Внимание. Восстановление баз 1С7, 1C8 и Mssql после атаки шифровальщика, подробности и отзывы читайте в профильной теме.
Внимание. Восстановление архивов RAR и ZIP, образов Acronis и виртуальных машин, баз почтовых программ после атаки шифровальщика, подробности и отзывы читайте в профильной теме.
begin
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
ClearQuarantineEx(true);
TerminateProcessByName('c:\windows\fonts\s\svchost.exe');
TerminateProcessByName('c:\windows\fonts\s\wmisrv.exe');
TerminateProcessByName('c:\windows\fonts\s\www\gecko\plugin-container.exe');
TerminateProcessByName('c:\windows\fonts\s\www\gecko\securesurf.browser.client.exe');
TerminateProcessByName('c:\windows\fonts\s\www\webisida.browser.exe');
StopService('Bios');
StopService('Windows Terminal Service Control (managed by AlwaysUpService)');
QuarantineFile('C:\Windows\assembly\up\2.bat', '');
QuarantineFile('C:\Windows\Fonts\reg.exe', '');
QuarantineFile('C:\Windows\fonts\s\AlwaysUpServiceAssistant.dll', '');
QuarantineFile('C:\Windows\fonts\s\mcrn\SKEL\6d4497bdd2ef111448a28ac11a83573367fe9529.Tls', '');
QuarantineFile('c:\windows\fonts\s\svchost.exe', '');
QuarantineFile('c:\windows\fonts\s\wmisrv.exe', '');
QuarantineFile('C:\windows\fonts\s\www\gecko\browser\plugins\NPSWF32_32_0_0_142.dll', '');
QuarantineFile('C:\windows\fonts\s\www\gecko\Capinet.dll', '');
QuarantineFile('C:\windows\fonts\s\www\gecko\freebl3.dll', '');
QuarantineFile('C:\windows\fonts\s\www\gecko\lgpllibs.dll', '');
QuarantineFile('C:\windows\fonts\s\www\gecko\libEGL.dll', '');
QuarantineFile('C:\windows\fonts\s\www\gecko\libGLESv2.dll', '');
QuarantineFile('C:\windows\fonts\s\www\gecko\MemIPC.dll', '');
QuarantineFile('C:\windows\fonts\s\www\gecko\mozavcodec.dll', '');
QuarantineFile('C:\windows\fonts\s\www\gecko\mozavutil.dll', '');
QuarantineFile('C:\windows\fonts\s\www\gecko\mozglue.dll', '');
QuarantineFile('C:\windows\fonts\s\www\gecko\nss3.dll', '');
QuarantineFile('C:\windows\fonts\s\www\gecko\nssckbi.dll', '');
QuarantineFile('C:\windows\fonts\s\www\gecko\nssdbm3.dll', '');
QuarantineFile('c:\windows\fonts\s\www\gecko\plugin-container.exe', '');
QuarantineFile('c:\windows\fonts\s\www\gecko\securesurf.browser.client.exe', '');
QuarantineFile('C:\windows\fonts\s\www\gecko\SecureSurf.dll', '');
QuarantineFile('C:\windows\fonts\s\www\gecko\softokn3.dll', '');
QuarantineFile('C:\windows\fonts\s\www\gecko\xul.dll', '');
QuarantineFile('C:\windows\fonts\s\www\gecko\XulFx.dll', '');
QuarantineFile('C:\windows\fonts\s\www\gecko\XulFx.Windows.Forms.dll', '');
QuarantineFile('c:\windows\fonts\s\www\webisida.browser.exe', '');
QuarantineFile('C:\Windows\Fonts\se.exe', '');
QuarantineFile('C:\Windows\fonts\w\svchost.exe', '');
DeleteSchedulerTask('Google Updates');
DeleteSchedulerTask('systems');
DeleteFile('C:\Windows\assembly\up\2.bat', '64');
DeleteFile('C:\Windows\Fonts\reg.exe', '');
DeleteFile('C:\Windows\fonts\s\AlwaysUpServiceAssistant.dll', '');
DeleteFile('C:\Windows\fonts\s\mcrn\SKEL\6d4497bdd2ef111448a28ac11a83573367fe9529.Tls', '');
DeleteFile('c:\windows\fonts\s\svchost.exe', '');
DeleteFile('C:\Windows\fonts\s\svchost.exe', '64');
DeleteFile('c:\windows\fonts\s\wmisrv.exe', '');
DeleteFile('c:\windows\fonts\s\wmisrv.exe', '64');
DeleteFile('C:\windows\fonts\s\www\gecko\browser\plugins\NPSWF32_32_0_0_142.dll', '');
DeleteFile('C:\windows\fonts\s\www\gecko\Capinet.dll', '');
DeleteFile('C:\windows\fonts\s\www\gecko\freebl3.dll', '');
DeleteFile('C:\windows\fonts\s\www\gecko\lgpllibs.dll', '');
DeleteFile('C:\windows\fonts\s\www\gecko\libEGL.dll', '');
DeleteFile('C:\windows\fonts\s\www\gecko\libGLESv2.dll', '');
DeleteFile('C:\windows\fonts\s\www\gecko\MemIPC.dll', '');
DeleteFile('C:\windows\fonts\s\www\gecko\mozavcodec.dll', '');
DeleteFile('C:\windows\fonts\s\www\gecko\mozavutil.dll', '');
DeleteFile('C:\windows\fonts\s\www\gecko\mozglue.dll', '');
DeleteFile('C:\windows\fonts\s\www\gecko\nss3.dll', '');
DeleteFile('C:\windows\fonts\s\www\gecko\nssckbi.dll', '');
DeleteFile('C:\windows\fonts\s\www\gecko\nssdbm3.dll', '');
DeleteFile('c:\windows\fonts\s\www\gecko\plugin-container.exe', '');
DeleteFile('c:\windows\fonts\s\www\gecko\securesurf.browser.client.exe', '');
DeleteFile('c:\windows\fonts\s\www\gecko\securesurf.browser.client.exe', '64');
DeleteFile('C:\windows\fonts\s\www\gecko\SecureSurf.dll', '');
DeleteFile('C:\windows\fonts\s\www\gecko\softokn3.dll', '');
DeleteFile('C:\windows\fonts\s\www\gecko\xul.dll', '');
DeleteFile('C:\windows\fonts\s\www\gecko\XulFx.dll', '');
DeleteFile('C:\windows\fonts\s\www\gecko\XulFx.Windows.Forms.dll', '');
DeleteFile('c:\windows\fonts\s\www\webisida.browser.exe', '');
DeleteFile('C:\Windows\Fonts\se.exe', '');
DeleteFile('C:\Windows\fonts\w\svchost.exe', '64');
DeleteService('Bios');
DeleteService('Windows Terminal Service Control (managed by AlwaysUpService)');
DeleteService('WindowsDefend');
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1001', 1);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1004', 3);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1201', 3);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1804', 1);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '2201', 3);
ExecuteSysClean;
end.
begin
DeleteFile(GetAVZDirectory+'quarantine.7z');
ExecuteFile(GetAVZDirectory+'7za.exe', 'a -mx9 -pmalware quarantine .\Quarantine\*', 1, 300000, false);
end.
Пересмотрите все ли нужны. На время лечения закройте или задайте сложный пароль.F:\
E:\1C_Bases
C:\Users
E:\ЧЗСМК
C:\Windows\SYSVOL\sysvol
C:\Windows\SYSVOL\sysvol\chzsmk.local\SCRIPTS
Start::
Task: {11E1A52D-7428-4220-B76F-3D738AAE0228} - System32\Tasks\system => taskkill [Argument = /im taskmgr.exe /f] <==== ATTENTION
Task: {A432404E-F2E6-47AA-8649-7DAF58E04AE7} - System32\Tasks\ShadowCopyVolume{832bdd59-0606-11e5-80b9-0cc47a42c001} => C:\Windows\system32\vssadmin.exe [146432 2014-11-21] (Microsoft Windows -> Microsoft Corporation)
Task: C:\Windows\Tasks\ShadowCopyVolume{1276864a-08e3-11e5-80c3-0cc47a42c000}.job => C:\Windows\system32\vssadmin.exe
Task: C:\Windows\Tasks\ShadowCopyVolume{832bdd57-0606-11e5-80b9-0cc47a42c001}.job => C:\Windows\system32\vssadmin.exe
Task: C:\Windows\Tasks\ShadowCopyVolume{832bdd58-0606-11e5-80b9-0cc47a42c001}.job => C:\Windows\system32\vssadmin.exe
Task: C:\Windows\Tasks\ShadowCopyVolume{832bdd59-0606-11e5-80b9-0cc47a42c001}.job => C:\Windows\system32\vssadmin.exe
2019-06-21 01:57 - 2019-06-21 01:57 - 000001275 _____ C:\Users\администратор.CHZSMK\Downloads\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:57 - 2019-06-21 01:57 - 000000078 _____ C:\Users\администратор.CHZSMK\README.txt
2019-06-21 01:57 - 2019-06-21 01:57 - 000000078 _____ C:\Users\администратор.CHZSMK\Downloads\README.txt
2019-06-21 01:57 - 2019-06-21 01:57 - 000000078 _____ C:\Users\администратор.CHZSMK\Documents\README.txt
2019-06-21 01:57 - 2019-06-21 01:57 - 000000078 _____ C:\Users\администратор.CHZSMK\AppData\Roaming\README.txt
2019-06-21 01:57 - 2019-06-21 01:57 - 000000078 _____ C:\Users\администратор.CHZSMK\AppData\Roaming\Microsoft\Windows\Start Menu\README.txt
2019-06-21 01:57 - 2019-06-21 01:57 - 000000078 _____ C:\Users\администратор.CHZSMK\AppData\README.txt
2019-06-21 01:57 - 2019-06-21 01:57 - 000000078 _____ C:\Users\README.txt
2019-06-21 01:57 - 2019-06-21 01:57 - 000000078 _____ C:\README.txt
2019-06-21 01:55 - 2019-06-21 01:55 - 000000078 _____ C:\Users\администратор.CHZSMK\AppData\LocalLow\README.txt
2019-06-21 01:54 - 2019-06-21 01:54 - 000000078 _____ C:\Users\usr1cv81\AppData\README.txt
2019-06-21 01:54 - 2019-06-21 01:54 - 000000078 _____ C:\Users\abuzmakov\AppData\README.txt
2019-06-21 01:52 - 2019-06-21 01:52 - 000000078 _____ C:\Program Files (x86)\README.txt
2019-06-21 01:47 - 2019-06-21 01:47 - 000000078 _____ C:\Program Files\README.txt
2019-06-21 01:46 - 2019-06-21 01:55 - 000001275 _____ C:\Users\Администратор\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:46 - 2019-06-21 01:55 - 000001275 _____ C:\Users\Администратор\Downloads\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:46 - 2019-06-21 01:55 - 000001275 _____ C:\Users\Администратор\Documents\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:46 - 2019-06-21 01:55 - 000001275 _____ C:\Users\Администратор\Desktop\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:46 - 2019-06-21 01:55 - 000001275 _____ C:\Users\Администратор\AppData\Roaming\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:46 - 2019-06-21 01:55 - 000001275 _____ C:\Users\Администратор\AppData\LocalLow\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:46 - 2019-06-21 01:55 - 000001275 _____ C:\Users\Администратор\AppData\Local\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:46 - 2019-06-21 01:55 - 000001275 _____ C:\Users\Администратор\AppData\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:46 - 2019-06-21 01:55 - 000001275 _____ C:\Users\администратор.CHZSMK\AppData\Local\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:46 - 2019-06-21 01:55 - 000000078 _____ C:\Users\Администратор\README.txt
2019-06-21 01:46 - 2019-06-21 01:55 - 000000078 _____ C:\Users\Администратор\Downloads\README.txt
2019-06-21 01:46 - 2019-06-21 01:55 - 000000078 _____ C:\Users\Администратор\Documents\README.txt
2019-06-21 01:46 - 2019-06-21 01:55 - 000000078 _____ C:\Users\Администратор\Desktop\README.txt
2019-06-21 01:46 - 2019-06-21 01:55 - 000000078 _____ C:\Users\Администратор\AppData\Roaming\README.txt
2019-06-21 01:46 - 2019-06-21 01:55 - 000000078 _____ C:\Users\Администратор\AppData\README.txt
2019-06-21 01:46 - 2019-06-21 01:55 - 000000078 _____ C:\Users\Администратор\AppData\LocalLow\README.txt
2019-06-21 01:46 - 2019-06-21 01:55 - 000000078 _____ C:\Users\Администратор\AppData\Local\README.txt
2019-06-21 01:46 - 2019-06-21 01:55 - 000000078 _____ C:\Users\администратор.CHZSMK\AppData\Local\README.txt
2019-06-21 01:46 - 2019-06-21 01:54 - 000001275 _____ C:\Users\usr1cv81\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:46 - 2019-06-21 01:54 - 000001275 _____ C:\Users\usr1cv81\Downloads\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:46 - 2019-06-21 01:54 - 000001275 _____ C:\Users\usr1cv81\Documents\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:46 - 2019-06-21 01:54 - 000001275 _____ C:\Users\usr1cv81\Desktop\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:46 - 2019-06-21 01:54 - 000001275 _____ C:\Users\usr1cv81\AppData\Roaming\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:46 - 2019-06-21 01:54 - 000001275 _____ C:\Users\usr1cv81\AppData\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:46 - 2019-06-21 01:54 - 000000078 _____ C:\Users\usr1cv81\README.txt
2019-06-21 01:46 - 2019-06-21 01:54 - 000000078 _____ C:\Users\usr1cv81\Downloads\README.txt
2019-06-21 01:46 - 2019-06-21 01:54 - 000000078 _____ C:\Users\usr1cv81\Documents\README.txt
2019-06-21 01:46 - 2019-06-21 01:54 - 000000078 _____ C:\Users\usr1cv81\Desktop\README.txt
2019-06-21 01:46 - 2019-06-21 01:54 - 000000078 _____ C:\Users\usr1cv81\AppData\Roaming\README.txt
2019-06-21 01:46 - 2019-06-21 01:46 - 000000078 _____ C:\Users\Администратор\AppData\Roaming\Microsoft\Windows\Start Menu\README.txt
2019-06-21 01:46 - 2019-06-21 01:46 - 000000078 _____ C:\Users\usr1cv81\AppData\Roaming\Microsoft\Windows\Start Menu\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\usr1cv81\AppData\LocalLow\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\usr1cv81\AppData\Local\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\SQLSERVERAGENT\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\SQLSERVERAGENT\Downloads\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\SQLSERVERAGENT\Documents\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\SQLSERVERAGENT\Desktop\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\SQLSERVERAGENT\AppData\Roaming\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\SQLSERVERAGENT\AppData\LocalLow\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\SQLSERVERAGENT\AppData\Local\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\SQLSERVERAGENT\AppData\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\ReportServer\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\ReportServer\Downloads\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\ReportServer\Documents\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\ReportServer\Desktop\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\ReportServer\AppData\Roaming\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\ReportServer\AppData\LocalLow\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\ReportServer\AppData\Local\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\ReportServer\AppData\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\Public\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\Public\Downloads\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\MSSQLServerOLAPService\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\MSSQLServerOLAPService\Downloads\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\MSSQLServerOLAPService\Documents\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\MSSQLServerOLAPService\Desktop\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\MSSQLServerOLAPService\AppData\Roaming\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\MSSQLServerOLAPService\AppData\LocalLow\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\MSSQLServerOLAPService\AppData\Local\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\MSSQLServerOLAPService\AppData\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\MSSQLSERVER\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\MSSQLSERVER\Downloads\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\MSSQLSERVER\Documents\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\MSSQLSERVER\Desktop\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\MSSQLSERVER\AppData\Roaming\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\MSSQLSERVER\AppData\LocalLow\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\MSSQLSERVER\AppData\Local\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\MSSQLSERVER\AppData\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\MSSQLFDLauncher\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\MSSQLFDLauncher\Downloads\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\MSSQLFDLauncher\Documents\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\MSSQLFDLauncher\Desktop\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\MSSQLFDLauncher\AppData\Roaming\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\MSSQLFDLauncher\AppData\LocalLow\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\MSSQLFDLauncher\AppData\Local\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\MSSQLFDLauncher\AppData\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\MsDtsServer110\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\MsDtsServer110\Downloads\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\MsDtsServer110\Documents\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\MsDtsServer110\Desktop\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\MsDtsServer110\AppData\Roaming\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\MsDtsServer110\AppData\LocalLow\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\MsDtsServer110\AppData\Local\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\MsDtsServer110\AppData\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\ftp\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\ftp\Downloads\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\ftp\Documents\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\ftp\Desktop\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\ftp\AppData\Roaming\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\ftp\AppData\LocalLow\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\ftp\AppData\Local\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\ftp\AppData\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\Default\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\Default\Downloads\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\Default\Documents\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\Default\Desktop\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\Default\AppData\Roaming\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\Default\AppData\Local\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\Default\AppData\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\Default User\Downloads\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\Default User\Documents\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\Default User\Desktop\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\Default User\AppData\Roaming\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\Default User\AppData\Local\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\Default User\AppData\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\bit\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\bit\Downloads\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\bit\Documents\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\bit\Desktop\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\bit\AppData\Roaming\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\bit\AppData\LocalLow\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\bit\AppData\Local\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000001275 _____ C:\Users\bit\AppData\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\usr1cv81\AppData\LocalLow\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\usr1cv81\AppData\Local\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\SQLSERVERAGENT\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\SQLSERVERAGENT\Downloads\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\SQLSERVERAGENT\Documents\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\SQLSERVERAGENT\Desktop\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\SQLSERVERAGENT\AppData\Roaming\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\SQLSERVERAGENT\AppData\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\SQLSERVERAGENT\AppData\LocalLow\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\SQLSERVERAGENT\AppData\Local\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\ReportServer\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\ReportServer\Downloads\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\ReportServer\Documents\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\ReportServer\Desktop\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\ReportServer\AppData\Roaming\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\ReportServer\AppData\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\ReportServer\AppData\LocalLow\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\ReportServer\AppData\Local\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\Public\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\Public\Downloads\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\MSSQLServerOLAPService\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\MSSQLServerOLAPService\Downloads\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\MSSQLServerOLAPService\Documents\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\MSSQLServerOLAPService\Desktop\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\MSSQLServerOLAPService\AppData\Roaming\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\MSSQLServerOLAPService\AppData\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\MSSQLServerOLAPService\AppData\LocalLow\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\MSSQLServerOLAPService\AppData\Local\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\MSSQLSERVER\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\MSSQLSERVER\Downloads\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\MSSQLSERVER\Documents\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\MSSQLSERVER\Desktop\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\MSSQLSERVER\AppData\Roaming\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\MSSQLSERVER\AppData\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\MSSQLSERVER\AppData\LocalLow\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\MSSQLSERVER\AppData\Local\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\MSSQLFDLauncher\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\MSSQLFDLauncher\Downloads\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\MSSQLFDLauncher\Documents\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\MSSQLFDLauncher\Desktop\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\MSSQLFDLauncher\AppData\Roaming\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\MSSQLFDLauncher\AppData\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\MSSQLFDLauncher\AppData\LocalLow\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\MSSQLFDLauncher\AppData\Local\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\MsDtsServer110\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\MsDtsServer110\Downloads\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\MsDtsServer110\Documents\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\MsDtsServer110\Desktop\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\MsDtsServer110\AppData\Roaming\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\MsDtsServer110\AppData\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\MsDtsServer110\AppData\LocalLow\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\MsDtsServer110\AppData\Local\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\ftp\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\ftp\Downloads\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\ftp\Documents\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\ftp\Desktop\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\ftp\AppData\Roaming\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\ftp\AppData\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\ftp\AppData\LocalLow\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\ftp\AppData\Local\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\Default\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\Default\Downloads\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\Default\Documents\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\Default\Desktop\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\Default\AppData\Roaming\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\Default\AppData\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\Default\AppData\Local\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\Default User\Downloads\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\Default User\Documents\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\Default User\Desktop\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\Default User\AppData\Roaming\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\Default User\AppData\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\Default User\AppData\Local\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\bit\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\bit\Downloads\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\bit\Documents\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\bit\Desktop\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\bit\AppData\Roaming\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\bit\AppData\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\bit\AppData\LocalLow\README.txt
2019-06-21 01:44 - 2019-06-21 01:54 - 000000078 _____ C:\Users\bit\AppData\Local\README.txt
2019-06-21 01:44 - 2019-06-21 01:44 - 000000078 _____ C:\Users\SQLSERVERAGENT\AppData\Roaming\Microsoft\Windows\Start Menu\README.txt
2019-06-21 01:44 - 2019-06-21 01:44 - 000000078 _____ C:\Users\ReportServer\AppData\Roaming\Microsoft\Windows\Start Menu\README.txt
2019-06-21 01:44 - 2019-06-21 01:44 - 000000078 _____ C:\Users\MSSQLServerOLAPService\AppData\Roaming\Microsoft\Windows\Start Menu\README.txt
2019-06-21 01:44 - 2019-06-21 01:44 - 000000078 _____ C:\Users\MSSQLSERVER\AppData\Roaming\Microsoft\Windows\Start Menu\README.txt
2019-06-21 01:44 - 2019-06-21 01:44 - 000000078 _____ C:\Users\MSSQLFDLauncher\AppData\Roaming\Microsoft\Windows\Start Menu\README.txt
2019-06-21 01:44 - 2019-06-21 01:44 - 000000078 _____ C:\Users\MsDtsServer110\AppData\Roaming\Microsoft\Windows\Start Menu\README.txt
2019-06-21 01:44 - 2019-06-21 01:44 - 000000078 _____ C:\Users\ftp\AppData\Roaming\Microsoft\Windows\Start Menu\README.txt
2019-06-21 01:44 - 2019-06-21 01:44 - 000000078 _____ C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\README.txt
2019-06-21 01:44 - 2019-06-21 01:44 - 000000078 _____ C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\README.txt
2019-06-21 01:44 - 2019-06-21 01:44 - 000000078 _____ C:\Users\bit\AppData\Roaming\Microsoft\Windows\Start Menu\README.txt
2019-06-21 01:44 - 2019-06-21 01:44 - 000000078 _____ C:\ProgramData\Microsoft\Windows\Start Menu\README.txt
2019-06-21 01:44 - 2019-06-21 01:44 - 000000078 _____ C:\Program Files\Common Files\README.txt
2019-06-21 01:43 - 2019-06-21 01:54 - 000001275 _____ C:\Users\Все пользователи\README.txt
2019-06-21 01:43 - 2019-06-21 01:54 - 000001275 _____ C:\Users\Public\Documents\README.txt
2019-06-21 01:43 - 2019-06-21 01:54 - 000001275 _____ C:\Users\abuzmakov\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:43 - 2019-06-21 01:54 - 000001275 _____ C:\Users\abuzmakov\Downloads\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:43 - 2019-06-21 01:54 - 000001275 _____ C:\Users\abuzmakov\Documents\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:43 - 2019-06-21 01:54 - 000001275 _____ C:\Users\abuzmakov\Desktop\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:43 - 2019-06-21 01:54 - 000001275 _____ C:\Users\abuzmakov\AppData\Roaming\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:43 - 2019-06-21 01:54 - 000001275 _____ C:\ProgramData\README.txt
2019-06-21 01:43 - 2019-06-21 01:54 - 000000078 _____ C:\Users\abuzmakov\README.txt
2019-06-21 01:43 - 2019-06-21 01:54 - 000000078 _____ C:\Users\abuzmakov\Downloads\README.txt
2019-06-21 01:43 - 2019-06-21 01:54 - 000000078 _____ C:\Users\abuzmakov\Documents\README.txt
2019-06-21 01:43 - 2019-06-21 01:54 - 000000078 _____ C:\Users\abuzmakov\Desktop\README.txt
2019-06-21 01:43 - 2019-06-21 01:54 - 000000078 _____ C:\Users\abuzmakov\AppData\Roaming\README.txt
2019-06-21 01:43 - 2019-06-21 01:53 - 000001275 _____ C:\Users\abuzmakov\AppData\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:43 - 2019-06-21 01:52 - 000001275 _____ C:\Users\Все пользователи\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:43 - 2019-06-21 01:52 - 000001275 _____ C:\ProgramData\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:43 - 2019-06-21 01:44 - 000001275 _____ C:\Users\Public\Documents\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:43 - 2019-06-21 01:43 - 000000078 _____ C:\Users\abuzmakov\AppData\Roaming\Microsoft\Windows\Start Menu\README.txt
2019-06-21 01:42 - 2019-06-21 01:54 - 000001275 _____ C:\Users\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:41 - 2019-06-21 01:53 - 000001275 _____ C:\Users\abuzmakov\AppData\LocalLow\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:41 - 2019-06-21 01:53 - 000000078 _____ C:\Users\abuzmakov\AppData\LocalLow\README.txt
2019-06-21 01:40 - 2019-06-21 01:53 - 000001275 _____ C:\Users\abuzmakov\AppData\Local\email-butterfly.iron@aol.com.ver-CL 1.5.1.0.id-.fname-README.txt.doubleoffset
2019-06-21 01:40 - 2019-06-21 01:53 - 000000078 _____ C:\Users\abuzmakov\AppData\Local\README.txt
2019-06-21 01:30 - 2019-06-14 00:00 - 000471552 _____ C:\Users\usr1cv81\Downloads\ru4ka.exe
2019-06-21 01:30 - 2018-09-14 23:30 - 000000063 _____ C:\Users\usr1cv81\Downloads\LogDelete.bat
2019-06-21 01:30 - 2018-01-15 04:56 - 000000028 _____ C:\Users\usr1cv81\Downloads\Shadow.bat
2019-06-21 01:30 - 2017-11-11 06:18 - 000116224 _____ C:\Users\usr1cv81\Downloads\NS.exe
2019-04-22 23:41 - 2019-04-22 23:41 - 000003396 _____ C:\Windows\System32\Tasks\system
2019-04-22 23:23 - 2019-04-22 23:23 - 000465911 _____ C:\Windows\vi.zip
2019-04-22 23:22 - 2019-04-22 23:23 - 074148906 _____ C:\Windows\ss.exe
2019-04-22 23:21 - 2019-04-22 23:22 - 058814836 _____ C:\Windows\w.exe
2019-04-22 23:21 - 2019-04-22 23:21 - 006481012 _____ C:\Windows\up.exe
2019-04-22 23:21 - 2019-04-22 23:21 - 004086900 _____ C:\Windows\rms.exe
2019-04-22 23:20 - 2019-04-22 23:21 - 004387608 _____ C:\Windows\wget.exe
Zip: c:\FRST\Quarantine\
End::
Прикрепите его также к следующему сообщению.архив отправил
var
LogPath : string;
ScriptPath : string;
begin
LogPath := GetAVZDirectory + 'log\avz_log.txt';
if FileExists(LogPath) Then DeleteFile(LogPath);
ScriptPath := GetAVZDirectory +'ScanVuln.txt';
if DownloadFile('http://dataforce.ru/~kad/ScanVuln.txt', ScriptPath, 1) then ExecuteScript(ScriptPath) else begin
if DownloadFile('http://dataforce.ru/~kad/ScanVuln.txt', ScriptPath, 0) then ExecuteScript(ScriptPath) else begin
ShowMessage('Невозможно загрузить скрипт AVZ для обнаружения наиболее часто используемых уязвимостей!');
exit;
end;
end;
if FileExists(LogPath) Then ExecuteFile('notepad.exe', LogPath, 1, 0, false)
end.
We use cookies and similar technologies for the following purposes:
Do you accept cookies and these technologies?
We use cookies and similar technologies for the following purposes:
Do you accept cookies and these technologies?