[14/07/2020 - 16:09:17] System Variables [14/07/2020 - 16:09:17] -------------------------------------------------------------------------------- [14/07/2020 - 16:09:17] Use Fallback Backup Method: 1 (0 = No, 1 = Yes) [14/07/2020 - 16:09:17] VSS exe To Use: vss_7_8_2008_2012_64.exe [14/07/2020 - 16:09:17] Windows Drive: C: [14/07/2020 - 16:09:17] Windows Folder: Windows [14/07/2020 - 16:09:17] Windows Path: C:\Windows [14/07/2020 - 16:09:17] Registry File Location: C:\Windows\System32\Config [14/07/2020 - 16:09:17] Current Profile: C:\Users\Clean 3 [14/07/2020 - 16:09:17] Current Profile SID: S-1-5-21-3713633988-380251994-3399691187-1009 [14/07/2020 - 16:09:17] Current Profile Classes: S-1-5-21-3713633988-380251994-3399691187-1009_Classes [14/07/2020 - 16:09:17] Profiles Location: C:\Users [14/07/2020 - 16:09:17] Profiles Location 2: C:\Windows\ServiceProfiles [14/07/2020 - 16:09:17] Local Settings AppData: AppData\Local [14/07/2020 - 16:09:17] Computer Name: LAPTOPONE [14/07/2020 - 16:09:17] OS: Windows 7 Professional (64-bit) [14/07/2020 - 16:09:17] OS Architecture: 64-bit [14/07/2020 - 16:09:17] OS Version: 6.1.7601 [14/07/2020 - 16:09:17] OS Service Pack: Service Pack 1 [14/07/2020 - 16:09:17] -------------------------------------------------------------------------------- [14/07/2020 - 16:09:17] Backup Location: C:\RegBackup\ [14/07/2020 - 16:09:17] Auto Delete Old Backups Enabled, Working... [14/07/2020 - 16:09:17] Delete backups 180 Days or older. Keep at least 5 Backups. [14/07/2020 - 16:09:17] -------------------------------------------------------------------------------- [14/07/2020 - 16:09:17] -------------------------------------------------------------------------------- [14/07/2020 - 16:09:17] Starting Backup... [14/07/2020 - 16:09:17] Files To Backup: [14/07/2020 - 16:09:17] -------------------------------------------------------------------------------- [14/07/2020 - 16:09:17] C:\Windows\System32\Config\components [14/07/2020 - 16:09:17] C:\Windows\System32\Config\default [14/07/2020 - 16:09:17] C:\Windows\System32\Config\sam [14/07/2020 - 16:09:17] C:\Windows\System32\Config\security [14/07/2020 - 16:09:17] C:\Windows\System32\Config\software [14/07/2020 - 16:09:17] C:\Windows\System32\Config\system [14/07/2020 - 16:09:17] C:\Users\Administrator\ntuser.dat [14/07/2020 - 16:09:17] C:\Users\Administrator\AppData\Local\Microsoft\Windows\UsrClass.dat [14/07/2020 - 16:09:17] C:\Users\Back door\ntuser.dat [14/07/2020 - 16:09:17] C:\Users\Back door\AppData\Local\Microsoft\Windows\UsrClass.dat [14/07/2020 - 16:09:17] C:\Users\Clean 3\ntuser.dat [14/07/2020 - 16:09:17] C:\Users\Clean 3\AppData\Local\Microsoft\Windows\UsrClass.dat [14/07/2020 - 16:09:17] C:\Users\Default\ntuser.dat [14/07/2020 - 16:09:17] C:\Users\Hugh Pratt\ntuser.dat [14/07/2020 - 16:09:17] C:\Users\Hugh Pratt\AppData\Local\Microsoft\Windows\UsrClass.dat [14/07/2020 - 16:09:17] C:\Users\TEMP\ntuser.dat [14/07/2020 - 16:09:17] C:\Users\TEMP\AppData\Local\Microsoft\Windows\UsrClass.dat [14/07/2020 - 16:09:17] C:\Windows\ServiceProfiles\LocalService\ntuser.dat [14/07/2020 - 16:09:17] C:\Windows\ServiceProfiles\NetworkService\ntuser.dat [14/07/2020 - 16:09:17] -------------------------------------------------------------------------------- [14/07/2020 - 16:09:17] Backing Up Registry Files Security Descriptors (SDDL): [14/07/2020 - 16:09:17] -------------------------------------------------------------------------------- [14/07/2020 - 16:09:17] "\\?\C:\Users\Administrator\AppData\Local\Microsoft\Windows\UsrClass.dat",1,"O:SYG:SYD:AIAR(A;ID;FA;;;S-1-5-21-3713633988-380251994-3399691187-1009)(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;FA;;;LA)" "\\?\C:\Users\Administrator\AppData\Local\Microsoft\Windows\UsrClass.dat.old",1,"O:SYG:SYD:AIAR(A;ID;FA;;;S-1-5-21-3713633988-380251994-3399691187-1009)(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;FA;;;LA)" "\\?\C:\Users\Administrator\ntuser.dat",1,"O:BAG:S-1-5-21-3713633988-380251994-3399691187-513D:AR(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;FA;;;LA)" "\\?\C:\Users\Administrator\ntuser.dat.old",1,"O:BAG:S-1-5-21-3713633988-380251994-3399691187-513D:AR(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;FA;;;LA)" "\\?\C:\Users\Back door\AppData\Local\Microsoft\Windows\UsrClass.dat",1,"O:SYG:SYD:AIAR(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;FA;;;S-1-5-21-3713633988-380251994-3399691187-1010)(A;ID;FA;;;S-1-5-21-3713633988-380251994-3399691187-1009)" "\\?\C:\Users\Back door\AppData\Local\Microsoft\Windows\UsrClass.dat.old",1,"O:SYG:SYD:AIAR(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;FA;;;S-1-5-21-3713633988-380251994-3399691187-1010)(A;ID;FA;;;S-1-5-21-3713633988-380251994-3399691187-1009)" "\\?\C:\Users\Back door\ntuser.dat",1,"O:S-1-5-21-3713633988-380251994-3399691187-1010G:S-1-5-21-3713633988-380251994-3399691187-513D:AR(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;FA;;;S-1-5-21-3713633988-380251994-3399691187-1010)(A;ID;FA;;;S-1-5-21-3713633988-380251994-3399691187-1009)" "\\?\C:\Users\Back door\ntuser.dat.old",1,"O:S-1-5-21-3713633988-380251994-3399691187-1010G:S-1-5-21-3713633988-380251994-3399691187-513D:AR(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;FA;;;S-1-5-21-3713633988-380251994-3399691187-1010)(A;ID;FA;;;S-1-5-21-3713633988-380251994-3399691187-1009)" "\\?\C:\Users\Clean 3\AppData\Local\Microsoft\Windows\UsrClass.dat",1,"O:SYG:SYD:AR(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;FA;;;S-1-5-21-3713633988-380251994-3399691187-1009)(A;ID;0x1200a9;;;S-1-5-21-3713633988-380251994-3399691187-1011)" "\\?\C:\Users\Clean 3\AppData\Local\Microsoft\Windows\UsrClass.dat.old",1,"O:SYG:SYD:AR(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;FA;;;S-1-5-21-3713633988-380251994-3399691187-1009)(A;ID;0x1200a9;;;S-1-5-21-3713633988-380251994-3399691187-1011)" "\\?\C:\Users\Clean 3\ntuser.dat",1,"O:S-1-5-21-3713633988-380251994-3399691187-1009G:S-1-5-21-3713633988-380251994-3399691187-513D:AR(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;FA;;;S-1-5-21-3713633988-380251994-3399691187-1009)(A;ID;0x1200a9;;;S-1-5-21-3713633988-380251994-3399691187-1011)" "\\?\C:\Users\Clean 3\ntuser.dat.old",1,"O:S-1-5-21-3713633988-380251994-3399691187-1009G:S-1-5-21-3713633988-380251994-3399691187-513D:AR(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;FA;;;S-1-5-21-3713633988-380251994-3399691187-1009)(A;ID;0x1200a9;;;S-1-5-21-3713633988-380251994-3399691187-1011)" "\\?\C:\Users\Default\ntuser.dat",1,"O:SYG:SYD:AIAR(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;0x1200a9;;;BU)(A;ID;0x1200a9;;;WD)" "\\?\C:\Users\Default\ntuser.dat.old",1,"O:SYG:SYD:AIAR(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;0x1200a9;;;BU)(A;ID;0x1200a9;;;WD)" "\\?\C:\Users\Hugh Pratt\AppData\Local\Microsoft\Windows\UsrClass.dat",1,"O:SYG:SYD:AIAR(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;FA;;;S-1-5-21-3713633988-380251994-3399691187-1000)(A;ID;FA;;;S-1-5-21-3713633988-380251994-3399691187-1005)(A;ID;FA;;;S-1-5-21-3713633988-380251994-3399691187-1009)" "\\?\C:\Users\Hugh Pratt\AppData\Local\Microsoft\Windows\UsrClass.dat.old",1,"O:SYG:SYD:AIAR(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;FA;;;S-1-5-21-3713633988-380251994-3399691187-1000)(A;ID;FA;;;S-1-5-21-3713633988-380251994-3399691187-1005)(A;ID;FA;;;S-1-5-21-3713633988-380251994-3399691187-1009)" "\\?\C:\Users\Hugh Pratt\ntuser.dat",1,"O:BAG:S-1-5-21-3713633988-380251994-3399691187-513D:AR(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;FA;;;S-1-5-21-3713633988-380251994-3399691187-1000)(A;ID;FA;;;S-1-5-21-3713633988-380251994-3399691187-1005)(A;ID;FA;;;S-1-5-21-3713633988-380251994-3399691187-1009)" "\\?\C:\Users\Hugh Pratt\ntuser.dat.old",1,"O:BAG:S-1-5-21-3713633988-380251994-3399691187-513D:AR(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;FA;;;S-1-5-21-3713633988-380251994-3399691187-1000)(A;ID;FA;;;S-1-5-21-3713633988-380251994-3399691187-1005)(A;ID;FA;;;S-1-5-21-3713633988-380251994-3399691187-1009)" "\\?\C:\Users\TEMP\AppData\Local\Microsoft\Windows\UsrClass.dat",1,"O:SYG:SYD:AIAR(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;FA;;;S-1-5-21-3713633988-380251994-3399691187-1000)(A;ID;FA;;;S-1-5-21-3713633988-380251994-3399691187-1005)(A;ID;FA;;;S-1-5-21-3713633988-380251994-3399691187-1009)" "\\?\C:\Users\TEMP\AppData\Local\Microsoft\Windows\UsrClass.dat.old",1,"O:SYG:SYD:AIAR(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;FA;;;S-1-5-21-3713633988-380251994-3399691187-1000)(A;ID;FA;;;S-1-5-21-3713633988-380251994-3399691187-1005)(A;ID;FA;;;S-1-5-21-3713633988-380251994-3399691187-1009)" "\\?\C:\Users\TEMP\ntuser.dat",1,"O:S-1-5-21-3713633988-380251994-3399691187-1000G:S-1-5-21-3713633988-380251994-3399691187-513D:AR(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;FA;;;S-1-5-21-3713633988-380251994-3399691187-1000)(A;ID;FA;;;S-1-5-21-3713633988-380251994-3399691187-1005)(A;ID;FA;;;S-1-5-21-3713633988-380251994-3399691187-1009)" "\\?\C:\Users\TEMP\ntuser.dat.old",1,"O:S-1-5-21-3713633988-380251994-3399691187-1000G:S-1-5-21-3713633988-380251994-3399691187-513D:AR(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;FA;;;S-1-5-21-3713633988-380251994-3399691187-1000)(A;ID;FA;;;S-1-5-21-3713633988-380251994-3399691187-1005)(A;ID;FA;;;S-1-5-21-3713633988-380251994-3399691187-1009)" "\\?\C:\Windows\ServiceProfiles\LocalService\ntuser.dat",1,"O:BAG:SYD:AR(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;FA;;;LS)" "\\?\C:\Windows\ServiceProfiles\LocalService\ntuser.dat.old",1,"O:BAG:SYD:AR(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;FA;;;LS)" "\\?\C:\Windows\ServiceProfiles\NetworkService\ntuser.dat",1,"O:BAG:SYD:AR(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;FA;;;NS)" "\\?\C:\Windows\ServiceProfiles\NetworkService\ntuser.dat.old",1,"O:BAG:SYD:AR(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;FA;;;NS)" "\\?\C:\Windows\System32\Config\components",1,"O:SYG:SYD:AIAR(A;ID;FA;;;SY)(A;ID;FA;;;BA)" "\\?\C:\Windows\System32\Config\components.old",1,"O:SYG:SYD:AIAR(A;ID;FA;;;SY)(A;ID;FA;;;BA)" "\\?\C:\Windows\System32\Config\default",1,"O:SYG:SYD:AR(A;ID;FA;;;SY)(A;ID;FA;;;BA)" "\\?\C:\Windows\System32\Config\default.old",1,"O:SYG:SYD:AR(A;ID;FA;;;SY)(A;ID;FA;;;BA)" "\\?\C:\Windows\System32\Config\sam",1,"O:SYG:SYD:AR(A;ID;FA;;;SY)(A;ID;FA;;;BA)" "\\?\C:\Windows\System32\Config\sam.old",1,"O:SYG:SYD:AR(A;ID;FA;;;SY)(A;ID;FA;;;BA)" "\\?\C:\Windows\System32\Config\security",1,"O:SYG:SYD:AR(A;ID;FA;;;SY)(A;ID;FA;;;BA)" "\\?\C:\Windows\System32\Config\security.old",1,"O:SYG:SYD:AR(A;ID;FA;;;SY)(A;ID;FA;;;BA)" "\\?\C:\Windows\System32\Config\software",1,"O:SYG:SYD:AR(A;ID;FA;;;SY)(A;ID;FA;;;BA)" "\\?\C:\Windows\System32\Config\software.old",1,"O:SYG:SYD:AR(A;ID;FA;;;SY)(A;ID;FA;;;BA)" "\\?\C:\Windows\System32\Config\system",1,"O:SYG:SYD:AR(A;ID;FA;;;SY)(A;ID;FA;;;BA)" "\\?\C:\Windows\System32\Config\system.old",1,"O:SYG:SYD:AR(A;ID;FA;;;SY)(A;ID;FA;;;BA)" [14/07/2020 - 16:09:17] -------------------------------------------------------------------------------- [14/07/2020 - 16:09:17] Backing Up Files: [14/07/2020 - 16:09:17] -------------------------------------------------------------------------------- [14/07/2020 - 16:09:17] Using Fallback Backup Method. [14/07/2020 - 16:09:17] Backing Up File: C:\Windows\System32\Config\components [14/07/2020 - 16:09:17] Result: Successful (41.98 MB) - C:\RegBackup\LAPTOPONE\14.07.2020_16.09.17\C\Windows\System32\Config\components [14/07/2020 - 16:09:17] Backing Up File: C:\Windows\System32\Config\default [14/07/2020 - 16:09:17] Result: Successful (736.00 KB) - C:\RegBackup\LAPTOPONE\14.07.2020_16.09.17\C\Windows\System32\Config\default [14/07/2020 - 16:09:17] Backing Up File: C:\Windows\System32\Config\sam [14/07/2020 - 16:09:17] Result: Successful (136.00 KB) - C:\RegBackup\LAPTOPONE\14.07.2020_16.09.17\C\Windows\System32\Config\sam [14/07/2020 - 16:09:17] Backing Up File: C:\Windows\System32\Config\security [14/07/2020 - 16:09:17] Result: Successful (28.00 KB) - C:\RegBackup\LAPTOPONE\14.07.2020_16.09.17\C\Windows\System32\Config\security [14/07/2020 - 16:09:17] Backing Up File: C:\Windows\System32\Config\software [14/07/2020 - 16:09:18] Result: Successful (110.13 MB) - C:\RegBackup\LAPTOPONE\14.07.2020_16.09.17\C\Windows\System32\Config\software [14/07/2020 - 16:09:18] Backing Up File: C:\Windows\System32\Config\system [14/07/2020 - 16:09:18] Result: Successful (48.67 MB) - C:\RegBackup\LAPTOPONE\14.07.2020_16.09.17\C\Windows\System32\Config\system [14/07/2020 - 16:09:18] Backing Up File: C:\Users\Administrator\ntuser.dat [14/07/2020 - 16:09:18] Result: Failed - Error: -1 (API Reg Save Failed (), Tried File Copy, File In use, Cannot copy.) [14/07/2020 - 16:09:18] Backing Up File: C:\Users\Administrator\AppData\Local\Microsoft\Windows\UsrClass.dat [14/07/2020 - 16:09:18] Result: Successful (1.50 MB) - C:\RegBackup\LAPTOPONE\14.07.2020_16.09.17\C\Users\Administrator\AppData\Local\Microsoft\Windows\UsrClass.dat [14/07/2020 - 16:09:18] Backing Up File: C:\Users\Back door\ntuser.dat [14/07/2020 - 16:09:18] Result: Failed - Error: -1 (API Reg Save Failed (), Tried File Copy, File In use, Cannot copy.) [14/07/2020 - 16:09:18] Backing Up File: C:\Users\Back door\AppData\Local\Microsoft\Windows\UsrClass.dat [14/07/2020 - 16:09:18] Result: Successful (256.00 KB) - C:\RegBackup\LAPTOPONE\14.07.2020_16.09.17\C\Users\Back door\AppData\Local\Microsoft\Windows\UsrClass.dat [14/07/2020 - 16:09:18] Backing Up File: C:\Users\Clean 3\ntuser.dat [14/07/2020 - 16:09:19] Result: Successful (11.90 MB) - C:\RegBackup\LAPTOPONE\14.07.2020_16.09.17\C\Users\Clean 3\ntuser.dat [14/07/2020 - 16:09:19] Backing Up File: C:\Users\Clean 3\AppData\Local\Microsoft\Windows\UsrClass.dat [14/07/2020 - 16:09:19] Result: Successful (10.55 MB) - C:\RegBackup\LAPTOPONE\14.07.2020_16.09.17\C\Users\Clean 3\AppData\Local\Microsoft\Windows\UsrClass.dat [14/07/2020 - 16:09:19] Backing Up File: C:\Users\Default\ntuser.dat [14/07/2020 - 16:09:19] Result: Successful (256.00 KB) - C:\RegBackup\LAPTOPONE\14.07.2020_16.09.17\C\Users\Default\ntuser.dat [14/07/2020 - 16:09:19] Backing Up File: C:\Users\Hugh Pratt\ntuser.dat [14/07/2020 - 16:09:19] Result: Failed - Error: -1 (API Reg Save Failed (), Tried File Copy, File In use, Cannot copy.) [14/07/2020 - 16:09:19] Backing Up File: C:\Users\Hugh Pratt\AppData\Local\Microsoft\Windows\UsrClass.dat [14/07/2020 - 16:09:19] Result: Successful (11.00 MB) - C:\RegBackup\LAPTOPONE\14.07.2020_16.09.17\C\Users\Hugh Pratt\AppData\Local\Microsoft\Windows\UsrClass.dat [14/07/2020 - 16:09:19] Backing Up File: C:\Users\TEMP\ntuser.dat [14/07/2020 - 16:09:19] Result: Failed - Error: -1 (API Reg Save Failed (), Tried File Copy, File In use, Cannot copy.) [14/07/2020 - 16:09:19] Backing Up File: C:\Users\TEMP\AppData\Local\Microsoft\Windows\UsrClass.dat [14/07/2020 - 16:09:19] Result: Successful (256.00 KB) - C:\RegBackup\LAPTOPONE\14.07.2020_16.09.17\C\Users\TEMP\AppData\Local\Microsoft\Windows\UsrClass.dat [14/07/2020 - 16:09:19] Backing Up File: C:\Windows\ServiceProfiles\LocalService\ntuser.dat [14/07/2020 - 16:09:19] Result: Successful (248.00 KB) - C:\RegBackup\LAPTOPONE\14.07.2020_16.09.17\C\Windows\ServiceProfiles\LocalService\ntuser.dat [14/07/2020 - 16:09:19] Backing Up File: C:\Windows\ServiceProfiles\NetworkService\ntuser.dat [14/07/2020 - 16:09:19] Result: Successful (444.00 KB) - C:\RegBackup\LAPTOPONE\14.07.2020_16.09.17\C\Windows\ServiceProfiles\NetworkService\ntuser.dat [14/07/2020 - 16:09:19] Total Size: 238.04 MB [14/07/2020 - 16:09:19] -------------------------------------------------------------------------------- [14/07/2020 - 16:09:19] Creating DOS restore bat file for use in the Windows Recovery Console: [14/07/2020 - 16:09:19] -------------------------------------------------------------------------------- [14/07/2020 - 16:09:19] Already Exists: C:\Windows\tweaking.com-regbackup-LAPTOPONE-Windows-7-Professional-(64-bit).dat for use in the dos_restore.cmd file [14/07/2020 - 16:09:19] Done: C:\RegBackup\LAPTOPONE\14.07.2020_16.09.17\dos_restore.cmd [14/07/2020 - 16:09:19] --------------------------------------------------------------------------------