00, 49, 6E, 43, 74, 72, 6C, 35, 2E, 6C, 6E, 6B, 00, 49, 4E, 43, 54, 52, 4C, 35, 2E, 4C, 4E, 4B, 00, 00, 00, 00, 00, 00, 00
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\StreamMRU '0'
Type: REG_BINARY
Data: 14, 00, 1F, 00, 80, 53, 1C, 87, A0, 42, 69, 10, A2, EA, 08, 00, 2B, 30, 30, 9D, 00, 00
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\StreamMRU 'MRUListEx'
Type: REG_BINARY
Data: 00, 00, 00, 00, FF, FF, FF, FF
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Streams\0 'CabView'
Type: REG_BINARY
Data: 5C, 00, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, 4F, 00, 00, 00, 03, 00, 00, 00, 01, 03, 00, 00, 39, 02, 00, 00, 01, 00, 00, 00, 00, 00, 00, 00, A8, D9, 58, 00, 00, 00, 00, 00, D6, 2A, 42, 00, 06, 00, 00, 00, F8, 7A, 35, 7F, CA, 9F, 34, 7F, A8, D9, 58, 00, 1E, 9F, 34, 7F, 01, 00, 00, 00, 00, 00, 00, 00
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Streams\Desktop 'Taskbar'
Type: REG_BINARY
Data: (data too large: 794 bytes)
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Streams\Desktop 'Toolbars'
Type: REG_BINARY
Data: 11, 00, 00, 00, 00, 00, 00, 00
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Streams\Desktop 'ViewView2'
Type: REG_BINARY
Data: (data too large: 461 bytes)
HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\Evidence Eliminator '(Default)'
Type: REG_SZ
Data: Default
HKEY_CLASSES_ROOT\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\shell\Evidence Eliminator Safe Restart '(Default)'
Type: REG_SZ
Data:
HKEY_CLASSES_ROOT\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\shell\Evidence Eliminator Safe Restart\Command '(Default)'
Type: REG_SZ
Data: C:\WINDOWS\SYSTEM\eetransx.exe /restart
HKEY_CLASSES_ROOT\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\shell\Evidence Eliminator Safe Shutdown '(Default)'
Type: REG_SZ
Data:
HKEY_CLASSES_ROOT\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\shell\Evidence Eliminator Safe Shutdown\Command '(Default)'
Type: REG_SZ
Data: C:\WINDOWS\SYSTEM\eetransx /shutdown
HKEY_CLASSES_ROOT\CLSID\{307C5040-76B3-11CE-BF00-0080AD0EF894} '(Default)'
Type: REG_SZ
Data: Msghook Control
HKEY_CLASSES_ROOT\CLSID\{307C5040-76B3-11CE-BF00-0080AD0EF894}\Control '(Default)'
Type: REG_SZ
Data:
HKEY_CLASSES_ROOT\CLSID\{307C5040-76B3-11CE-BF00-0080AD0EF894}\InprocServer32 '(Default)'
Type: REG_SZ
Data: C:\WINDOWS\SYSTEM\MSGHOO32.OCX
HKEY_CLASSES_ROOT\CLSID\{307C5040-76B3-11CE-BF00-0080AD0EF894}\MiscStatus '(Default)'
Type: REG_SZ
Data: 0
HKEY_CLASSES_ROOT\CLSID\{307C5040-76B3-11CE-BF00-0080AD0EF894}\MiscStatus\1 '(Default)'
Type: REG_SZ
Data: 132497
HKEY_CLASSES_ROOT\CLSID\{307C5040-76B3-11CE-BF00-0080AD0EF894}\ProgID '(Default)'
Type: REG_SZ
Data: VBHT.Msghook
HKEY_CLASSES_ROOT\CLSID\{307C5040-76B3-11CE-BF00-0080AD0EF894}\ToolboxBitmap32 '(Default)'
Type: REG_SZ
Data: C:\WINDOWS\SYSTEM\MSGHOO32.OCX, 1
HKEY_CLASSES_ROOT\CLSID\{307C5040-76B3-11CE-BF00-0080AD0EF894}\TypeLib '(Default)'
Type: REG_SZ
Data: {307C5043-76B3-11CE-BF00-0080AD0EF894}
HKEY_CLASSES_ROOT\CLSID\{307C5040-76B3-11CE-BF00-0080AD0EF894}\Version '(Default)'
Type: REG_SZ
Data: 1.0
HKEY_CLASSES_ROOT\CLSID\{307C5044-76B3-11CE-BF00-0080AD0EF894} '(Default)'
Type: REG_SZ
Data: Msghook Property Page
HKEY_CLASSES_ROOT\CLSID\{307C5044-76B3-11CE-BF00-0080AD0EF894}\InprocServer32 '(Default)'
Type: REG_SZ
Data: C:\WINDOWS\SYSTEM\MSGHOO32.OCX
HKEY_CLASSES_ROOT\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402} '(Default)'
Type: REG_SZ
Data: Microsoft Rich Textbox Control, version 6.0
HKEY_CLASSES_ROOT\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402}\InprocServer32 '(Default)'
Type: REG_SZ
Data: C:\WINDOWS\SYSTEM\RICHTX32.OCX
HKEY_CLASSES_ROOT\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402}\InprocServer32 'ThreadingModel'
Type: REG_SZ
Data: Apartment
HKEY_CLASSES_ROOT\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402}\MiscStatus '(Default)'
Type: REG_SZ
Data: 0
HKEY_CLASSES_ROOT\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402}\MiscStatus\1 '(Default)'
Type: REG_SZ
Data: 131473
HKEY_CLASSES_ROOT\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402}\ProgID '(Default)'
Type: REG_SZ
Data: RICHTEXT.RichtextCtrl.1
HKEY_CLASSES_ROOT\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402}\ToolboxBitmap32 '(Default)'
Type: REG_SZ
Data: C:\WINDOWS\SYSTEM\RICHTX32.OCX, 1
HKEY_CLASSES_ROOT\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402}\TypeLib '(Default)'
Type: REG_SZ
Data: {3B7C8863-D78F-101B-B9B5-04021C009402}
HKEY_CLASSES_ROOT\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402}\Version '(Default)'
Type: REG_SZ
Data: 1.2
HKEY_CLASSES_ROOT\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402}\VersionIndependentProgID '(Default)'
Type: REG_SZ
Data: RICHTEXT.RichtextCtrl
HKEY_CLASSES_ROOT\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\Shell\Evidence Eliminator Safe Recycle '(Default)'
Type: REG_SZ
Data:
HKEY_CLASSES_ROOT\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\Shell\Evidence Eliminator Safe Recycle\Command '(Default)'
Type: REG_SZ
Data: C:\WINDOWS\SYSTEM\eetransx /recycle
HKEY_CLASSES_ROOT\CLSID\{78E5A540-1850-11CF-9D53-00AA003C9CB6} '(Default)'
Type: REG_SZ
Data: RichText General Property Page Object
HKEY_CLASSES_ROOT\CLSID\{78E5A540-1850-11CF-9D53-00AA003C9CB6}\InprocServer32 '(Default)'
Type: REG_SZ
Data: C:\WINDOWS\SYSTEM\RICHTX32.OCX
HKEY_CLASSES_ROOT\CLSID\{7DA06D40-54A0-11CF-A521-0080C77A7786} '(Default)'
Type: REG_SZ
Data: SSTabCtl General Property Page Object
HKEY_CLASSES_ROOT\CLSID\{7DA06D40-54A0-11CF-A521-0080C77A7786}\InprocServer32 '(Default)'
Type: REG_SZ
Data: C:\WINDOWS\SYSTEM\TABCTL32.OCX
HKEY_CLASSES_ROOT\CLSID\{AFC634B0-4B8B-11CF-8989-00AA00688B10} '(Default)'
Type: REG_SZ
Data: RichText Apppearance Property Page Object
HKEY_CLASSES_ROOT\CLSID\{AFC634B0-4B8B-11CF-8989-00AA00688B10}\InprocServer32 '(Default)'
Type: REG_SZ
Data: C:\WINDOWS\SYSTEM\RICHTX32.OCX
HKEY_CLASSES_ROOT\CLSID\{BDC217C5-ED16-11CD-956C-0000C04E4C0A} '(Default)'
Type: REG_SZ
Data: Microsoft Tabbed Dialog Control, version 6.0
HKEY_CLASSES_ROOT\CLSID\{BDC217C5-ED16-11CD-956C-0000C04E4C0A}\InprocServer32 '(Default)'
Type: REG_SZ
Data: C:\WINDOWS\SYSTEM\TABCTL32.OCX
HKEY_CLASSES_ROOT\CLSID\{BDC217C5-ED16-11CD-956C-0000C04E4C0A}\InprocServer32 'ThreadingModel'
Type: REG_SZ
Data: Apartment
HKEY_CLASSES_ROOT\CLSID\{BDC217C5-ED16-11CD-956C-0000C04E4C0A}\MiscStatus '(Default)'
Type: REG_SZ
Data: 0
HKEY_CLASSES_ROOT\CLSID\{BDC217C5-ED16-11CD-956C-0000C04E4C0A}\MiscStatus\1 '(Default)'
Type: REG_SZ
Data: 197009
HKEY_CLASSES_ROOT\CLSID\{BDC217C5-ED16-11CD-956C-0000C04E4C0A}\ProgID '(Default)'
Type: REG_SZ
Data: TabDlg.SSTab.1
HKEY_CLASSES_ROOT\CLSID\{BDC217C5-ED16-11CD-956C-0000C04E4C0A}\ToolboxBitmap32 '(Default)'
Type: REG_SZ
Data: C:\WINDOWS\SYSTEM\TABCTL32.OCX, 1
HKEY_CLASSES_ROOT\CLSID\{BDC217C5-ED16-11CD-956C-0000C04E4C0A}\TypeLib '(Default)'
Type: REG_SZ
Data: {BDC217C8-ED16-11CD-956C-0000C04E4C0A}
HKEY_CLASSES_ROOT\CLSID\{BDC217C5-ED16-11CD-956C-0000C04E4C0A}\Version '(Default)'
Type: REG_SZ
Data: 1.1
HKEY_CLASSES_ROOT\CLSID\{BDC217C5-ED16-11CD-956C-0000C04E4C0A}\VersionIndependentProgID '(Default)'
Type: REG_SZ
Data: TabDlg.SSTab
HKEY_CLASSES_ROOT\CLSID\{F6D331E6-3AAD-11D2-9889-204C4F4F5020} '(Default)'
Type: REG_SZ
Data: Enumerator Object
HKEY_CLASSES_ROOT\CLSID\{F6D331E6-3AAD-11D2-9889-204C4F4F5020}\Implemented Categories '(Default)'
Type: REG_SZ
Data:
HKEY_CLASSES_ROOT\CLSID\{F6D331E6-3AAD-11D2-9889-204C4F4F5020}\InprocServer32 '(Default)'
Type: REG_SZ
Data: C:\WINDOWS\SYSTEM\SGFILESYS.DLL
HKEY_CLASSES_ROOT\CLSID\{F6D331E6-3AAD-11D2-9889-204C4F4F5020}\InprocServer32 'ThreadingModel'
Type: REG_SZ
Data: Apartment
HKEY_CLASSES_ROOT\CLSID\{F6D331E6-3AAD-11D2-9889-204C4F4F5020}\ProgID '(Default)'
Type: REG_SZ
Data: SGFileSys.Enumerator.1
HKEY_CLASSES_ROOT\CLSID\{F6D331E6-3AAD-11D2-9889-204C4F4F5020}\VersionIndependentProgID '(Default)'
Type: REG_SZ
Data: SGFileSys.Enumerator
HKEY_CLASSES_ROOT\Folder\shellex\ContextMenuHandlers\Evidence Eliminator '(Default)'
Type: REG_SZ
Data: Default
HKEY_CLASSES_ROOT\Interface\{2334D2B1-713E-11CF-8AE5-00AA00C00905} '(Default)'
Type: REG_SZ
Data: IVBDataObject
HKEY_CLASSES_ROOT\Interface\{2334D2B1-713E-11CF-8AE5-00AA00C00905}\ProxyStubClsid '(Default)'
Type: REG_SZ
Data: {00020424-0000-0000-C000-000000000046}
HKEY_CLASSES_ROOT\Interface\{2334D2B1-713E-11CF-8AE5-00AA00C00905}\ProxyStubClsid32 '(Default)'
Type: REG_SZ
Data: {00020424-0000-0000-C000-000000000046}
HKEY_CLASSES_ROOT\Interface\{2334D2B1-713E-11CF-8AE5-00AA00C00905}\TypeLib '(Default)'
Type: REG_SZ
Data: {3B7C8863-D78F-101B-B9B5-04021C009402}
HKEY_CLASSES_ROOT\Interface\{2334D2B1-713E-11CF-8AE5-00AA00C00905}\TypeLib 'Version'
Type: REG_SZ
Data: 1.2
HKEY_CLASSES_ROOT\Interface\{2334D2B3-713E-11CF-8AE5-00AA00C00905} '(Default)'
Type: REG_SZ
Data: IVBDataObjectFiles
HKEY_CLASSES_ROOT\Interface\{2334D2B3-713E-11CF-8AE5-00AA00C00905}\ProxyStubClsid '(Default)'
Type: REG_SZ
Data: {00020424-0000-0000-C000-000000000046}
HKEY_CLASSES_ROOT\Interface\{2334D2B3-713E-11CF-8AE5-00AA00C00905}\ProxyStubClsid32 '(Default)'
Type: REG_SZ
Data: {00020424-0000-0000-C000-000000000046}
HKEY_CLASSES_ROOT\Interface\{2334D2B3-713E-11CF-8AE5-00AA00C00905}\TypeLib '(Default)'
Type: REG_SZ
Data: {3B7C8863-D78F-101B-B9B5-04021C009402}
HKEY_CLASSES_ROOT\Interface\{2334D2B3-713E-11CF-8AE5-00AA00C00905}\TypeLib 'Version'
Type: REG_SZ
Data: 1.2
HKEY_CLASSES_ROOT\Interface\{2A4FCCB0-DFF1-11CF-8E74-00A0C90F26F8} '(Default)'
Type: REG_SZ
Data: ISSTabCtl
HKEY_CLASSES_ROOT\Interface\{2A4FCCB0-DFF1-11CF-8E74-00A0C90F26F8}\ProxyStubClsid '(Default)'
Type: REG_SZ
Data: {00020424-0000-0000-C000-000000000046}
HKEY_CLASSES_ROOT\Interface\{2A4FCCB0-DFF1-11CF-8E74-00A0C90F26F8}\ProxyStubClsid32 '(Default)'
Type: REG_SZ
Data: {00020424-0000-0000-C000-000000000046}
HKEY_CLASSES_ROOT\Interface\{2A4FCCB0-DFF1-11CF-8E74-00A0C90F26F8}\TypeLib '(Default)'
Type: REG_SZ
Data: {BDC217C8-ED16-11CD-956C-0000C04E4C0A}
HKEY_CLASSES_ROOT\Interface\{2A4FCCB0-DFF1-11CF-8E74-00A0C90F26F8}\TypeLib 'Version'
Type: REG_SZ
Data: 1.1
HKEY_CLASSES_ROOT\Interface\{307C5041-76B3-11CE-BF00-0080AD0EF894} '(Default)'
Type: REG_SZ
Data: _DMsghook
HKEY_CLASSES_ROOT\Interface\{307C5041-76B3-11CE-BF00-0080AD0EF894}\ProxyStubClsid '(Default)'
Type: REG_SZ
Data: {00020420-0000-0000-C000-000000000046}
HKEY_CLASSES_ROOT\Interface\{307C5041-76B3-11CE-BF00-0080AD0EF894}\ProxyStubClsid32 '(Default)'
Type: REG_SZ
Data: {00020420-0000-0000-C000-000000000046}
HKEY_CLASSES_ROOT\Interface\{307C5041-76B3-11CE-BF00-0080AD0EF894}\TypeLib '(Default)'
Type: REG_SZ
Data: {307C5043-76B3-11CE-BF00-0080AD0EF894}
HKEY_CLASSES_ROOT\Interface\{307C5041-76B3-11CE-BF00-0080AD0EF894}\TypeLib 'Version'
Type: REG_SZ
Data: 1.0
HKEY_CLASSES_ROOT\Interface\{307C5042-76B3-11CE-BF00-0080AD0EF894} '(Default)'
Type: REG_SZ
Data: _DMsghookEvents
HKEY_CLASSES_ROOT\Interface\{307C5042-76B3-11CE-BF00-0080AD0EF894}\ProxyStubClsid '(Default)'
Type: REG_SZ
Data: {00020420-0000-0000-C000-000000000046}
HKEY_CLASSES_ROOT\Interface\{307C5042-76B3-11CE-BF00-0080AD0EF894}\ProxyStubClsid32 '(Default)'
Type: REG_SZ
Data: {00020420-0000-0000-C000-000000000046}
HKEY_CLASSES_ROOT\Interface\{307C5042-76B3-11CE-BF00-0080AD0EF894}\TypeLib '(Default)'
Type: REG_SZ
Data: {307C5043-76B3-11CE-BF00-0080AD0EF894}
HKEY_CLASSES_ROOT\Interface\{307C5042-76B3-11CE-BF00-0080AD0EF894}\TypeLib 'Version'
Type: REG_SZ
Data: 1.0
HKEY_CLASSES_ROOT\Interface\{3B7C8862-D78F-101B-B9B5-04021C009402} '(Default)'
Type: REG_SZ
Data: DRichTextEvents
HKEY_CLASSES_ROOT\Interface\{3B7C8862-D78F-101B-B9B5-04021C009402}\ProxyStubClsid '(Default)'
Type: REG_SZ
Data: {00020420-0000-0000-C000-000000000046}
HKEY_CLASSES_ROOT\Interface\{3B7C8862-D78F-101B-B9B5-04021C009402}\ProxyStubClsid32 '(Default)'
Type: REG_SZ
Data: {00020420-0000-0000-C000-000000000046}
HKEY_CLASSES_ROOT\Interface\{3B7C8862-D78F-101B-B9B5-04021C009402}\TypeLib '(Default)'
Type: REG_SZ
Data: {3B7C8863-D78F-101B-B9B5-04021C009402}
HKEY_CLASSES_ROOT\Interface\{3B7C8862-D78F-101B-B9B5-04021C009402}\TypeLib 'Version'
Type: REG_SZ
Data: 1.2
HKEY_CLASSES_ROOT\Interface\{859321D0-3FD1-11CF-8981-00AA00688B10} '(Default)'
Type: REG_SZ
Data: IOLEObjects
HKEY_CLASSES_ROOT\Interface\{859321D0-3FD1-11CF-8981-00AA00688B10}\ProxyStubClsid '(Default)'
Type: REG_SZ
Data: {00020424-0000-0000-C000-000000000046}
HKEY_CLASSES_ROOT\Interface\{859321D0-3FD1-11CF-8981-00AA00688B10}\ProxyStubClsid32 '(Default)'
Type: REG_SZ
Data: {00020424-0000-0000-C000-000000000046}
HKEY_CLASSES_ROOT\Interface\{859321D0-3FD1-11CF-8981-00AA00688B10}\TypeLib '(Default)'
Type: REG_SZ
Data: {3B7C8863-D78F-101B-B9B5-04021C009402}
HKEY_CLASSES_ROOT\Interface\{859321D0-3FD1-11CF-8981-00AA00688B10}\TypeLib 'Version'
Type: REG_SZ
Data: 1.2
HKEY_CLASSES_ROOT\Interface\{AC1ECC62-3AA9-11D2-9889-204C4F4F5020} '(Default)'
Type: REG_SZ
Data: IItems
HKEY_CLASSES_ROOT\Interface\{AC1ECC62-3AA9-11D2-9889-204C4F4F5020}\ProxyStubClsid '(Default)'
Type: REG_SZ
Data: {00020424-0000-0000-C000-000000000046}
HKEY_CLASSES_ROOT\Interface\{AC1ECC62-3AA9-11D2-9889-204C4F4F5020}\ProxyStubClsid32 '(Default)'
Type: REG_SZ
Data: {00020424-0000-0000-C000-000000000046}
HKEY_CLASSES_ROOT\Interface\{AC1ECC62-3AA9-11D2-9889-204C4F4F5020}\TypeLib '(Default)'
Type: REG_SZ
Data: {AC1ECC53-3AA9-11D2-9889-204C4F4F5020}
HKEY_CLASSES_ROOT\Interface\{AC1ECC62-3AA9-11D2-9889-204C4F4F5020}\TypeLib 'Version'
Type: REG_SZ
Data: 1.0
HKEY_CLASSES_ROOT\Interface\{BDC217C7-ED16-11CD-956C-0000C04E4C0A} '(Default)'
Type: REG_SZ
Data: DSSTabCtlEvents
HKEY_CLASSES_ROOT\Interface\{BDC217C7-ED16-11CD-956C-0000C04E4C0A}\ProxyStubClsid '(Default)'
Type: REG_SZ
Data: {00020420-0000-0000-C000-000000000046}
HKEY_CLASSES_ROOT\Interface\{BDC217C7-ED16-11CD-956C-0000C04E4C0A}\ProxyStubClsid32 '(Default)'
Type: REG_SZ
Data: {00020420-0000-0000-C000-000000000046}
HKEY_CLASSES_ROOT\Interface\{BDC217C7-ED16-11CD-956C-0000C04E4C0A}\TypeLib '(Default)'
Type: REG_SZ
Data: {BDC217C8-ED16-11CD-956C-0000C04E4C0A}
HKEY_CLASSES_ROOT\Interface\{BDC217C7-ED16-11CD-956C-0000C04E4C0A}\TypeLib 'Version'
Type: REG_SZ
Data: 1.1
HKEY_CLASSES_ROOT\Interface\{E9A5593C-CAB0-11D1-8C0B-0000F8754DA1} '(Default)'
Type: REG_SZ
Data: IRichText
HKEY_CLASSES_ROOT\Interface\{E9A5593C-CAB0-11D1-8C0B-0000F8754DA1}\ProxyStubClsid '(Default)'
Type: REG_SZ
Data: {00020424-0000-0000-C000-000000000046}
HKEY_CLASSES_ROOT\Interface\{E9A5593C-CAB0-11D1-8C0B-0000F8754DA1}\ProxyStubClsid32 '(Default)'
Type: REG_SZ
Data: {00020424-0000-0000-C000-000000000046}
HKEY_CLASSES_ROOT\Interface\{E9A5593C-CAB0-11D1-8C0B-0000F8754DA1}\TypeLib '(Default)'
Type: REG_SZ
Data: {3B7C8863-D78F-101B-B9B5-04021C009402}
HKEY_CLASSES_ROOT\Interface\{E9A5593C-CAB0-11D1-8C0B-0000F8754DA1}\TypeLib 'Version'
Type: REG_SZ
Data: 1.2
HKEY_CLASSES_ROOT\Interface\{ED117630-4090-11CF-8981-00AA00688B10} '(Default)'
Type: REG_SZ
Data: IOLEObject
HKEY_CLASSES_ROOT\Interface\{ED117630-4090-11CF-8981-00AA00688B10}\ProxyStubClsid '(Default)'
Type: REG_SZ
Data: {00020424-0000-0000-C000-000000000046}
HKEY_CLASSES_ROOT\Interface\{ED117630-4090-11CF-8981-00AA00688B10}\ProxyStubClsid32 '(Default)'
Type: REG_SZ
Data: {00020424-0000-0000-C000-000000000046}
HKEY_CLASSES_ROOT\Interface\{ED117630-4090-11CF-8981-00AA00688B10}\TypeLib '(Default)'
Type: REG_SZ
Data: {3B7C8863-D78F-101B-B9B5-04021C009402}
HKEY_CLASSES_ROOT\Interface\{ED117630-4090-11CF-8981-00AA00688B10}\TypeLib 'Version'
Type: REG_SZ
Data: 1.2
HKEY_CLASSES_ROOT\Interface\{F6D331E5-3AAD-11D2-9889-204C4F4F5020} '(Default)'
Type: REG_SZ
Data: IEnumerator
HKEY_CLASSES_ROOT\Interface\{F6D331E5-3AAD-11D2-9889-204C4F4F5020}\ProxyStubClsid '(Default)'
Type: REG_SZ
Data: {00020424-0000-0000-C000-000000000046}
HKEY_CLASSES_ROOT\Interface\{F6D331E5-3AAD-11D2-9889-204C4F4F5020}\ProxyStubClsid32 '(Default)'
Type: REG_SZ
Data: {00020424-0000-0000-C000-000000000046}
HKEY_CLASSES_ROOT\Interface\{F6D331E5-3AAD-11D2-9889-204C4F4F5020}\TypeLib '(Default)'
Type: REG_SZ
Data: {AC1ECC53-3AA9-11D2-9889-204C4F4F5020}
HKEY_CLASSES_ROOT\Interface\{F6D331E5-3AAD-11D2-9889-204C4F4F5020}\TypeLib 'Version'
Type: REG_SZ
Data: 1.0
HKEY_CLASSES_ROOT\Interface\{F6D331E7-3AAD-11D2-9889-204C4F4F5020} '(Default)'
Type: REG_SZ
Data: IItem
HKEY_CLASSES_ROOT\Interface\{F6D331E7-3AAD-11D2-9889-204C4F4F5020}\ProxyStubClsid '(Default)'
Type: REG_SZ
Data: {00020424-0000-0000-C000-000000000046}
HKEY_CLASSES_ROOT\Interface\{F6D331E7-3AAD-11D2-9889-204C4F4F5020}\ProxyStubClsid32 '(Default)'
Type: REG_SZ
Data: {00020424-0000-0000-C000-000000000046}
HKEY_CLASSES_ROOT\Interface\{F6D331E7-3AAD-11D2-9889-204C4F4F5020}\TypeLib '(Default)'
Type: REG_SZ
Data: {AC1ECC53-3AA9-11D2-9889-204C4F4F5020}
HKEY_CLASSES_ROOT\Interface\{F6D331E7-3AAD-11D2-9889-204C4F4F5020}\TypeLib 'Version'
Type: REG_SZ
Data: 1.0
HKEY_CLASSES_ROOT\RICHTEXT.RichtextCtrl '(Default)'
Type: REG_SZ
Data: Microsoft Rich Textbox Control, version 6.0
HKEY_CLASSES_ROOT\RICHTEXT.RichtextCtrl\CLSID '(Default)'
Type: REG_SZ
Data: {3B7C8860-D78F-101B-B9B5-04021C009402}
HKEY_CLASSES_ROOT\RICHTEXT.RichtextCtrl\CurVer '(Default)'
Type: REG_SZ
Data: RICHTEXT.RichtextCtrl.1
HKEY_CLASSES_ROOT\RICHTEXT.RichtextCtrl.1 '(Default)'
Type: REG_SZ
Data: Microsoft Rich Textbox Control, version 6.0
HKEY_CLASSES_ROOT\RICHTEXT.RichtextCtrl.1\CLSID '(Default)'
Type: REG_SZ
Data: {3B7C8860-D78F-101B-B9B5-04021C009402}
HKEY_CLASSES_ROOT\SGFileSys.Enumerator '(Default)'
Type: REG_SZ
Data: Enumerator Object
HKEY_CLASSES_ROOT\SGFileSys.Enumerator\CLSID '(Default)'
Type: REG_SZ
Data: {F6D331E6-3AAD-11D2-9889-204C4F4F5020}
HKEY_CLASSES_ROOT\SGFileSys.Enumerator\CurVer '(Default)'
Type: REG_SZ
Data: SGFileSys.Enumerator.1
HKEY_CLASSES_ROOT\SGFileSys.Enumerator.1 '(Default)'
Type: REG_SZ
Data: Enumerator Object
HKEY_CLASSES_ROOT\SGFileSys.Enumerator.1\CLSID '(Default)'
Type: REG_SZ
Data: {F6D331E6-3AAD-11D2-9889-204C4F4F5020}
HKEY_CLASSES_ROOT\TabDlg.SSTab '(Default)'
Type: REG_SZ
Data: Microsoft Tabbed Dialog Control, version 6.0
HKEY_CLASSES_ROOT\TabDlg.SSTab\CLSID '(Default)'
Type: REG_SZ
Data: {BDC217C5-ED16-11CD-956C-0000C04E4C0A}
HKEY_CLASSES_ROOT\TabDlg.SSTab\CurVer '(Default)'
Type: REG_SZ
Data: TabDlg.SSTab.1
HKEY_CLASSES_ROOT\TabDlg.SSTab.1 '(Default)'
Type: REG_SZ
Data: Microsoft Tabbed Dialog Control, version 6.0
HKEY_CLASSES_ROOT\TabDlg.SSTab.1\CLSID '(Default)'
Type: REG_SZ
Data: {BDC217C5-ED16-11CD-956C-0000C04E4C0A}
HKEY_CLASSES_ROOT\TypeLib\{307C5043-76B3-11CE-BF00-0080AD0EF894}\1.0 '(Default)'
Type: REG_SZ
Data: Msghook OLE Custom Control module
HKEY_CLASSES_ROOT\TypeLib\{307C5043-76B3-11CE-BF00-0080AD0EF894}\1.0\0\win32 '(Default)'
Type: REG_SZ
Data: C:\WINDOWS\SYSTEM\MSGHOO32.OCX
HKEY_CLASSES_ROOT\TypeLib\{307C5043-76B3-11CE-BF00-0080AD0EF894}\1.0\FLAGS '(Default)'
Type: REG_SZ
Data: 2
HKEY_CLASSES_ROOT\TypeLib\{307C5043-76B3-11CE-BF00-0080AD0EF894}\1.0\HELPDIR '(Default)'
Type: REG_SZ
Data: C:\WINDOWS\SYSTEM
HKEY_CLASSES_ROOT\TypeLib\{3B7C8863-D78F-101B-B9B5-04021C009402}\1.2 '(Default)'
Type: REG_SZ
Data: Microsoft Rich Textbox Control 6.0 (SP3)
HKEY_CLASSES_ROOT\TypeLib\{3B7C8863-D78F-101B-B9B5-04021C009402}\1.2\0\win32 '(Default)'
Type: REG_SZ
Data: C:\WINDOWS\SYSTEM\RICHTX32.OCX
HKEY_CLASSES_ROOT\TypeLib\{3B7C8863-D78F-101B-B9B5-04021C009402}\1.2\FLAGS '(Default)'
Type: REG_SZ
Data: 2
HKEY_CLASSES_ROOT\TypeLib\{AC1ECC53-3AA9-11D2-9889-204C4F4F5020}\1.0 '(Default)'
Type: REG_SZ
Data: Stinga File System Helpers
HKEY_CLASSES_ROOT\TypeLib\{AC1ECC53-3AA9-11D2-9889-204C4F4F5020}\1.0\0\win32 '(Default)'
Type: REG_SZ
Data: C:\WINDOWS\SYSTEM\SGFILESYS.DLL
HKEY_CLASSES_ROOT\TypeLib\{AC1ECC53-3AA9-11D2-9889-204C4F4F5020}\1.0\FLAGS '(Default)'
Type: REG_SZ
Data: 0
HKEY_CLASSES_ROOT\TypeLib\{AC1ECC53-3AA9-11D2-9889-204C4F4F5020}\1.0\HELPDIR '(Default)'
Type: REG_SZ
Data: C:\WINDOWS\SYSTEM\
HKEY_CLASSES_ROOT\TypeLib\{BDC217C8-ED16-11CD-956C-0000C04E4C0A}\1.1 '(Default)'
Type: REG_SZ
Data: Microsoft Tabbed Dialog Control 6.0 (SP3)
HKEY_CLASSES_ROOT\TypeLib\{BDC217C8-ED16-11CD-956C-0000C04E4C0A}\1.1\0\win32 '(Default)'
Type: REG_SZ
Data: C:\WINDOWS\SYSTEM\TABCTL32.OCX
HKEY_CLASSES_ROOT\TypeLib\{BDC217C8-ED16-11CD-956C-0000C04E4C0A}\1.1\FLAGS '(Default)'
Type: REG_SZ
Data: 2
HKEY_CLASSES_ROOT\VBHT.Msghook '(Default)'
Type: REG_SZ
Data: Msghook Control
HKEY_CLASSES_ROOT\VBHT.Msghook\CLSID '(Default)'
Type: REG_SZ
Data: {307C5040-76B3-11CE-BF00-0080AD0EF894}
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SharedDlls 'C:\WINDOWS\SYSTEM\Fablock6.ocx'
Type: REG_DWORD
Data: 01, 00, 00, 00
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SharedDlls 'C:\WINDOWS\SYSTEM\RICHED32.DLL'
Type: REG_DWORD
Data: 02, 00, 00, 00
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SharedDlls 'C:\WINDOWS\SYSTEM\RichTx32.ocx'
Type: REG_DWORD
Data: 01, 00, 00, 00
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SharedDlls 'C:\WINDOWS\SYSTEM\TabCtl32.ocx'
Type: REG_DWORD
Data: 01, 00, 00, 00
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved 'Default'
Type: REG_SZ
Data: Evidence Eliminator Shell Extension
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Evidence Eliminator 'DisplayName'
Type: REG_SZ
Data: Evidence Eliminator
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Evidence Eliminator 'UninstallString'
Type: REG_SZ
Data: C:\PROGRA~1\EVIDEN~1\UNWISE.EXE C:\PROGRA~1\EVIDEN~1\INSTALL.LOG
HKEY_LOCAL_MACHINE\Software\PCTEL\HSPModem\Settings 'FirstTime'
Type: REG_BINARY
Data:
Values deleted: 2
-----------------
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\ActiveX Compatibility\{3B7C8860-D78F-101B-B9B5-04021C009402} 'Compatibility Flags'
Type: REG_DWORD
Data: 00, 04, 00, 00
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RemoteAccess 'NoLogon'
Type: REG_BINARY
Data: 00, 00, 00, 00
Values changed: 16
------------------
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu\&Programs\Menu 'Order'
Old type: REG_BINARY
New type: REG_BINARY
Old data: (data too large: 1508 bytes)
New data: (data too large: 1508 bytes)
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings 'GlobalUserOffline'
Old type: REG_DWORD
New type: REG_DWORD
Old data: 01, 00, 00, 00
New data: 00, 00, 00, 00
HKEY_CLASSES_ROOT\Component Categories\{00021493-0000-0000-C000-000000000046}\Enum 'Implementing'
Old type: REG_BINARY
New type: REG_BINARY
Old data: 1C, 00, 00, 00, 01, 00, 00, 00, D1, 07, 03, 00, 00, 00, 0B, 00, 01, 00, 28, 00, 15, 00, CA, 03, 04, 00, 00, 00, 64, 4E, A2, EF, 78, B0, D0, 11, 89, E4, 00, C0, 4F, C9, E2, 6E, 01, 24, D0, 30, 81, 6A, D0, 11, 82, 74, 00, C0, 4F, D5, AE, 38, 61, 4E, A2, EF, 78, B0, D0, 11, 89, E4, 00, C0, 4F, C9, E2, 6E, 62, 4E, A2, EF, 78, B0, D0, 11, 89, E4, 00, C0, 4F, C9, E2, 6E
New data: 1C, 00, 00, 00, 01, 00, 00, 00, D1, 07, 03, 00, 00, 00, 0B, 00, 02, 00, 1C, 00, 02, 00, DE, 03, 04, 00, 00, 00, 64, 4E, A2, EF, 78, B0, D0, 11, 89, E4, 00, C0, 4F, C9, E2, 6E, 01, 24, D0, 30, 81, 6A, D0, 11, 82, 74, 00, C0, 4F, D5, AE, 38, 61, 4E, A2, EF, 78, B0, D0, 11, 89, E4, 00, C0, 4F, C9, E2, 6E, 62, 4E, A2, EF, 78, B0, D0, 11, 89, E4, 00, C0, 4F, C9, E2, 6E
HKEY_CLASSES_ROOT\Component Categories\{00021494-0000-0000-C000-000000000046}\Enum 'Implementing'
Old type: REG_BINARY
New type: REG_BINARY
Old data: 1C, 00, 00, 00, 01, 00, 00, 00, D1, 07, 03, 00, 00, 00, 0B, 00, 01, 00, 28, 00, 16, 00, C0, 03, 01, 00, 00, 00, 25, 8C, 5C, 4D, 75, D0, D0, 11, B4, 16, 00, C0, 4F, B9, 03, 76
New data: 1C, 00, 00, 00, 01, 00, 00, 00, D1, 07, 03, 00, 00, 00, 0B, 00, 02, 00, 1C, 00, 02, 00, DE, 03, 01, 00, 00, 00, 25, 8C, 5C, 4D, 75, D0, D0, 11, B4, 16, 00, C0, 4F, B9, 03, 76
HKEY_LOCAL_MACHINE\Software\Description\Microsoft\Rpc\UuidPersistentData 'LastTimeAllocated'
Old type: REG_BINARY
New type: REG_BINARY
Old data: 60, 05, C4, 83, C5, 15, D5, 01
New data: E0, 9D, D1, 25, C6, 15, D5, 01
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\MediaResources\aux\es198x.drv<0002> 'DevNode'
Old type: REG_BINARY
New type: REG_BINARY
Old data: 00, B0, 9F, C2
New data: 00, 50, A1, C2
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\MediaResources\joystick\ 'DevNode'
Old type: REG_BINARY
New type: REG_BINARY
Old data: p—û¬
New data: ê_î¡
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\MediaResources\joystick\msjstick.drv<0004> 'DevNode'
Old type: REG_BINARY
New type: REG_BINARY
Old data: p—û¬
New data: ê_î¡
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\MediaResources\midi\essmpu.drv<0002> 'DevNode'
Old type: REG_BINARY
New type: REG_BINARY
Old data: 00, B0, 9F, C2
New data: 00, 50, A1, C2
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\MediaResources\midi\essswt.drv<0002> 'DevNode'
Old type: REG_BINARY
New type: REG_BINARY
Old data: 00, B0, 9F, C2
New data: 00, 50, A1, C2
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\MediaResources\mixer\es198x.drv<0002> 'DevNode'
Old type: REG_BINARY
New type: REG_BINARY
Old data: 00, B0, 9F, C2
New data: 00, 50, A1, C2
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\MediaResources\wave\es198x.drv<0002> 'DevNode'
Old type: REG_BINARY
New type: REG_BINARY
Old data: 00, B0, 9F, C2
New data: 00, 50, A1, C2
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SessionManager\CheckVerDLLs 'MSVCRT20.DLL'
Old type: REG_BINARY
New type: REG_BINARY
Old data: (data too large: 318 bytes)
New data: (data too large: 318 bytes)
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Shutdown 'SetupProgramRan'
Old type: REG_DWORD
New type: REG_DWORD
Old data: 02, 00, 00, 00
New data: 01, 00, 00, 00
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Class\MEDIA\0002\Drivers 'DevNode'
Old type: REG_BINARY
New type: REG_BINARY
Old data: 00, B0, 9F, C2
New data: 00, 50, A1, C2
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Class\MEDIA\0004\Drivers 'DevNode'
Old type: REG_BINARY
New type: REG_BINARY
Old data: p—û¬
New data: ê_î¡
------------------------------------------------------------
Disk contents
*************
Drives tracked: 2
-----------------
* c:\
* d:\
Folders added: 5
----------------
c:\Program Files\Evidence Eliminator
c:\Program Files\Evidence Eliminator\Data
c:\Program Files\Evidence Eliminator\Data\Plug-Ins
c:\Program Files\Evidence Eliminator\Help
c:\WINDOWS\Start Menu\Programs\Evidence Eliminator
Files added: 49
---------------
c:\Program Files\Evidence Eliminator\Ee.exe
Date: 2/25/2000 11:22 AM
Size: 321,510 bytes
c:\Program Files\Evidence Eliminator\INSTALL.LOG
Date: 3/11/2001 2:26 AM
Size: 5,931 bytes
c:\Program Files\Evidence Eliminator\License.txt
Date: 2/20/2000 2:01 PM
Size: 3,871 bytes
c:\Program Files\Evidence Eliminator\ReadMe.txt
Date: 2/21/2000 12:29 PM
Size: 3,948 bytes
c:\Program Files\Evidence Eliminator\UNWISE.EXE
Date: 10/7/1998 5:16 PM
Size: 148,480 bytes
c:\Program Files\Evidence Eliminator\Data\Plug-Ins\Adobe Acrobat Reader v3.0.eep
Date: 1/9/2000 2:34 AM
Size: 1,173 bytes
c:\Program Files\Evidence Eliminator\Data\Plug-Ins\Adobe Acrobat Reader v3.1.eep
Date: 1/9/2000 2:34 AM
Size: 1,133 bytes
c:\Program Files\Evidence Eliminator\Data\Plug-Ins\Adobe Acrobat Reader v4.0.eep
Date: 1/9/2000 2:34 AM
Size: 1,373 bytes
c:\Program Files\Evidence Eliminator\Data\Plug-Ins\Adobe Photoshop v5.5.eep
Date: 1/9/2000 2:34 AM
Size: 1,568 bytes
c:\Program Files\Evidence Eliminator\Data\Plug-Ins\Adobe Photoshop v5.eep
Date: 1/9/2000 2:34 AM
Size: 1,566 bytes
c:\Program Files\Evidence Eliminator\Data\Plug-Ins\Download Accelerator.eep
Date: 1/9/2000 2:34 AM
Size: 705 bytes
c:\Program Files\Evidence Eliminator\Data\Plug-Ins\Helios TextPad v3.eep
Date: 1/9/2000 2:34 AM
Size: 6,146 bytes
c:\Program Files\Evidence Eliminator\Data\Plug-Ins\JASC Paintshop Pro v5.eep
Date: 1/9/2000 2:34 AM
Size: 2,100 bytes
c:\Program Files\Evidence Eliminator\Data\Plug-Ins\JASC Paintshop Pro v6.eep
Date: 1/9/2000 2:34 AM
Size: 2,340 bytes
c:\Program Files\Evidence Eliminator\Data\Plug-Ins\Jet PhotoShell v1.2.eep
Date: 2/21/2000 12:08 PM
Size: 733 bytes
c:\Program Files\Evidence Eliminator\Data\Plug-Ins\Micrografx Picture Publisher v8.eep
Date: 1/9/2000 2:34 AM
Size: 1,419 bytes
c:\Program Files\Evidence Eliminator\Data\Plug-Ins\Microsoft FrontPage Express.eep
Date: 1/9/2000 2:34 AM
Size: 868 bytes
c:\Program Files\Evidence Eliminator\Data\Plug-Ins\Microsoft FrontPage.eep
Date: 1/9/2000 2:34 AM
Size: 1,735 bytes
c:\Program Files\Evidence Eliminator\Data\Plug-Ins\Microsoft Office.eep
Date: 2/14/2000 11:08 PM
Size: 6,977 bytes
c:\Program Files\Evidence Eliminator\Data\Plug-Ins\Microsoft Send-To Extensions.eep
Date: 2/10/2000 5:43 PM
Size: 584 bytes
c:\Program Files\Evidence Eliminator\Data\Plug-Ins\Microsoft Windows Paint.eep
Date: 1/9/2000 2:34 AM
Size: 908 bytes
c:\Program Files\Evidence Eliminator\Data\Plug-Ins\Microsoft Windows WordPad.eep
Date: 1/9/2000 2:34 AM
Size: 918 bytes
c:\Program Files\Evidence Eliminator\Data\Plug-Ins\Opera Browser.eep
Date: 2/8/2000 1:56 PM
Size: 785 bytes
c:\Program Files\Evidence Eliminator\Data\Plug-Ins\Real Audio Player v6.eep
Date: 1/9/2000 2:34 AM
Size: 1,479 bytes
c:\Program Files\Evidence Eliminator\Data\Plug-Ins\Ulead Photo Explorer v4.2.eep
Date: 2/21/2000 12:07 PM
Size: 1,320 bytes
c:\Program Files\Evidence Eliminator\Data\Plug-Ins\Ulead Photo Viewer v4.0.eep
Date: 1/9/2000 2:34 AM
Size: 568 bytes
c:\Program Files\Evidence Eliminator\Data\Plug-Ins\Ulead PhotoImpact v5.eep
Date: 1/9/2000 2:34 AM
Size: 564 bytes
c:\Program Files\Evidence Eliminator\Data\Plug-Ins\Ulead PhotoImpact Viewer v4.eep
Date: 1/9/2000 2:34 AM
Size: 572 bytes
c:\Program Files\Evidence Eliminator\Data\Plug-Ins\UltraEdit v4.eep
Date: 1/9/2000 2:34 AM
Size: 741 bytes
c:\Program Files\Evidence Eliminator\Data\Plug-Ins\Web Ferret v3.eep
Date: 1/9/2000 2:34 AM
Size: 575 bytes
c:\Program Files\Evidence Eliminator\Data\Plug-Ins\WinRar v2.6.eep
Date: 1/9/2000 2:34 AM
Size: 583 bytes
c:\Program Files\Evidence Eliminator\Data\Plug-Ins\Winzip v7.eep
Date: 1/9/2000 2:34 AM
Size: 778 bytes
c:\Program Files\Evidence Eliminator\Help\ee.chm
Date: 2/20/2000 8:29 PM
Size: 87,492 bytes
c:\WINDOWS\COMMAND\eedosdel.com
Date: 2/19/2000 7:44 PM
Size: 646 bytes
c:\WINDOWS\COMMAND\esdosdel.com
Date: 2/19/2000 8:24 AM
Size: 642 bytes
c:\WINDOWS\COMMAND\power.com
Date: 4/11/1998 9:06 AM
Size: 216 bytes
c:\WINDOWS\PIF\EEPIF.pif
Date: 8/23/1999 9:39 PM
Size: 967 bytes
c:\WINDOWS\Start Menu\Programs\Evidence Eliminator\Evidence Eliminator Help.lnk
Date: 3/11/2001 2:26 AM
Size: 416 bytes
c:\WINDOWS\Start Menu\Programs\Evidence Eliminator\Evidence Eliminator.lnk
Date: 3/11/2001 2:26 AM
Size: 382 bytes
c:\WINDOWS\Start Menu\Programs\Evidence Eliminator\License Agreement.lnk
Date: 3/11/2001 2:26 AM
Size: 402 bytes
c:\WINDOWS\Start Menu\Programs\Evidence Eliminator\Read Me.lnk
Date: 3/11/2001 2:26 AM
Size: 398 bytes
c:\WINDOWS\SYSTEM\Eeshellx.dll
Date: 12/2/1999 4:22 PM
Size: 61,440 bytes
c:\WINDOWS\SYSTEM\eetransx.exe
Date: 12/2/1999 1:57 PM
Size: 32,768 bytes
c:\WINDOWS\SYSTEM\Fablock6.ocx
Date: 5/29/1999 8:33 PM
Size: 114,696 bytes
c:\WINDOWS\SYSTEM\MSGHOO32.OCX
Date: 5/3/1996 10:05 PM
Size: 28,672 bytes
c:\WINDOWS\SYSTEM\RichTx32.ocx
Date: 5/7/1999 12:00 AM
Size: 204,296 bytes
c:\WINDOWS\SYSTEM\SGFILESYS.DLL
Date: 7/15/1999 12:11 PM
Size: 122,880 bytes
c:\WINDOWS\SYSTEM\TabCtl32.ocx
Date: 5/7/1999 12:00 AM
Size: 209,408 bytes
c:\WINDOWS\TEMP\GLF9031.TMP
Date: 9/24/1998 3:53 PM
Size: 8,704 bytes
Files changed: 8
----------------
c:\AUTOEXEC.AGO
Old date: 3/9/2001 9:50 PM
New date: 3/11/2001 1:40 AM
Old size: 127 bytes
New size: 127 bytes
c:\autoexec.bat
Old date: 3/11/2001 1:40 AM
New date: 3/11/2001 2:27 AM
Old size: 127 bytes
New size: 127 bytes
c:\CONFIG.AGO
Old date: 3/9/2001 9:50 PM
New date: 3/11/2001 1:40 AM
Old size: 228 bytes
New size: 228 bytes
c:\config.sys
Old date: 3/11/2001 1:40 AM
New date: 3/11/2001 2:27 AM
Old size: 228 bytes
New size: 228 bytes
c:\WINDOWS\DOSSTART.AGO
Old date: 3/9/2001 9:50 PM
New date: 3/11/2001 1:40 AM
Old size: 100 bytes
New size: 100 bytes
c:\WINDOWS\DOSSTART.BAT
Old date: 3/11/2001 1:40 AM
New date: 3/11/2001 2:27 AM
Old size: 100 bytes
New size: 100 bytes
c:\WINDOWS\WININIT.BAK
Old date: 1/1/2001 12:00 AM
New date: 3/11/2001 2:26 AM
Old size: 953 bytes
New size: 73 bytes
c:\WINDOWS\SYSTEM\RICHED32.DLL
Old date: 1/1/2001 12:00 AM
New date: 1/13/1997 1:00 AM
Old size: 188,416 bytes
New size: 174,352 bytes
------------------------------------------------------------
INI file
********
Ini files tracked: 4
--------------------
* C:\msdos.sys
* c:\windows\control.ini
* c:\windows\system.ini
* c:\windows\win.ini
------------------------------------------------------------
Text file
*********
Text files tracked: 2
---------------------
* C:\autoexec.bat
* C:\config.sys
------------------------------------------------------------
InCtrl5, Copyright © 2000 by Ziff Davis Media, Inc.
Written by Neil J. Rubenking
First published in PC Magazine, December 5, 2000.
Back
|