Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\Бэкап реестра.lnk
- '%WINDIR%\Erdnt\ERUNT.EXE' %WINDIR%\ERDNT\#Date# sysreg curuser otherusers /noprogresswindow /days:14
- '%WINDIR%\Erdnt\AUTOBACK.EXE' %WINDIR%\ERDNT\#Date# sysreg curuser otherusers /noprogresswindow /days:14
- %WINDIR%\Erdnt\10-29-2014\Users\00000001\NTUSER.DAT
- %WINDIR%\Erdnt\10-29-2014\Users\00000002\UsrClass.dat
- %WINDIR%\Erdnt\10-29-2014\Users\00000003\NTUSER.DAT
- %WINDIR%\Erdnt\10-29-2014\system
- %WINDIR%\Erdnt\10-29-2014\default
- %WINDIR%\Erdnt\10-29-2014\SAM
- %WINDIR%\Erdnt\10-29-2014\ERDNT.EXE
- %WINDIR%\Erdnt\10-29-2014\ERDNTWIN.LOC
- %WINDIR%\Erdnt\10-29-2014\ERDNTDOS.LOC
- %WINDIR%\Erdnt\10-29-2014\Users\00000004\UsrClass.dat
- %WINDIR%\Erdnt\10-29-2014\Users\00000005\NTUSER.DAT
- %WINDIR%\Erdnt\10-29-2014\Users\00000006\UsrClass.dat
- %WINDIR%\Erdnt\ERDNTDOS.LOC
- %WINDIR%\Erdnt\ERDNTWIN.LOC
- %WINDIR%\Erdnt\ERUNT.LOC
- %WINDIR%\Erdnt\AUTOBACK.EXE
- %WINDIR%\Erdnt\NTREGOPT.EXE
- %WINDIR%\Erdnt\ERDNT.E_E
- %WINDIR%\Erdnt\10-29-2014\ERDNT.INF
- %WINDIR%\Erdnt\10-29-2014\ERDNT.CON
- %WINDIR%\Erdnt\10-29-2014\software
- %WINDIR%\Erdnt\NTREGOPT.LOC
- %WINDIR%\Erdnt\ERUNT.EXE
- %WINDIR%\Erdnt\10-29-2014\SECURITY
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''