Техническая информация
- [<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'XO1XADpO01' = '"<Полный путь к файлу>"'
- <Имя диска съемного носителя>:\correct.avi
- <Имя диска съемного носителя>:\restore-my-files.txt
- <Имя диска съемного носителя>:\dialmap.bmp
- <Имя диска съемного носителя>:\dashborder_120.bmp
- <Имя диска съемного носителя>:\dashborder_144.bmp
- <Имя диска съемного носителя>:\dial.bmp
- <Имя диска съемного носителя>:\coffee.bmp
- <Имя диска съемного носителя>:\testcertificate.cer
- <Имя диска съемного носителя>:\sdkfailsafeemulator.cer
- <Имя диска съемного носителя>:\contoso_1.cer
- <Имя диска съемного носителя>:\pmd.cer
- <Имя диска съемного носителя>:\contoso.cer
- <Имя диска съемного носителя>:\testee.cer
- <Имя диска съемного носителя>:\hanni_umami_chapter.doc
- firefox.exe
- D:\restore-my-files.txt
- C:\far2\addons\colors\custom_highlighting\restore-my-files.txt
- C:\far2\addons\colors\default_highlighting\restore-my-files.txt
- C:\far2\addons\colors\restore-my-files.txt
- C:\far2\addons\restore-my-files.txt
- C:\far2\addons\macros\restore-my-files.txt
- C:\far2\addons\setup\restore-my-files.txt
- C:\far2\addons\shell\restore-my-files.txt
- C:\far2\addons\xlat\restore-my-files.txt
- C:\far2\addons\xlat\russian\restore-my-files.txt
- C:\far2\restore-my-files.txt
- C:\far2\documentation\eng\restore-my-files.txt
- '<LOCALNET>.84.254':445
- '<LOCALNET>.84.141':135
- '<LOCALNET>.84.26':445
- '<LOCALNET>.84.129':135
- '<LOCALNET>.84.27':445
- '<LOCALNET>.84.28':445
- '<LOCALNET>.84.29':445
- '<LOCALNET>.84.30':445
- '<LOCALNET>.84.31':445
- '<LOCALNET>.84.32':445
- '<LOCALNET>.84.153':135
- '<LOCALNET>.84.154':135
- '<LOCALNET>.84.155':135
- '<LOCALNET>.84.139':135
- '<LOCALNET>.84.140':135
- '<LOCALNET>.84.142':135
- '<LOCALNET>.84.24':445
- '<LOCALNET>.84.143':135
- '<LOCALNET>.84.144':135
- '<LOCALNET>.84.145':135
- '<LOCALNET>.84.146':135
- '<LOCALNET>.84.147':135
- '<LOCALNET>.84.148':135
- '<LOCALNET>.84.149':135
- '<LOCALNET>.84.150':135
- '<LOCALNET>.84.151':135
- '<LOCALNET>.84.152':135
- '<LOCALNET>.84.138':135
- '<LOCALNET>.84.52':445
- '<LOCALNET>.84.23':445
- '<LOCALNET>.84.10':445
- '<LOCALNET>.84.17':445
- '<LOCALNET>.84.137':135
- '<LOCALNET>.84.11':445
- '<LOCALNET>.84.12':445
- '<LOCALNET>.84.13':445
- '<LOCALNET>.84.14':445
- '<LOCALNET>.84.15':445
- '<LOCALNET>.84.130':135
- '<LOCALNET>.84.131':135
- '<LOCALNET>.84.132':135
- '<LOCALNET>.84.133':135
- '<LOCALNET>.84.134':135
- '<LOCALNET>.84.135':135
- '<LOCALNET>.84.136':135
- '<LOCALNET>.84.33':445
- '<LOCALNET>.84.34':445
- '<LOCALNET>.84.22':445
- '<LOCALNET>.84.19':445
- '<LOCALNET>.84.20':445
- '<LOCALNET>.84.120':135
- '<LOCALNET>.84.121':135
- '<LOCALNET>.84.122':135
- '<LOCALNET>.84.123':135
- '<LOCALNET>.84.124':135
- '<LOCALNET>.84.125':135
- '<LOCALNET>.84.126':135
- '<LOCALNET>.84.127':135
- '<LOCALNET>.84.128':135
- '<LOCALNET>.84.21':445
- '<LOCALNET>.84.18':445
- '<LOCALNET>.84.25':445
- '<LOCALNET>.84.35':445
- '<LOCALNET>.84.36':445
- '<LOCALNET>.84.9':445
- '<LOCALNET>.84.74':445
- '<LOCALNET>.84.164':135
- '<LOCALNET>.84.165':135
- '<LOCALNET>.84.63':445
- '<LOCALNET>.84.64':445
- '<LOCALNET>.84.65':445
- '<LOCALNET>.84.66':445
- '<LOCALNET>.84.67':445
- '<LOCALNET>.84.68':445
- '<LOCALNET>.84.69':445
- '<LOCALNET>.84.70':445
- '<LOCALNET>.84.71':445
- '<LOCALNET>.84.161':135
- '<LOCALNET>.84.72':445
- '<LOCALNET>.84.73':445
- '<LOCALNET>.84.75':445
- '<LOCALNET>.84.76':445
- '<LOCALNET>.84.77':445
- '<LOCALNET>.84.78':445
- '<LOCALNET>.84.79':445
- '<LOCALNET>.84.80':445
- '<LOCALNET>.84.81':445
- '<LOCALNET>.84.82':445
- '<LOCALNET>.84.83':445
- '<LOCALNET>.84.84':445
- '<LOCALNET>.84.85':445
- '<LOCALNET>.84.86':445
- '<LOCALNET>.84.162':135
- '<LOCALNET>.84.88':445
- '<LOCALNET>.84.159':135
- '<LOCALNET>.84.157':135
- '<LOCALNET>.84.37':445
- '<LOCALNET>.84.160':135
- '<LOCALNET>.84.38':445
- '<LOCALNET>.84.39':445
- '<LOCALNET>.84.40':445
- '<LOCALNET>.84.41':445
- '<LOCALNET>.84.42':445
- '<LOCALNET>.84.43':445
- '<LOCALNET>.84.44':445
- '<LOCALNET>.84.45':445
- '<LOCALNET>.84.46':445
- '<LOCALNET>.84.47':445
- '<LOCALNET>.84.48':445
- '<LOCALNET>.84.158':135
- '<LOCALNET>.84.49':445
- '<LOCALNET>.84.51':445
- '<LOCALNET>.84.163':135
- '<LOCALNET>.84.53':445
- '<LOCALNET>.84.54':445
- '<LOCALNET>.84.55':445
- '<LOCALNET>.84.56':445
- '<LOCALNET>.84.57':445
- '<LOCALNET>.84.58':445
- '<LOCALNET>.84.59':445
- '<LOCALNET>.84.60':445
- '<LOCALNET>.84.61':445
- '<LOCALNET>.84.62':445
- '<LOCALNET>.84.156':135
- '<LOCALNET>.84.50':445
- '<LOCALNET>.84.87':445
- '<LOCALNET>.84.8':445
- '<LOCALNET>.84.84':135
- '<LOCALNET>.84.34':135
- '<LOCALNET>.84.33':135
- '<LOCALNET>.84.27':135
- '<LOCALNET>.84.28':135
- '<LOCALNET>.84.29':135
- '<LOCALNET>.84.30':135
- '<LOCALNET>.84.31':135
- '<LOCALNET>.84.32':135
- '<LOCALNET>.84.62':135
- '<LOCALNET>.84.61':135
- '<LOCALNET>.84.60':135
- '<LOCALNET>.84.59':135
- '<LOCALNET>.84.58':135
- '<LOCALNET>.84.56':135
- '<LOCALNET>.84.36':135
- '<LOCALNET>.84.55':135
- '<LOCALNET>.84.54':135
- '<LOCALNET>.84.53':135
- '<LOCALNET>.84.43':135
- '<LOCALNET>.84.44':135
- '<LOCALNET>.84.45':135
- '<LOCALNET>.84.46':135
- '<LOCALNET>.84.47':135
- '<LOCALNET>.84.48':135
- '<LOCALNET>.84.49':135
- '<LOCALNET>.84.50':135
- '<LOCALNET>.84.51':135
- '<LOCALNET>.84.57':135
- '<LOCALNET>.84.79':135
- '<LOCALNET>.84.37':135
- '<LOCALNET>.84.7':135
- '<LOCALNET>.84.0':135
- '<LOCALNET>.84.1':135
- '<LOCALNET>.84.2':135
- '<LOCALNET>.84.3':135
- '<LOCALNET>.84.4':135
- '<LOCALNET>.84.17':135
- '<LOCALNET>.84.18':135
- '<LOCALNET>.84.19':135
- '<LOCALNET>.84.20':135
- '<LOCALNET>.84.21':135
- '<LOCALNET>.84.22':135
- '<LOCALNET>.84.23':135
- '<LOCALNET>.84.52':135
- '<LOCALNET>.84.35':135
- '<LOCALNET>.84.26':135
- '<LOCALNET>.84.8':135
- '<LOCALNET>.84.9':135
- '<LOCALNET>.84.10':135
- '<LOCALNET>.84.11':135
- '<LOCALNET>.84.12':135
- '<LOCALNET>.84.13':135
- '<LOCALNET>.84.14':135
- '<LOCALNET>.84.15':135
- '<LOCALNET>.84.42':135
- '<LOCALNET>.84.41':135
- '<LOCALNET>.84.40':135
- '<LOCALNET>.84.39':135
- '<LOCALNET>.84.25':135
- '<LOCALNET>.84.38':135
- '<LOCALNET>.84.78':135
- '<LOCALNET>.84.80':135
- '<LOCALNET>.84.186':135
- '<LOCALNET>.84.83':135
- '<LOCALNET>.84.97':135
- '<LOCALNET>.84.0':445
- '<LOCALNET>.84.1':445
- '<LOCALNET>.84.2':445
- '<LOCALNET>.84.3':445
- '<LOCALNET>.84.4':445
- '<LOCALNET>.84.98':135
- '<LOCALNET>.84.99':135
- '<LOCALNET>.84.100':135
- '<LOCALNET>.84.101':135
- '<LOCALNET>.84.102':135
- '<LOCALNET>.84.103':135
- '<LOCALNET>.84.119':135
- '<LOCALNET>.84.118':135
- '<LOCALNET>.84.7':445
- '<LOCALNET>.84.86':135
- '<LOCALNET>.84.87':135
- '<LOCALNET>.84.88':135
- '<LOCALNET>.84.89':135
- '<LOCALNET>.84.90':135
- '<LOCALNET>.84.91':135
- '<LOCALNET>.84.92':135
- '<LOCALNET>.84.93':135
- '<LOCALNET>.84.94':135
- '<LOCALNET>.84.95':135
- '<LOCALNET>.84.96':135
- '<LOCALNET>.84.5':445
- '<LOCALNET>.84.85':135
- '<LOCALNET>.84.6':445
- '<LOCALNET>.84.117':135
- '<LOCALNET>.84.65':135
- '<LOCALNET>.84.66':135
- '<LOCALNET>.84.82':135
- '<LOCALNET>.84.77':135
- '<LOCALNET>.84.76':135
- '<LOCALNET>.84.75':135
- '<LOCALNET>.84.74':135
- '<LOCALNET>.84.73':135
- '<LOCALNET>.84.72':135
- '<LOCALNET>.84.71':135
- '<LOCALNET>.84.70':135
- '<LOCALNET>.84.69':135
- '<LOCALNET>.84.68':135
- '<LOCALNET>.84.67':135
- '<LOCALNET>.84.81':135
- '<LOCALNET>.84.116':135
- '<LOCALNET>.84.115':135
- '<LOCALNET>.84.63':135
- '<LOCALNET>.84.104':135
- '<LOCALNET>.84.105':135
- '<LOCALNET>.84.106':135
- '<LOCALNET>.84.107':135
- '<LOCALNET>.84.108':135
- '<LOCALNET>.84.109':135
- '<LOCALNET>.84.110':135
- '<LOCALNET>.84.111':135
- '<LOCALNET>.84.112':135
- '<LOCALNET>.84.113':135
- '<LOCALNET>.84.114':135
- '<LOCALNET>.84.64':135
- '<LOCALNET>.84.89':445
- '<LOCALNET>.84.90':445
- '<LOCALNET>.84.91':445
- '<LOCALNET>.84.189':445
- '<LOCALNET>.84.190':445
- '<LOCALNET>.84.191':445
- '<LOCALNET>.84.192':445
- '<LOCALNET>.84.193':445
- '<LOCALNET>.84.194':445
- '<LOCALNET>.84.195':445
- '<LOCALNET>.84.238':135
- '<LOCALNET>.84.196':445
- '<LOCALNET>.84.197':445
- '<LOCALNET>.84.198':445
- '<LOCALNET>.84.199':445
- '<LOCALNET>.84.200':445
- '<LOCALNET>.84.237':135
- '<LOCALNET>.84.185':445
- '<LOCALNET>.84.236':135
- '<LOCALNET>.84.235':135
- '<LOCALNET>.84.234':135
- '<LOCALNET>.84.230':135
- '<LOCALNET>.84.231':135
- '<LOCALNET>.84.232':135
- '<LOCALNET>.84.233':135
- '<LOCALNET>.84.202':445
- '<LOCALNET>.84.203':445
- '<LOCALNET>.84.204':445
- '<LOCALNET>.84.205':445
- '<LOCALNET>.84.187':445
- '<LOCALNET>.84.201':445
- '<LOCALNET>.84.171':445
- '<LOCALNET>.84.184':445
- '<LOCALNET>.84.174':445
- '<LOCALNET>.84.175':445
- '<LOCALNET>.84.221':135
- '<LOCALNET>.84.222':135
- '<LOCALNET>.84.223':135
- '<LOCALNET>.84.224':135
- '<LOCALNET>.84.225':135
- '<LOCALNET>.84.226':135
- '<LOCALNET>.84.227':135
- '<LOCALNET>.84.228':135
- '<LOCALNET>.84.229':135
- '<LOCALNET>.84.219':135
- '<LOCALNET>.84.206':445
- '<LOCALNET>.84.218':135
- '<LOCALNET>.84.186':445
- '<LOCALNET>.84.215':135
- '<LOCALNET>.84.214':135
- '<LOCALNET>.84.213':135
- '<LOCALNET>.84.212':135
- '<LOCALNET>.84.176':445
- '<LOCALNET>.84.177':445
- '<LOCALNET>.84.178':445
- '<LOCALNET>.84.179':445
- '<LOCALNET>.84.180':445
- '<LOCALNET>.84.181':445
- '<LOCALNET>.84.182':445
- '<LOCALNET>.84.183':445
- '<LOCALNET>.84.217':135
- '<LOCALNET>.84.207':445
- '<LOCALNET>.84.173':445
- '<LOCALNET>.84.208':445
- '<LOCALNET>.84.209':445
- '<LOCALNET>.84.232':445
- '<LOCALNET>.84.172':445
- '<LOCALNET>.84.234':445
- '<LOCALNET>.84.235':445
- '<LOCALNET>.84.236':445
- '<LOCALNET>.84.237':445
- '<LOCALNET>.84.252':135
- '<LOCALNET>.84.251':135
- '<LOCALNET>.84.250':135
- '<LOCALNET>.84.249':135
- '<LOCALNET>.84.254':135
- '<LOCALNET>.84.253':135
- '<LOCALNET>.84.238':445
- '<LOCALNET>.84.231':445
- '<LOCALNET>.84.230':445
- '<LOCALNET>.84.239':445
- '<LOCALNET>.84.242':445
- '<LOCALNET>.84.243':445
- '<LOCALNET>.84.244':445
- '<LOCALNET>.84.245':445
- '<LOCALNET>.84.246':445
- '<LOCALNET>.84.247':445
- '<LOCALNET>.84.248':445
- '<LOCALNET>.84.249':445
- '<LOCALNET>.84.250':445
- '<LOCALNET>.84.251':445
- '<LOCALNET>.84.252':445
- '<LOCALNET>.84.253':445
- '<LOCALNET>.84.240':445
- '<LOCALNET>.84.241':445
- '<LOCALNET>.84.216':135
- '<LOCALNET>.84.228':445
- '<LOCALNET>.84.243':135
- '<LOCALNET>.84.244':135
- '<LOCALNET>.84.211':445
- '<LOCALNET>.84.212':445
- '<LOCALNET>.84.213':445
- '<LOCALNET>.84.214':445
- '<LOCALNET>.84.215':445
- '<LOCALNET>.84.216':445
- '<LOCALNET>.84.217':445
- '<LOCALNET>.84.218':445
- '<LOCALNET>.84.219':445
- '<LOCALNET>.84.220':445
- '<LOCALNET>.84.246':135
- '<LOCALNET>.84.245':135
- '<LOCALNET>.84.210':445
- '<LOCALNET>.84.229':445
- '<LOCALNET>.84.233':445
- '<LOCALNET>.84.241':135
- '<LOCALNET>.84.240':135
- '<LOCALNET>.84.239':135
- '<LOCALNET>.84.248':135
- '<LOCALNET>.84.247':135
- '<LOCALNET>.84.221':445
- '<LOCALNET>.84.222':445
- '<LOCALNET>.84.223':445
- '<LOCALNET>.84.224':445
- '<LOCALNET>.84.225':445
- '<LOCALNET>.84.226':445
- '<LOCALNET>.84.227':445
- '<LOCALNET>.84.242':135
- '<LOCALNET>.84.188':445
- '<LOCALNET>.84.170':445
- '<LOCALNET>.84.104':445
- '<LOCALNET>.84.117':445
- '<LOCALNET>.84.105':445
- '<LOCALNET>.84.106':445
- '<LOCALNET>.84.107':445
- '<LOCALNET>.84.108':445
- '<LOCALNET>.84.109':445
- '<LOCALNET>.84.110':445
- '<LOCALNET>.84.111':445
- '<LOCALNET>.84.112':445
- '<LOCALNET>.84.113':445
- '<LOCALNET>.84.114':445
- '<LOCALNET>.84.115':445
- '<LOCALNET>.84.116':445
- '<LOCALNET>.84.169':445
- '<LOCALNET>.84.103':445
- '<LOCALNET>.84.193':135
- '<LOCALNET>.84.120':445
- '<LOCALNET>.84.121':445
- '<LOCALNET>.84.122':445
- '<LOCALNET>.84.123':445
- '<LOCALNET>.84.124':445
- '<LOCALNET>.84.125':445
- '<LOCALNET>.84.126':445
- '<LOCALNET>.84.127':445
- '<LOCALNET>.84.128':445
- '<LOCALNET>.84.190':135
- '<LOCALNET>.84.191':135
- '<LOCALNET>.84.192':135
- '<LOCALNET>.84.119':445
- '<LOCALNET>.84.118':445
- '<LOCALNET>.84.102':445
- '<LOCALNET>.84.185':135
- '<LOCALNET>.84.184':135
- '<LOCALNET>.84.93':445
- '<LOCALNET>.84.94':445
- '<LOCALNET>.84.95':445
- '<LOCALNET>.84.96':445
- '<LOCALNET>.84.176':135
- '<LOCALNET>.84.177':135
- '<LOCALNET>.84.178':135
- '<LOCALNET>.84.179':135
- '<LOCALNET>.84.180':135
- '<LOCALNET>.84.181':135
- '<LOCALNET>.84.182':135
- '<LOCALNET>.84.183':135
- '<LOCALNET>.84.92':445
- '<LOCALNET>.84.101':445
- '<LOCALNET>.84.100':445
- '<LOCALNET>.84.166':135
- '<LOCALNET>.84.167':135
- '<LOCALNET>.84.168':135
- '<LOCALNET>.84.169':135
- '<LOCALNET>.84.170':135
- '<LOCALNET>.84.171':135
- '<LOCALNET>.84.172':135
- '<LOCALNET>.84.173':135
- '<LOCALNET>.84.174':135
- '<LOCALNET>.84.175':135
- '<LOCALNET>.84.98':445
- '<LOCALNET>.84.99':445
- '<LOCALNET>.84.97':445
- '<LOCALNET>.84.24':135
- '<LOCALNET>.84.6':135
- '<LOCALNET>.84.129':445
- '<LOCALNET>.84.211':135
- '<LOCALNET>.84.153':445
- '<LOCALNET>.84.154':445
- '<LOCALNET>.84.155':445
- '<LOCALNET>.84.156':445
- '<LOCALNET>.84.157':445
- '<LOCALNET>.84.158':445
- '<LOCALNET>.84.159':445
- '<LOCALNET>.84.160':445
- '<LOCALNET>.84.161':445
- '<LOCALNET>.84.162':445
- '<LOCALNET>.84.163':445
- '<LOCALNET>.84.164':445
- '<LOCALNET>.84.195':135
- '<LOCALNET>.84.151':445
- '<LOCALNET>.84.210':135
- '<LOCALNET>.84.209':135
- '<LOCALNET>.84.208':135
- '<LOCALNET>.84.207':135
- '<LOCALNET>.84.206':135
- '<LOCALNET>.84.205':135
- '<LOCALNET>.84.204':135
- '<LOCALNET>.84.203':135
- '<LOCALNET>.84.202':135
- '<LOCALNET>.84.220':135
- '<LOCALNET>.84.166':445
- '<LOCALNET>.84.167':445
- '<LOCALNET>.84.168':445
- '<LOCALNET>.84.165':445
- '<LOCALNET>.84.194':135
- '<LOCALNET>.84.150':445
- '<LOCALNET>.84.147':445
- '<LOCALNET>.84.149':445
- '<LOCALNET>.84.196':135
- '<LOCALNET>.84.197':135
- '<LOCALNET>.84.198':135
- '<LOCALNET>.84.199':135
- '<LOCALNET>.84.200':135
- '<LOCALNET>.84.201':135
- '<LOCALNET>.84.130':445
- '<LOCALNET>.84.131':445
- '<LOCALNET>.84.132':445
- '<LOCALNET>.84.133':445
- '<LOCALNET>.84.134':445
- '<LOCALNET>.84.135':445
- '<LOCALNET>.84.148':445
- '<LOCALNET>.84.136':445
- '<LOCALNET>.84.152':445
- '<LOCALNET>.84.187':135
- '<LOCALNET>.84.188':135
- '<LOCALNET>.84.189':135
- '<LOCALNET>.84.138':445
- '<LOCALNET>.84.139':445
- '<LOCALNET>.84.140':445
- '<LOCALNET>.84.141':445
- '<LOCALNET>.84.142':445
- '<LOCALNET>.84.143':445
- '<LOCALNET>.84.144':445
- '<LOCALNET>.84.145':445
- '<LOCALNET>.84.146':445
- '<LOCALNET>.84.137':445
- '<LOCALNET>.84.5':135
- '<SYSTEM32>\cmd.exe' /c vssadmin delete shadows /all /quiet & wmic shadowcopy delete & bcdedit /set {default} bootstatuspolicy ignoreallfailures & bcdedit /set {default} recoveryenabled no & wbadmin delete catalog ...' (со скрытым окном)
- '<SYSTEM32>\cmd.exe' /c vssadmin delete shadows /all /quiet & wmic shadowcopy delete & bcdedit /set {default} bootstatuspolicy ignoreallfailures & bcdedit /set {default} recoveryenabled no & wbadmin delete catalog ...