• Внимание. Восстановление баз 1С7, 1C8 и Mssql после атаки шифровальщика, подробности и отзывы читайте в профильной теме.

    Внимание. Восстановление архивов RAR и ZIP, образов Acronis и виртуальных машин, баз почтовых программ после атаки шифровальщика, подробности и отзывы читайте в профильной теме.

Решена без расшифровки Шифровальщик [email protected]

Nail84

Новый пользователь
Сообщения
3
Реакции
1
Здравствуйте. Не посчастливилось напороться на шифровальщик [email protected]. Очень нужна ваша помощь в расшифровке. Высылаю логи и зашифрованные файлы. Самого файла шифровальщика к сожалению обнаружить не удалось. Заранее спасибо за помощь
 

Вложения

  • Desktop.zip
    98.2 KB · Просмотры: 1
  • Addition.txt
    51.9 KB · Просмотры: 1
  • FRST.txt
    475 KB · Просмотры: 1

akok

Команда форума
Администратор
Ассоциация VN
Сообщения
20,621
Реакции
13,982
Удивительно, что так поздно взломали (Windows Server 2008). Смените пароли на RDP, а лучше скройте за VPN

По поводу дешифровки, ее нет (возможно @thyrex меня поправит). Бекапы живы?

Проверьте список пользователей, нет ли лишних администратров.

Примите к сведению - после выполнения скрипта все открытые вкладки браузеров будут закрыты, произойдет выход из аккаунтов, временные файлы, куки и кэш будут очищены.
  • Отключите до перезагрузки антивирус.
  • Выделите следующий код:
    Код:
    Start::
    CreateRestorePoint:
    Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\!!! READ THIS !!!.hta [2020-07-18] () [File not signed]
    Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HOW TO RECOVER ENCRYPTED FILES.txt [2020-07-18] () [File not signed]
    2020-07-18 17:22 - 2020-07-18 10:47 - 000002906 _____ C:\Users\viner\Downloads\!!! READ THIS !!!.hta
    2020-07-18 17:22 - 2020-07-18 10:47 - 000002906 _____ C:\Users\viner\Documents\!!! READ THIS !!!.hta
    2020-07-18 17:22 - 2020-07-18 10:47 - 000002906 _____ C:\Users\viner\Desktop\!!! READ THIS !!!.hta
    2020-07-18 17:22 - 2020-07-18 10:47 - 000002906 _____ C:\Users\viner\AppData\Roaming\Microsoft\Windows\Start Menu\!!! READ THIS !!!.hta
    2020-07-18 17:22 - 2020-07-18 10:47 - 000002906 _____ C:\Users\viner\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-18 17:22 - 2020-07-18 10:47 - 000002906 _____ C:\Users\viner\AppData\Local\!!! READ THIS !!!.hta
    2020-07-18 17:22 - 2020-07-18 10:47 - 000002906 _____ C:\Users\viner\!!! READ THIS !!!.hta
    2020-07-18 17:22 - 2020-07-18 10:47 - 000002216 _____ C:\Users\viner\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-18 17:22 - 2020-07-18 10:47 - 000002216 _____ C:\Users\viner\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-18 17:22 - 2020-07-18 10:47 - 000002216 _____ C:\Users\viner\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-18 17:22 - 2020-07-18 10:47 - 000002216 _____ C:\Users\viner\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-18 17:22 - 2020-07-18 10:47 - 000002216 _____ C:\Users\viner\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-18 17:22 - 2020-07-18 10:47 - 000002216 _____ C:\Users\viner\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-18 17:22 - 2020-07-18 10:47 - 000002216 _____ C:\Users\viner\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\zhurkina\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\zhurkina\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\zhurkina\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\zhurkina\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\zhurkina\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\zhurkina\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\vyguzov\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\vyguzov\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\vyguzov\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\vyguzov\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\vyguzov\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\vyguzov\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\voronin\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\voronin\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\voronin\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\voronin\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\voronin\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\voronin\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\volgograd\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\volgograd\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\volgograd\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\volgograd\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\volgograd\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\volgograd\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\vashurkin\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\vashurkin\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\vashurkin\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\vashurkin\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\vashurkin\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\vashurkin\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\vaschenko\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\vaschenko\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\vaschenko\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\vaschenko\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\vaschenko\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\vaschenko\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\valetova\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\valetova\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\valetova\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\valetova\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\valetova\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\valetova\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\ufa1\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\ufa1\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\ufa1\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\ufa1\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\ufa1\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\ufa1\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\torshenova\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\torshenova\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\torshenova\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\torshenova\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\torshenova\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\torshenova\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\tolstobrov\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\tolstobrov\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\tolstobrov\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\tolstobrov\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\tolstobrov\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\tolstobrov\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\tokareva\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\tokareva\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\tokareva\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\tokareva\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\tokareva\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\tokareva\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\test2\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\test2\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\test2\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\test2\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\test2\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\test2\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\TEMP\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\TEMP.TERMOFOR-RU\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\TEMP.TERMOFOR-RU.001\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\svezhinin\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\svezhinin\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\svezhinin\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\svezhinin\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\svezhinin\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\svezhinin\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\Stepanova\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\Stepanova\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\Stepanova\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\Stepanova\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\Stepanova\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\Stepanova\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\shevcov\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\shevcov\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\shevcov\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\shevcov\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\shevcov\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\shevcov\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\shashkova\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\shashkova\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\shashkova\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\shashkova\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\shashkova\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\shashkova\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\shareholder\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\shareholder\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\shareholder\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\shareholder\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\shareholder\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\shareholder\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\savoskin\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\savoskin\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\savoskin\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\savoskin\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\savoskin\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\savoskin\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\saratov\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\saratov\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\saratov\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\saratov\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\saratov\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\saratov\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\sankt-peterburg6\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\sankt-peterburg6\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\sankt-peterburg6\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\zhurkina\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\zhurkina\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\zhurkina\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\zhurkina\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\zhurkina\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\zhurkina\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\vyguzov\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\vyguzov\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\vyguzov\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\vyguzov\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\vyguzov\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\vyguzov\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\voronin\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\voronin\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\voronin\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\voronin\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\voronin\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\voronin\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\volgograd\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\volgograd\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\volgograd\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\volgograd\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\volgograd\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\volgograd\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\vashurkin\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\vashurkin\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\vashurkin\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\vashurkin\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\vashurkin\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\vashurkin\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\vaschenko\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\vaschenko\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\vaschenko\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\vaschenko\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\vaschenko\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\vaschenko\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\valetova\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\valetova\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\valetova\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\valetova\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\valetova\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\valetova\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\ufa1\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\ufa1\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\ufa1\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\ufa1\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\ufa1\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\ufa1\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\torshenova\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\torshenova\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\torshenova\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\torshenova\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\torshenova\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\torshenova\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\tolstobrov\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\tolstobrov\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\tolstobrov\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\tolstobrov\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\tolstobrov\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\tolstobrov\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\tokareva\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\tokareva\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\tokareva\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\tokareva\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\tokareva\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\tokareva\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\test2\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\test2\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\test2\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\test2\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\test2\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\test2\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\TEMP\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\TEMP.TERMOFOR-RU\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\TEMP.TERMOFOR-RU.001\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\svezhinin\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\svezhinin\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\svezhinin\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\svezhinin\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\svezhinin\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\svezhinin\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\Stepanova\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\Stepanova\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\Stepanova\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\Stepanova\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\Stepanova\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\Stepanova\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\shevcov\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\shevcov\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\shevcov\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\shevcov\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\shevcov\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\shevcov\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\shashkova\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\shashkova\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\shashkova\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\shashkova\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\shashkova\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\shashkova\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\shareholder\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\shareholder\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\shareholder\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\shareholder\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\shareholder\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\shareholder\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\savoskin\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\savoskin\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\savoskin\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\savoskin\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\savoskin\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\savoskin\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\saratov\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\saratov\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\saratov\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\saratov\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\saratov\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\saratov\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\sankt-peterburg6\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\sankt-peterburg6\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\sankt-peterburg6\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg6\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg6\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg6\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg5\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg5\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg5\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg5\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg5\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg5\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg4\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg4\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg4\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg4\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg4\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg6\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg6\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg6\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg5\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg5\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg5\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg5\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg5\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg5\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg4\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg4\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg4\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg4\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg4\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg4\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg2\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg2\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg2\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg2\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg2\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg2\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg1\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg1\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg1\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg1\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg1\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg1\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\salov\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\salov\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\salov\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\salov\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\salov\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\salov\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\retailt\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\retailt\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\retailt\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\retailt\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\retailt\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\retailt\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\retailm3\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\retailm3\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\retailm3\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\retailm3\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\retailm3\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\retailm3\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\retail\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\retail\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\retail\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\retail\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\retail\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\retail\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\remote\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\remote.TERMOFOR-RU\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\REMOTE.TERMOFOR-RU.005\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\remote.TERMOFOR-RU.004\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\Remote.TERMOFOR-RU.003\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\remote.TERMOFOR-RU.002\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\remote.TERMOFOR-RU.001\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\remote.TERMOFOR-RU.000\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\pronina\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\pronina\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\pronina\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\pronina\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\pronina\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\pronina\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\ovodov\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\ovodov\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\ovodov\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\ovodov\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\ovodov\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\ovodov\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\orlov_av\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\orlov_av\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\orlov_av\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\orlov_av\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\orlov_av\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\orlov_av\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\orb1\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\orb1\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\orb1\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\orb1\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\orb1\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\orb1\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nsk5_gbsh\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nsk5_gbsh\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nsk5_gbsh\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nsk5_gbsh\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nsk5_gbsh\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nsk5_gbsh\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nikolaeva\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nikolaeva\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nikolaeva\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nikolaeva\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nikolaeva\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nikolaeva\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nikolaev\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nikolaev\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nikolaev\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nikolaev\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nikolaev\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nikolaev\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nazarenko\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nazarenko\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nazarenko\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nazarenko\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nazarenko\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nazarenko\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\msk10\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\msk10\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\msk10\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\msk10\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\msk10\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\msk10\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\mossignal\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\mossignal\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\mossignal\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\mossignal\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\mossignal\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\mossignal\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moskow9\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moskow9\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moskow9\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moskow9\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moskow9\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moskow9\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moskow5\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moskow5\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moskow5\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moskow5\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moskow5\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moskow5\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moskow\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moshkovsky\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moshkovsky\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moshkovsky\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moshkovsky\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moshkovsky\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moshkovsky\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moscow2\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moscow2\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moscow2\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moscow2\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moscow2\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moscow2\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\morozova\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\morozova\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\morozova\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\morozova\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\morozova\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\morozova\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\melnik\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\melnik\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\melnik\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\melnik\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\melnik\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\melnik\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\machanova\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\machanova\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\machanova\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\machanova\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\machanova\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\machanova\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\lykov\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\lykov\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\lykov\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\lykov\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\lykov\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\lykov\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\limanskaya\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\limanskaya\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\limanskaya\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\limanskaya\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\limanskaya\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg4\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg2\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg2\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg2\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg2\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg2\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg2\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg1\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg1\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg1\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg1\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg1\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg1\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\salov\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\salov\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\salov\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\salov\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\salov\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\salov\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\retailt\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\retailt\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\retailt\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\retailt\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\retailt\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\retailt\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\retailm3\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\retailm3\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\retailm3\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\retailm3\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\retailm3\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\retailm3\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\retail\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\retail\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\retail\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\retail\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\retail\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\retail\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\remote\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\remote.TERMOFOR-RU\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\REMOTE.TERMOFOR-RU.005\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\remote.TERMOFOR-RU.004\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\Remote.TERMOFOR-RU.003\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\remote.TERMOFOR-RU.002\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\remote.TERMOFOR-RU.001\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\remote.TERMOFOR-RU.000\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\pronina\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\pronina\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\pronina\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\pronina\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\pronina\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\pronina\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\ovodov\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\ovodov\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\ovodov\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\ovodov\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\ovodov\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\ovodov\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\orlov_av\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\orlov_av\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\orlov_av\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\orlov_av\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\orlov_av\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\orlov_av\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\orb1\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\orb1\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\orb1\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\orb1\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\orb1\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\orb1\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nsk5_gbsh\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nsk5_gbsh\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nsk5_gbsh\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nsk5_gbsh\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nsk5_gbsh\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nsk5_gbsh\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nikolaeva\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nikolaeva\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nikolaeva\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nikolaeva\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nikolaeva\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nikolaeva\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nikolaev\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nikolaev\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nikolaev\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nikolaev\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nikolaev\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nikolaev\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nazarenko\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nazarenko\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nazarenko\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nazarenko\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nazarenko\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nazarenko\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\msk10\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\msk10\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\msk10\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\msk10\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\msk10\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\msk10\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\mossignal\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\mossignal\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\mossignal\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\mossignal\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\mossignal\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\mossignal\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moskow9\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moskow9\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moskow9\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moskow9\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moskow9\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moskow9\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moskow5\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moskow5\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moskow5\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moskow5\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moskow5\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moskow5\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moskow\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moshkovsky\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moshkovsky\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moshkovsky\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moshkovsky\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moshkovsky\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moshkovsky\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moscow2\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moscow2\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moscow2\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moscow2\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moscow2\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moscow2\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\morozova\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\morozova\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\morozova\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\morozova\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\morozova\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\morozova\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\melnik\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\melnik\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\melnik\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\melnik\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\melnik\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\melnik\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\machanova\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\machanova\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\machanova\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\machanova\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\machanova\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\machanova\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\lykov\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\lykov\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\lykov\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\lykov\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\lykov\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\lykov\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\limanskaya\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\limanskaya\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\limanskaya\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\limanskaya\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\limanskaya\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\limanskaya\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\Li\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\Li\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\Li\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\Li\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\Li\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\Li\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\levina\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\levina\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\levina\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\levina\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\levina\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\levina\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\lazarev\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\lazarev\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\lazarev\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\lazarev\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\lazarev\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\lazarev\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kravchenko\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kravchenko\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kravchenko\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kravchenko\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kravchenko\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kravchenko\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kolmogorova\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kolmogorova\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kolmogorova\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kolmogorova\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kolmogorova\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kolmogorova\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kolentionok\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kolentionok\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kolentionok\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kolentionok\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kolentionok\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kolentionok\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kirillova\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kirillova\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kirillova\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kirillova\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kirillova\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kirillova\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kirillov\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kirillov\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kirillov\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kirillov\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kirillov\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kirillov\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kirienko\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kirienko\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kirienko\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kirienko\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kirienko\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kirienko\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kemerovo2\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kemerovo2\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kemerovo2\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kemerovo2\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kemerovo2\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kemerovo2\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kemerovo\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kemerovo\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kemerovo\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kemerovo\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kemerovo\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kemerovo\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kazakova\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kazakova\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kazakova\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kazakova\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kazakova\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kazakova\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\izmaylova\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\izmaylova\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\izmaylova\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\izmaylova\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\izmaylova\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\izmaylova\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\ivanova_t\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\ivanova_t\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\ivanova_t\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\ivanova_t\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\ivanova_t\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\ivanova_t\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\ivanova_n\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\ivanova_n\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\ivanova_n\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\ivanova_n\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\ivanova_n\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\ivanova_n\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\hoholko\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\hoholko\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\hoholko\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\hoholko\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\hoholko\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\hoholko\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\germes\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\germes\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\germes\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\germes\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\germes\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\germes\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\garagulya\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\garagulya\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\garagulya\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\garagulya\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\garagulya\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\garagulya\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\futcom\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\futcom\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\futcom\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\futcom\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\futcom\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\limanskaya\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\Li\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\Li\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\Li\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\Li\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\Li\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\Li\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\levina\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\levina\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\levina\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\levina\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\levina\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\levina\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\lazarev\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\lazarev\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\lazarev\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\lazarev\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\lazarev\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\lazarev\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kravchenko\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kravchenko\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kravchenko\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kravchenko\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kravchenko\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kravchenko\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kolmogorova\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kolmogorova\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kolmogorova\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kolmogorova\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kolmogorova\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kolmogorova\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kolentionok\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kolentionok\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kolentionok\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kolentionok\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kolentionok\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kolentionok\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kirillova\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kirillova\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kirillova\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kirillova\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kirillova\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kirillova\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kirillov\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kirillov\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kirillov\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kirillov\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kirillov\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kirillov\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kirienko\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kirienko\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kirienko\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kirienko\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kirienko\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kirienko\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kemerovo2\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kemerovo2\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kemerovo2\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kemerovo2\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kemerovo2\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kemerovo2\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kemerovo\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kemerovo\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kemerovo\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kemerovo\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kemerovo\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kemerovo\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kazakova\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kazakova\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kazakova\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kazakova\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kazakova\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kazakova\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\izmaylova\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\izmaylova\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\izmaylova\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\izmaylova\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\izmaylova\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\izmaylova\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\ivanova_t\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\ivanova_t\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\ivanova_t\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\ivanova_t\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\ivanova_t\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\ivanova_t\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\ivanova_n\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\ivanova_n\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\ivanova_n\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\ivanova_n\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\ivanova_n\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\ivanova_n\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\hoholko\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\hoholko\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\hoholko\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\hoholko\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\hoholko\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\hoholko\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\germes\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\germes\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\germes\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\germes\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\germes\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\germes\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\garagulya\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\garagulya\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\garagulya\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\garagulya\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\garagulya\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\garagulya\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\futcom\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\futcom\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\futcom\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\futcom\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\futcom\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\futcom\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\fan\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\fan\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\fan\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\fan\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\fan\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\fan\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\expert\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\expert\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\expert\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\expert\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\expert\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\expert\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\erdle\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\erdle\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\erdle\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\erdle\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\erdle\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\erdle\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\edisoft\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\edisoft\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\edisoft\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\edisoft\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\edisoft\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\edisoft\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\dudchenko\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\dudchenko\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\dudchenko\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\dudchenko\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\dudchenko\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\dudchenko\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\donets\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\donets\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\donets\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\donets\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\donets\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\donets\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\dmadmin\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\dmadmin\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\dmadmin\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\dmadmin\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\dmadmin\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\dmadmin\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Default\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Default\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Default\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Default\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Default\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Default\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Default User\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Default User\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Default User\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Default User\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Default User\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Default User\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Classic .NET AppPool\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Classic .NET AppPool\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Classic .NET AppPool\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Classic .NET AppPool\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Classic .NET AppPool\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Classic .NET AppPool\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\chichamina\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\chichamina\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\chichamina\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\chichamina\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\chichamina\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\chichamina\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\chashchina\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\chashchina\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\chashchina\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\chashchina\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\chashchina\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\chashchina\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\buchneva\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\buchneva\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\buchneva\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\buchneva\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\buchneva\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\futcom\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\fan\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\fan\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\fan\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\fan\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\fan\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\fan\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\expert\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\expert\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\expert\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\expert\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\expert\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\expert\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\erdle\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\erdle\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\erdle\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\erdle\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\erdle\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\erdle\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\edisoft\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\edisoft\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\edisoft\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\edisoft\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\edisoft\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\edisoft\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\dudchenko\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\dudchenko\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\dudchenko\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\dudchenko\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\dudchenko\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\dudchenko\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\donets\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\donets\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\donets\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\donets\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\donets\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\donets\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\dmadmin\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\dmadmin\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\dmadmin\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\dmadmin\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\dmadmin\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\dmadmin\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Default\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Default\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Default\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Default\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Default\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Default\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Default User\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Default User\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Default User\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Default User\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Default User\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Default User\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Classic .NET AppPool\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Classic .NET AppPool\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Classic .NET AppPool\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Classic .NET AppPool\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Classic .NET AppPool\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Classic .NET AppPool\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\chichamina\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\chichamina\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\chichamina\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\chichamina\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\chichamina\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\chichamina\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\chashchina\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\chashchina\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\chashchina\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\chashchina\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\chashchina\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\chashchina\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\buchneva\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\buchneva\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\buchneva\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\buchneva\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\buchneva\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:56 - 000002906 _____ C:\Users\Все пользователи\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:56 - 000002906 _____ C:\Users\Public\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:56 - 000002906 _____ C:\ProgramData\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:56 - 000002216 _____ C:\Users\Все пользователи\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:56 - 000002216 _____ C:\Users\Public\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:56 - 000002216 _____ C:\ProgramData\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\buchneva\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\bsh\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\bsh\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\bsh\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\bsh\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\bsh\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\bsh\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\baskova\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\baskova\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\baskova\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\baskova\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\baskova\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\baskova\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\barskova\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\barskova\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\barskova\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\barskova\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\barskova\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\barskova\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\baranov\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\baranov\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\baranov\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\baranov\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\baranov\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\baranov\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\bakulin\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\bakulin\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\bakulin\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\bakulin\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\bakulin\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\bakulin\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\audit\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\audit\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\audit\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\audit\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\audit\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\audit\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\aristov\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\aristov\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\aristov\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\aristov\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\aristov\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\aristov\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\amorozova\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\amorozova\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\amorozova\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\amorozova\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\amorozova\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\amorozova\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\ProgramData\Microsoft\Windows\Start Menu\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\buchneva\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\bsh\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\bsh\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\bsh\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\bsh\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\bsh\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\bsh\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\baskova\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\baskova\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\baskova\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\baskova\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\baskova\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\baskova\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\barskova\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\barskova\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\barskova\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\barskova\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\barskova\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\barskova\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\baranov\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\baranov\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\baranov\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\baranov\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\baranov\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\baranov\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\bakulin\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\bakulin\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\bakulin\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\bakulin\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\bakulin\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\bakulin\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\audit\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\audit\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\audit\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\audit\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\audit\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\audit\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\aristov\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\aristov\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\aristov\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\aristov\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\aristov\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\aristov\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\amorozova\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\amorozova\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\amorozova\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\amorozova\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\amorozova\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\amorozova\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\ProgramData\Microsoft\Windows\Start Menu\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002906 _____ C:\Users\administrator\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002906 _____ C:\Users\administrator\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002906 _____ C:\Users\administrator\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002906 _____ C:\Users\administrator\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002906 _____ C:\Users\administrator\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002906 _____ C:\Users\administrator\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002906 _____ C:\Users\adm\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002906 _____ C:\Users\adm\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002906 _____ C:\Users\adm\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002906 _____ C:\Users\adm\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002906 _____ C:\Users\adm\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002906 _____ C:\Users\adm\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002216 _____ C:\Users\administrator\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002216 _____ C:\Users\administrator\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002216 _____ C:\Users\administrator\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002216 _____ C:\Users\administrator\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002216 _____ C:\Users\administrator\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002216 _____ C:\Users\administrator\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002216 _____ C:\Users\adm\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002216 _____ C:\Users\adm\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002216 _____ C:\Users\adm\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002216 _____ C:\Users\adm\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002216 _____ C:\Users\adm\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002216 _____ C:\Users\adm\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:48 - 2020-07-18 10:46 - 000002906 _____ C:\Users\1c\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:48 - 2020-07-18 10:46 - 000002906 _____ C:\Users\1c\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:48 - 2020-07-18 10:46 - 000002906 _____ C:\Users\1c\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:48 - 2020-07-18 10:46 - 000002906 _____ C:\Users\1c\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:48 - 2020-07-18 10:46 - 000002906 _____ C:\Users\1c\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:48 - 2020-07-18 10:46 - 000002906 _____ C:\Users\1c\!!! READ THIS !!!.hta
    2020-07-15 21:48 - 2020-07-18 10:46 - 000002216 _____ C:\Users\1c\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:48 - 2020-07-18 10:46 - 000002216 _____ C:\Users\1c\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:48 - 2020-07-18 10:46 - 000002216 _____ C:\Users\1c\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:48 - 2020-07-18 10:46 - 000002216 _____ C:\Users\1c\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:48 - 2020-07-18 10:46 - 000002216 _____ C:\Users\1c\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:48 - 2020-07-18 10:46 - 000002216 _____ C:\Users\1c\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:17 - 2020-07-18 10:56 - 000002906 _____ C:\Users\magazin\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:17 - 2020-07-18 10:56 - 000002906 _____ C:\Users\magazin\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:17 - 2020-07-18 10:56 - 000002906 _____ C:\Users\magazin\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:17 - 2020-07-18 10:56 - 000002906 _____ C:\Users\magazin\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:17 - 2020-07-18 10:56 - 000002906 _____ C:\Users\magazin\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:17 - 2020-07-18 10:56 - 000002906 _____ C:\Users\magazin\!!! READ THIS !!!.hta
    2020-07-15 21:17 - 2020-07-18 10:56 - 000002216 _____ C:\Users\magazin\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:17 - 2020-07-18 10:56 - 000002216 _____ C:\Users\magazin\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:17 - 2020-07-18 10:56 - 000002216 _____ C:\Users\magazin\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:17 - 2020-07-18 10:56 - 000002216 _____ C:\Users\magazin\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:17 - 2020-07-18 10:56 - 000002216 _____ C:\Users\magazin\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:17 - 2020-07-18 10:56 - 000002216 _____ C:\Users\magazin\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 15:08 - 2020-07-18 10:56 - 000002906 _____ C:\Users\Public\Downloads\!!! READ THIS !!!.hta
    2020-07-15 15:08 - 2020-07-18 10:56 - 000002906 _____ C:\Users\Public\!!! READ THIS !!!.hta
    2020-07-15 15:08 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moskow\Downloads\!!! READ THIS !!!.hta
    2020-07-15 15:08 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moskow\Documents\!!! READ THIS !!!.hta
    2020-07-15 15:08 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moskow\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 15:08 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moskow\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 15:08 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moskow\!!! READ THIS !!!.hta
    2020-07-15 15:08 - 2020-07-18 10:56 - 000002216 _____ C:\Users\Public\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 15:08 - 2020-07-18 10:56 - 000002216 _____ C:\Users\Public\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 15:08 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moskow\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 15:08 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moskow\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 15:08 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moskow\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 15:08 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moskow\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 15:08 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moskow\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 15:07 - 2020-07-18 10:56 - 000002906 _____ C:\Users\Все пользователи\Documents\!!! READ THIS !!!.hta
    2020-07-15 15:07 - 2020-07-18 10:56 - 000002906 _____ C:\Users\Public\Documents\!!! READ THIS !!!.hta
    2020-07-15 15:07 - 2020-07-18 10:56 - 000002906 _____ C:\ProgramData\Documents\!!! READ THIS !!!.hta
    2020-07-15 15:07 - 2020-07-18 10:56 - 000002216 _____ C:\Users\Все пользователи\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 15:07 - 2020-07-18 10:56 - 000002216 _____ C:\Users\Public\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 15:07 - 2020-07-18 10:56 - 000002216 _____ C:\ProgramData\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 15:07 - 2020-07-18 10:46 - 000002906 _____ C:\Users\Все пользователи\!!! READ THIS !!!.hta
    2020-07-15 15:07 - 2020-07-18 10:46 - 000002906 _____ C:\ProgramData\!!! READ THIS !!!.hta
    2020-07-15 15:07 - 2020-07-18 10:46 - 000002216 _____ C:\Users\Все пользователи\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 15:07 - 2020-07-18 10:46 - 000002216 _____ C:\ProgramData\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 15:07 - 2020-07-15 20:38 - 000002906 _____ C:\Users\Администратор.TERMOFOR-RU\Desktop\!!! READ THIS !!!.hta
    2020-07-15 15:07 - 2020-07-15 20:38 - 000002216 _____ C:\Users\Администратор.TERMOFOR-RU\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ () C:\Users\savoskin\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ () C:\Users\savoskin\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ () C:\Users\savoskin\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ () C:\Users\savoskin\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    End::
  • Скопируйте выделенный текст (правой кнопкой - Копировать).
  • Запустите FRST (FRST64) от имени администратора.
  • Нажмите Fix и подождите. Программа создаст лог-файл (Fixlog.txt). Прикрепите его к своему следующему сообщению.
Компьютер перезагрузите вручную.

Подробнее читайте в этом руководстве.
 

Nail84

Новый пользователь
Сообщения
3
Реакции
1
Пароли сменили, лишних админов отключили. Бекапы есть, но не все. На счет VPN приняли к сведению, реализуем. Высылаю fixlog
 

Вложения

  • Fixlog.txt
    220.7 KB · Просмотры: 1

Nail84

Новый пользователь
Сообщения
3
Реакции
1
Кстати, кажется файлик вируса нашелся, если это он конечно, пароль к архиву: 123
 

Вложения

  • [[email protected]][id=389ED2B9]setup.exe(пароль 123).7z
    187.7 KB · Просмотры: 1
  • Like
Реакции: akok

akok

Команда форума
Администратор
Ассоциация VN
Сообщения
20,621
Реакции
13,982
Только он сам себя зашифровал, а значит бесполезен.
 

akok

Команда форума
Администратор
Ассоциация VN
Сообщения
20,621
Реакции
13,982
На этом все, чем можно помочь. Данные восстанавливайте из резервных копий, если есть базы 1с, то можете попробовать восстановить (ссылка у меня в подписи).
 
Сверху Снизу