ICS Internet Services Install/Uninstall Report on Macrovision/C-Dilla Copy Protection/Spy Software

Registration Keys NOT REMOVED
Files NOT REMOVED
Installation report: Run InCtrl on Designer.exe to see where C-Dilla comes from
    (generated by INCTRL 4, version 1.1.0.0)
Install program: C:\Program Files\InstallShield\DemoShield 6.5 Evaluation Edition\Program\Designer.exe
Thursday, August 10, 2000  06:16 PM
Windows 98
Notification by Disk contents comparison
Tracking these drives/folders: 
    c:\
    d:\
    e:\
NO CHANGES MADE TO c:\windows\win.ini...
NO CHANGES MADE TO c:\windows\system.ini...
NO CHANGES MADE TO c:\windows\control.ini...

REGISTRY KEYS ADDED: (35)
HKEY_LOCAL_MACHINE\Software\C-Dilla
HKEY_LOCAL_MACHINE\Software\C-Dilla\SafeCast
HKEY_LOCAL_MACHINE\Software\C-Dilla\SafeCast\ShellWizards
HKEY_LOCAL_MACHINE\Software\C-Dilla\SafeCast\ShellWizards\0xbd059000
HKEY_LOCAL_MACHINE\Software\C-Dilla\SafeCast\ShellWizards\0xbd059000\Info
HKEY_LOCAL_MACHINE\Software\C-Dilla\SafeCast\ShellWizards\0xbd059000\Info\InstallDate
HKEY_LOCAL_MACHINE\Software\C-Dilla\SafeCast\ShellWizards\0xbd059000\Info\InstallPath
HKEY_LOCAL_MACHINE\Software\C-Dilla\SafeCast\ShellWizards\0xbd059000\Info\ProtectedProductPath
HKEY_LOCAL_MACHINE\Software\C-Dilla\SafeCast\ShellWizards\0xbd059000\Info\Version
HKEY_LOCAL_MACHINE\Software\C-Dilla\SafeCast\ShellWizards\0xbd059000\Settings
HKEY_LOCAL_MACHINE\Software\C-Dilla\SafeCast\ShellWizards\0xbd059000\Settings\Transactions
HKEY_LOCAL_MACHINE\Software\C-Dilla\SafeCast\ShellWizards\0xbd059000\Settings\Transactions\CurrentCode
HKEY_LOCAL_MACHINE\Software\C-Dilla\SafeCast\ShellWizards\0xbd059000\Settings\Transactions\CurrentDate
HKEY_LOCAL_MACHINE\Software\C-Dilla\SafeCast\ShellWizards\0xbd059000\Settings\Transactions\CurrentType
HKEY_LOCAL_MACHINE\Software\C-Dilla\SafeCast\ShellWizards\0xbd059000\Support
HKEY_LOCAL_MACHINE\Software\C-Dilla\SafeCast\ShellWizards\0xbd059000\Support\2
HKEY_LOCAL_MACHINE\Software\C-Dilla\SafeCast\ShellWizards\0xbd059000\Support\2\2000/08/10 18:16:26
HKEY_LOCAL_MACHINE\Software\C-Dilla\SafeCast\ShellWizards\0xbd059000\Support\2\2000/08/10 18:16:43
HKEY_LOCAL_MACHINE\Software\CLASSES\C-Dilla
HKEY_LOCAL_MACHINE\Software\CLASSES\C-Dilla\Licences
HKEY_LOCAL_MACHINE\Software\CLASSES\C-Dilla\Licences\bd059000
HKEY_LOCAL_MACHINE\Software\CLASSES\C-Dilla\Licences\bd059000\Reference.Count
HKEY_LOCAL_MACHINE\Software\CLASSES\C-Dilla\Products
HKEY_LOCAL_MACHINE\Software\CLASSES\C-Dilla\Products\bd059000
HKEY_LOCAL_MACHINE\Software\CLASSES\C-Dilla\Products\bd059000\Installation.Date.And.Time
HKEY_LOCAL_MACHINE\Software\CLASSES\C-Dilla\Products\bd059000\Licence.Numbers
HKEY_LOCAL_MACHINE\Software\CLASSES\C-Dilla\RTS
HKEY_LOCAL_MACHINE\Software\CLASSES\C-Dilla\RTS\Config
HKEY_LOCAL_MACHINE\Software\CLASSES\C-Dilla\RTS\Config\Mode.A
HKEY_LOCAL_MACHINE\Software\CLASSES\C-Dilla\RTS\Installation.Date.And.Time
HKEY_LOCAL_MACHINE\Software\CLASSES\C-Dilla\RTS\Version
HKEY_LOCAL_MACHINE\Software\CLASSES\C-Dilla\RTS\VxD.Settings
HKEY_LOCAL_MACHINE\Software\CLASSES\C-Dilla\RTS\VxD.Settings\Cache.Size
HKEY_LOCAL_MACHINE\Software\CLASSES\C-Dilla\RTS\VxD.Settings\PLCache.Size

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\LMS
REGISTRY KEY VALUES ADDED: (19)
HKEY_LOCAL_MACHINE\Software\C-Dilla\SafeCast\ShellWizards\0xbd059000\Info\InstallDate @=20000810181626
HKEY_LOCAL_MACHINE\Software\C-Dilla\SafeCast\ShellWizards\0xbd059000\Info\InstallPath @=C:\PROGRAM FILES\INSTALLSHIELD\DEMOSHIELD 6.5 EVALUATION EDITION\PROGRAM\DESIGNER.EXE
HKEY_LOCAL_MACHINE\Software\C-Dilla\SafeCast\ShellWizards\0xbd059000\Info\ProtectedProductPath @=C:\PROGRAM FILES\INSTALLSHIELD\DEMOSHIELD 6.5 EVALUATION EDITION\PROGRAM\Designer.csx
HKEY_LOCAL_MACHINE\Software\C-Dilla\SafeCast\ShellWizards\0xbd059000\Info\Version @=1.11.030
HKEY_LOCAL_MACHINE\Software\C-Dilla\SafeCast\ShellWizards\0xbd059000\Settings\Transactions\CurrentCode @=2557110524142437 1589857147294915
HKEY_LOCAL_MACHINE\Software\C-Dilla\SafeCast\ShellWizards\0xbd059000\Settings\Transactions\CurrentDate @=20000810181637
HKEY_LOCAL_MACHINE\Software\C-Dilla\SafeCast\ShellWizards\0xbd059000\Settings\Transactions\CurrentType @=7
HKEY_LOCAL_MACHINE\Software\C-Dilla\SafeCast\ShellWizards\0xbd059000\Support\2\2000/08/10 18:16:26 @=02 00 1e  39 93 1b aa 0a d0 04 da 00 00 
HKEY_LOCAL_MACHINE\Software\C-Dilla\SafeCast\ShellWizards\0xbd059000\Support\2\2000/08/10 18:16:43 @=02 00 1e  39 93 1b bb 0a d0 02 17 00 c9 
HKEY_LOCAL_MACHINE\Software\CLASSES\C-Dilla\Licences\bd059000\Reference.Count @=1
HKEY_LOCAL_MACHINE\Software\CLASSES\C-Dilla\Products\bd059000\Installation.Date.And.Time @=2000/08/10 18:16:26
HKEY_LOCAL_MACHINE\Software\CLASSES\C-Dilla\Products\bd059000\Licence.Numbers @=bd059000
HKEY_LOCAL_MACHINE\Software\CLASSES\C-Dilla\RTS\Config\Mode.A @=0
HKEY_LOCAL_MACHINE\Software\CLASSES\C-Dilla\RTS\Installation.Date.And.Time @=18:16:23 10/8/2000
HKEY_LOCAL_MACHINE\Software\CLASSES\C-Dilla\RTS\Version @=3.21.020
HKEY_LOCAL_MACHINE\Software\CLASSES\C-Dilla\RTS\VxD.Settings\Cache.Size @=100
HKEY_LOCAL_MACHINE\Software\CLASSES\C-Dilla\RTS\VxD.Settings\PLCache.Size @=40
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\LMS DisplayName=C-Dilla Licence Management System
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\LMS UninstallString=C:\C_DILLA\setup\cdunin16.exe
REGISTRY KEY VALUES CHANGED: (2)
HKEY_USERS\.DEFAULT\Software\Corel\WritingTools\9\User Word Lists\US Selected UWL=12517378 (was 12582914)
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Applets\Popup AlwaysOnTop=12582912 (was 12517376)
FILES AND DIRECTORIES ADDED: (13)

c:\C_DILLA
c:\C_DILLA\BD059000.DAT

c:\C_DILLA\setup
c:\C_DILLA\setup\cdains16.dll
c:\C_DILLA\setup\cdains32.dll
c:\C_DILLA\setup\cdremove.exe
c:\C_DILLA\setup\cdunin16.exe
c:\WINDOWS\CDILLA05.DLL
c:\WINDOWS\CDILLA10.EXE
c:\WINDOWS\CDILLA13.DLL
c:\WINDOWS\CDILLA32.DLL
c:\WINDOWS\CDILLA40.DLL
c:\WINDOWS\CDILLA64.EXE
FILES CHANGED: (1)
c:\WINDOWS\APPLOG\APPLOG.ind

NOTE:
When you use the Start Settings Add/Remove to uninstall the C-Dilla License Management System
you get a popup box telling you this software allows you to remove C-dilla decryption and decompression
driver, but warns you that removing this software (c-dilla) may prevent other products from working correctly.
Another popup box askes you to select the protected product, in the case of DemoShield it was a number
if you had more than 1 product and you didn't know the product number, which of course you are never told,
then you could be faced with the choice of making a guess, or my opinion, their choice, cancel out of the
uninstall and leave it alone, to do it's job monitoring your activities...
BACK
PacketStorm Security Site
Index About Future C-Dilla Links page Contact Us!
News Pages - 1 2 3 4 5 6 7 8 9