Technical Information
To ensure autorun and distribution:
Creates or modifies the following files:
- %ALLUSERSPROFILE%\Start Menu\Programs\Startup\@_RESTORE_PC_1.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Startup\@_RESTORE_PC_2.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Startup\@_RESTORE_PC_3.txt
Creates the following files on removable media:
- <Drive name for removable media>:\@_RESTORE_PC_1.txt
- <Drive name for removable media>:\@_RESTORE_PC_2.txt
- <Drive name for removable media>:\@_RESTORE_PC_3.txt
Modifies master boot record (MBR).
Malicious functions:
To complicate detection of its presence in the operating system,
blocks execution of the following system utilities:
- Windows Task Manager (Taskmgr)
Modifies file system:
Creates the following files:
- C:\@_RESTORE_PC_1.txt
- C:\Documents and Settings\Default User\Cookies\@_RESTORE_PC_1.txt
- C:\Documents and Settings\Default User\Cookies\@_RESTORE_PC_2.txt
- C:\Documents and Settings\Default User\Cookies\@_RESTORE_PC_3.txt
- C:\Documents and Settings\Default User\Desktop\@_RESTORE_PC_1.txt
- C:\Documents and Settings\Default User\Desktop\@_RESTORE_PC_2.txt
- C:\Documents and Settings\Default User\Desktop\@_RESTORE_PC_3.txt
- C:\Documents and Settings\Default User\Favorites\@_RESTORE_PC_1.txt
- C:\Documents and Settings\Default User\Favorites\@_RESTORE_PC_2.txt
- C:\Documents and Settings\Default User\Favorites\@_RESTORE_PC_3.txt
- C:\Documents and Settings\Default User\Local Settings\@_RESTORE_PC_1.txt
- C:\Documents and Settings\Default User\Local Settings\@_RESTORE_PC_2.txt
- C:\Documents and Settings\Default User\Application Data\Microsoft\Internet Explorer\@_RESTORE_PC_2.txt
- C:\Documents and Settings\Default User\Local Settings\@_RESTORE_PC_3.txt
- C:\Documents and Settings\Default User\Local Settings\Application Data\@_RESTORE_PC_2.txt
- C:\Documents and Settings\Default User\Local Settings\Application Data\@_RESTORE_PC_3.txt
- C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\@_RESTORE_PC_1.txt
- C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\@_RESTORE_PC_2.txt
- C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\@_RESTORE_PC_3.txt
- C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Media Player\@_RESTORE_PC_1.txt
- C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Media Player\@_RESTORE_PC_2.txt
- C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Media Player\@_RESTORE_PC_3.txt
- C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\@_RESTORE_PC_1.txt
- C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\@_RESTORE_PC_2.txt
- C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\@_RESTORE_PC_3.txt
- C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\9.0\@_RESTORE_PC_1.txt
- C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\CTLs\@_RESTORE_PC_1.txt
- C:\Documents and Settings\Default User\Local Settings\Application Data\@_RESTORE_PC_1.txt
- C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\CTLs\@_RESTORE_PC_3.txt
- C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\CTLs\@_RESTORE_PC_2.txt
- C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\CRLs\@_RESTORE_PC_3.txt
- C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\CRLs\@_RESTORE_PC_2.txt
- %ALLUSERSPROFILE%\Templates\@_RESTORE_PC_2.txt
- %ALLUSERSPROFILE%\Templates\@_RESTORE_PC_3.txt
- C:\Documents and Settings\Default User\@_RESTORE_PC_1.txt
- C:\Documents and Settings\Default User\@_RESTORE_PC_2.txt
- C:\Documents and Settings\Default User\@_RESTORE_PC_3.txt
- C:\Documents and Settings\Default User\Application Data\@_RESTORE_PC_1.txt
- C:\Documents and Settings\Default User\Application Data\@_RESTORE_PC_2.txt
- C:\Documents and Settings\Default User\Application Data\@_RESTORE_PC_3.txt
- C:\Documents and Settings\Default User\Application Data\Microsoft\@_RESTORE_PC_1.txt
- C:\Documents and Settings\Default User\Application Data\Microsoft\@_RESTORE_PC_2.txt
- C:\Documents and Settings\Default User\Application Data\Microsoft\@_RESTORE_PC_3.txt
- C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\9.0\@_RESTORE_PC_2.txt
- C:\Documents and Settings\Default User\Application Data\Microsoft\Internet Explorer\@_RESTORE_PC_1.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Games\@_RESTORE_PC_2.txt
- C:\Documents and Settings\Default User\Application Data\Microsoft\Internet Explorer\@_RESTORE_PC_3.txt
- C:\Documents and Settings\Default User\Application Data\Microsoft\Media Player\@_RESTORE_PC_2.txt
- C:\Documents and Settings\Default User\Application Data\Microsoft\Media Player\@_RESTORE_PC_3.txt
- C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\@_RESTORE_PC_1.txt
- C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\@_RESTORE_PC_2.txt
- C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\@_RESTORE_PC_3.txt
- C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\@_RESTORE_PC_1.txt
- C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\@_RESTORE_PC_2.txt
- C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\@_RESTORE_PC_3.txt
- C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\Certificates\@_RESTORE_PC_1.txt
- C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\Certificates\@_RESTORE_PC_2.txt
- C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\Certificates\@_RESTORE_PC_3.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Games\@_RESTORE_PC_3.txt
- C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\CRLs\@_RESTORE_PC_1.txt
- C:\Documents and Settings\Default User\Application Data\Microsoft\Media Player\@_RESTORE_PC_1.txt
- %ALLUSERSPROFILE%\Templates\@_RESTORE_PC_1.txt
- C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\9.0\@_RESTORE_PC_3.txt
- C:\Documents and Settings\Default User\Local Settings\History\History.IE5\@_RESTORE_PC_1.txt
- C:\Documents and Settings\Default User\PrintHood\@_RESTORE_PC_3.txt
- C:\Documents and Settings\Default User\Recent\@_RESTORE_PC_1.txt
- C:\Documents and Settings\Default User\Recent\@_RESTORE_PC_2.txt
- C:\Documents and Settings\Default User\Recent\@_RESTORE_PC_3.txt
- C:\Documents and Settings\Default User\SendTo\@_RESTORE_PC_1.txt
- C:\Documents and Settings\Default User\SendTo\@_RESTORE_PC_2.txt
- C:\Documents and Settings\Default User\SendTo\@_RESTORE_PC_3.txt
- C:\Documents and Settings\Default User\Start Menu\@_RESTORE_PC_1.txt
- C:\Documents and Settings\Default User\Start Menu\@_RESTORE_PC_2.txt
- C:\Documents and Settings\Default User\Start Menu\@_RESTORE_PC_3.txt
- C:\Documents and Settings\Default User\Start Menu\Programs\@_RESTORE_PC_1.txt
- C:\Documents and Settings\Default User\Start Menu\Programs\@_RESTORE_PC_2.txt
- C:\Documents and Settings\Default User\NetHood\@_RESTORE_PC_2.txt
- C:\Documents and Settings\Default User\Start Menu\Programs\@_RESTORE_PC_3.txt
- C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\@_RESTORE_PC_2.txt
- C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\@_RESTORE_PC_3.txt
- C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Accessibility\@_RESTORE_PC_1.txt
- C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Accessibility\@_RESTORE_PC_2.txt
- C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Accessibility\@_RESTORE_PC_3.txt
- C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Entertainment\@_RESTORE_PC_1.txt
- C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Entertainment\@_RESTORE_PC_2.txt
- C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Entertainment\@_RESTORE_PC_3.txt
- C:\Documents and Settings\Default User\Start Menu\Programs\Startup\@_RESTORE_PC_1.txt
- C:\Documents and Settings\Default User\Start Menu\Programs\Startup\@_RESTORE_PC_2.txt
- C:\Documents and Settings\Default User\Start Menu\Programs\Startup\@_RESTORE_PC_3.txt
- C:\Documents and Settings\Default User\Templates\@_RESTORE_PC_1.txt
- C:\Documents and Settings\Default User\PrintHood\@_RESTORE_PC_1.txt
- C:\Documents and Settings\Default User\PrintHood\@_RESTORE_PC_2.txt
- C:\Documents and Settings\Default User\NetHood\@_RESTORE_PC_3.txt
- C:\Documents and Settings\Default User\NetHood\@_RESTORE_PC_1.txt
- %ALLUSERSPROFILE%\Documents\My Music\Sample Music\@_RESTORE_PC_1.txt
- C:\Documents and Settings\Default User\Local Settings\History\History.IE5\@_RESTORE_PC_2.txt
- C:\Documents and Settings\Default User\Local Settings\History\History.IE5\@_RESTORE_PC_3.txt
- C:\Documents and Settings\Default User\Local Settings\Temp\@_RESTORE_PC_1.txt
- C:\Documents and Settings\Default User\Local Settings\Temp\@_RESTORE_PC_2.txt
- C:\Documents and Settings\Default User\Local Settings\Temp\@_RESTORE_PC_3.txt
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\@_RESTORE_PC_1.txt
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\@_RESTORE_PC_2.txt
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\@_RESTORE_PC_3.txt
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\@_RESTORE_PC_1.txt
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\@_RESTORE_PC_2.txt
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\@_RESTORE_PC_3.txt
- C:\Documents and Settings\Default User\Local Settings\History\@_RESTORE_PC_1.txt
- C:\Documents and Settings\Default User\Local Settings\History\@_RESTORE_PC_3.txt
- C:\Documents and Settings\Default User\Local Settings\History\@_RESTORE_PC_2.txt
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\2VAZY7AN\@_RESTORE_PC_1.txt
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\@_RESTORE_PC_2.txt
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\@_RESTORE_PC_3.txt
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\U98D4X8H\@_RESTORE_PC_1.txt
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\U98D4X8H\@_RESTORE_PC_2.txt
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\U98D4X8H\@_RESTORE_PC_3.txt
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\YPORKZYZ\@_RESTORE_PC_1.txt
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\YPORKZYZ\@_RESTORE_PC_2.txt
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\YPORKZYZ\@_RESTORE_PC_3.txt
- C:\Documents and Settings\Default User\My Documents\@_RESTORE_PC_1.txt
- C:\Documents and Settings\Default User\My Documents\@_RESTORE_PC_2.txt
- C:\Documents and Settings\Default User\My Documents\@_RESTORE_PC_3.txt
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\2VAZY7AN\@_RESTORE_PC_2.txt
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\2VAZY7AN\@_RESTORE_PC_3.txt
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\@_RESTORE_PC_1.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Games\@_RESTORE_PC_1.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Administrative Tools\@_RESTORE_PC_3.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Administrative Tools\@_RESTORE_PC_2.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\RSA\S-1-5-18\@_RESTORE_PC_3.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\Dr Watson\@_RESTORE_PC_1.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\Dr Watson\@_RESTORE_PC_2.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\Dr Watson\@_RESTORE_PC_3.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\HTML Help\@_RESTORE_PC_1.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\HTML Help\@_RESTORE_PC_2.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\HTML Help\@_RESTORE_PC_3.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\Media Index\@_RESTORE_PC_1.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\Media Index\@_RESTORE_PC_2.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\Media Index\@_RESTORE_PC_3.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\Media Player\@_RESTORE_PC_1.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\Media Player\@_RESTORE_PC_2.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\@_RESTORE_PC_2.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\Media Player\@_RESTORE_PC_3.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\Network\@_RESTORE_PC_2.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\Network\@_RESTORE_PC_3.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\Network\Connections\@_RESTORE_PC_1.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\Network\Connections\@_RESTORE_PC_2.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\Network\Connections\@_RESTORE_PC_3.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\Network\Connections\Cm\@_RESTORE_PC_1.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\Network\Connections\Cm\@_RESTORE_PC_2.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\Network\Connections\Cm\@_RESTORE_PC_3.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\Network\Connections\Pbk\@_RESTORE_PC_1.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\Network\Connections\Pbk\@_RESTORE_PC_2.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\Network\Connections\Pbk\@_RESTORE_PC_3.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\RSA\MachineKeys\@_RESTORE_PC_3.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\RSA\MachineKeys\@_RESTORE_PC_2.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\RSA\S-1-5-18\@_RESTORE_PC_2.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\RSA\MachineKeys\@_RESTORE_PC_1.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\RSA\@_RESTORE_PC_3.txt
- C:\@_RESTORE_PC_2.txt
- <Current directory>\@_RESTORE_PC_1.txt
- <Current directory>\@_RESTORE_PC_2.txt
- <Current directory>\@_RESTORE_PC_3.txt
- C:\Documents and Settings\@_RESTORE_PC_1.txt
- C:\Documents and Settings\@_RESTORE_PC_2.txt
- C:\Documents and Settings\@_RESTORE_PC_3.txt
- %ALLUSERSPROFILE%\@_RESTORE_PC_1.txt
- %ALLUSERSPROFILE%\@_RESTORE_PC_2.txt
- %ALLUSERSPROFILE%\@_RESTORE_PC_3.txt
- %ALLUSERSPROFILE%\Application Data\@_RESTORE_PC_1.txt
- %ALLUSERSPROFILE%\Application Data\@_RESTORE_PC_2.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\@_RESTORE_PC_1.txt
- %ALLUSERSPROFILE%\Application Data\@_RESTORE_PC_3.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\Network\@_RESTORE_PC_1.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\@_RESTORE_PC_2.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\@_RESTORE_PC_1.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\@_RESTORE_PC_2.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\@_RESTORE_PC_3.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\DSS\@_RESTORE_PC_1.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\DSS\@_RESTORE_PC_2.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\DSS\@_RESTORE_PC_3.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\DSS\MachineKeys\@_RESTORE_PC_1.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\DSS\MachineKeys\@_RESTORE_PC_2.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\DSS\MachineKeys\@_RESTORE_PC_3.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\RSA\@_RESTORE_PC_1.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\RSA\@_RESTORE_PC_2.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\@_RESTORE_PC_1.txt
- C:\@_RESTORE_PC_3.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\@_RESTORE_PC_3.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\RSA\S-1-5-18\@_RESTORE_PC_1.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\@_RESTORE_PC_3.txt
- %ALLUSERSPROFILE%\DRM\@_RESTORE_PC_1.txt
- %ALLUSERSPROFILE%\DRM\@_RESTORE_PC_3.txt
- %ALLUSERSPROFILE%\Favorites\@_RESTORE_PC_1.txt
- %ALLUSERSPROFILE%\Favorites\@_RESTORE_PC_2.txt
- %ALLUSERSPROFILE%\Favorites\@_RESTORE_PC_3.txt
- %ALLUSERSPROFILE%\Start Menu\@_RESTORE_PC_1.txt
- %ALLUSERSPROFILE%\Start Menu\@_RESTORE_PC_2.txt
- %ALLUSERSPROFILE%\Start Menu\@_RESTORE_PC_3.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\@_RESTORE_PC_1.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\@_RESTORE_PC_2.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\@_RESTORE_PC_3.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\@_RESTORE_PC_1.txt
- %ALLUSERSPROFILE%\Documents\My Videos\@_RESTORE_PC_3.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\@_RESTORE_PC_1.txt
- %ALLUSERSPROFILE%\DRM\@_RESTORE_PC_2.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\@_RESTORE_PC_2.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Accessibility\@_RESTORE_PC_3.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Communications\@_RESTORE_PC_1.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Communications\@_RESTORE_PC_2.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Communications\@_RESTORE_PC_3.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Entertainment\@_RESTORE_PC_1.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Entertainment\@_RESTORE_PC_2.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Entertainment\@_RESTORE_PC_3.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\System Tools\@_RESTORE_PC_1.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\System Tools\@_RESTORE_PC_2.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\System Tools\@_RESTORE_PC_3.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Administrative Tools\@_RESTORE_PC_1.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\@_RESTORE_PC_3.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Accessibility\@_RESTORE_PC_1.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Accessibility\@_RESTORE_PC_2.txt
- C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\@_RESTORE_PC_1.txt
- C:\Documents and Settings\Default User\Templates\@_RESTORE_PC_2.txt
- %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\@_RESTORE_PC_3.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\@_RESTORE_PC_3.txt
- %ALLUSERSPROFILE%\Desktop\@_RESTORE_PC_1.txt
- %ALLUSERSPROFILE%\Desktop\@_RESTORE_PC_2.txt
- %ALLUSERSPROFILE%\Desktop\@_RESTORE_PC_3.txt
- %ALLUSERSPROFILE%\Documents\@_RESTORE_PC_1.txt
- %ALLUSERSPROFILE%\Documents\@_RESTORE_PC_2.txt
- %ALLUSERSPROFILE%\Documents\@_RESTORE_PC_3.txt
- %ALLUSERSPROFILE%\Documents\My Music\@_RESTORE_PC_1.txt
- %ALLUSERSPROFILE%\Documents\My Music\@_RESTORE_PC_2.txt
- %ALLUSERSPROFILE%\Documents\My Music\@_RESTORE_PC_3.txt
- %ALLUSERSPROFILE%\Documents\My Music\My Playlists\@_RESTORE_PC_1.txt
- %ALLUSERSPROFILE%\Documents\My Music\My Playlists\@_RESTORE_PC_2.txt
- %ALLUSERSPROFILE%\Documents\My Videos\@_RESTORE_PC_1.txt
- %ALLUSERSPROFILE%\Documents\My Videos\@_RESTORE_PC_2.txt
- %ALLUSERSPROFILE%\Documents\My Music\My Playlists\@_RESTORE_PC_3.txt
- %ALLUSERSPROFILE%\Documents\My Music\Sample Music\@_RESTORE_PC_3.txt
- %ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\@_RESTORE_PC_1.txt
- %ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\@_RESTORE_PC_2.txt
- %ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\@_RESTORE_PC_3.txt
- %ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\0338E140\@_RESTORE_PC_1.txt
- %ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\0338E140\@_RESTORE_PC_2.txt
- %ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\0338E140\@_RESTORE_PC_3.txt
- %ALLUSERSPROFILE%\Documents\My Pictures\@_RESTORE_PC_1.txt
- %ALLUSERSPROFILE%\Documents\My Pictures\@_RESTORE_PC_2.txt
- %ALLUSERSPROFILE%\Documents\My Pictures\@_RESTORE_PC_3.txt
- %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\@_RESTORE_PC_1.txt
- %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\@_RESTORE_PC_2.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\@_RESTORE_PC_2.txt
- %ALLUSERSPROFILE%\Documents\My Music\Sample Music\@_RESTORE_PC_2.txt
- C:\Documents and Settings\Default User\Templates\@_RESTORE_PC_3.txt
