• Внимание. Восстановление баз 1С7, 1C8 и Mssql после атаки шифровальщика, подробности и отзывы читайте в профильной теме.

Решена без расшифровки Шифровальщик sclown@elude.in

Nail84

Новый пользователь
Сообщения
3
Реакции
1
Баллы
3
Здравствуйте. Не посчастливилось напороться на шифровальщик sclown@elude.in. Очень нужна ваша помощь в расшифровке. Высылаю логи и зашифрованные файлы. Самого файла шифровальщика к сожалению обнаружить не удалось. Заранее спасибо за помощь
 

Вложения

  • Desktop.zip
    98.2 KB · Просмотры: 1
  • Addition.txt
    51.9 KB · Просмотры: 1
  • FRST.txt
    475 KB · Просмотры: 1

akok

Команда форума
Администратор
Сообщения
20,043
Реакции
13,701
Баллы
2,203
Удивительно, что так поздно взломали (Windows Server 2008). Смените пароли на RDP, а лучше скройте за VPN

По поводу дешифровки, ее нет (возможно @thyrex меня поправит). Бекапы живы?

Проверьте список пользователей, нет ли лишних администратров.

Примите к сведению - после выполнения скрипта все открытые вкладки браузеров будут закрыты, произойдет выход из аккаунтов, временные файлы, куки и кэш будут очищены.
  • Отключите до перезагрузки антивирус.
  • Выделите следующий код:
    Код:
    Start::
    CreateRestorePoint:
    Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\!!! READ THIS !!!.hta [2020-07-18] () [File not signed]
    Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HOW TO RECOVER ENCRYPTED FILES.txt [2020-07-18] () [File not signed]
    2020-07-18 17:22 - 2020-07-18 10:47 - 000002906 _____ C:\Users\viner\Downloads\!!! READ THIS !!!.hta
    2020-07-18 17:22 - 2020-07-18 10:47 - 000002906 _____ C:\Users\viner\Documents\!!! READ THIS !!!.hta
    2020-07-18 17:22 - 2020-07-18 10:47 - 000002906 _____ C:\Users\viner\Desktop\!!! READ THIS !!!.hta
    2020-07-18 17:22 - 2020-07-18 10:47 - 000002906 _____ C:\Users\viner\AppData\Roaming\Microsoft\Windows\Start Menu\!!! READ THIS !!!.hta
    2020-07-18 17:22 - 2020-07-18 10:47 - 000002906 _____ C:\Users\viner\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-18 17:22 - 2020-07-18 10:47 - 000002906 _____ C:\Users\viner\AppData\Local\!!! READ THIS !!!.hta
    2020-07-18 17:22 - 2020-07-18 10:47 - 000002906 _____ C:\Users\viner\!!! READ THIS !!!.hta
    2020-07-18 17:22 - 2020-07-18 10:47 - 000002216 _____ C:\Users\viner\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-18 17:22 - 2020-07-18 10:47 - 000002216 _____ C:\Users\viner\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-18 17:22 - 2020-07-18 10:47 - 000002216 _____ C:\Users\viner\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-18 17:22 - 2020-07-18 10:47 - 000002216 _____ C:\Users\viner\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-18 17:22 - 2020-07-18 10:47 - 000002216 _____ C:\Users\viner\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-18 17:22 - 2020-07-18 10:47 - 000002216 _____ C:\Users\viner\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-18 17:22 - 2020-07-18 10:47 - 000002216 _____ C:\Users\viner\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\zhurkina\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\zhurkina\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\zhurkina\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\zhurkina\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\zhurkina\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\zhurkina\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\vyguzov\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\vyguzov\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\vyguzov\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\vyguzov\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\vyguzov\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\vyguzov\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\voronin\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\voronin\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\voronin\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\voronin\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\voronin\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\voronin\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\volgograd\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\volgograd\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\volgograd\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\volgograd\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\volgograd\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\volgograd\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\vashurkin\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\vashurkin\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\vashurkin\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\vashurkin\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\vashurkin\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\vashurkin\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\vaschenko\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\vaschenko\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\vaschenko\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\vaschenko\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\vaschenko\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\vaschenko\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\valetova\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\valetova\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\valetova\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\valetova\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\valetova\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\valetova\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\ufa1\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\ufa1\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\ufa1\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\ufa1\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\ufa1\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\ufa1\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\torshenova\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\torshenova\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\torshenova\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\torshenova\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\torshenova\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\torshenova\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\tolstobrov\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\tolstobrov\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\tolstobrov\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\tolstobrov\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\tolstobrov\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\tolstobrov\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\tokareva\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\tokareva\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\tokareva\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\tokareva\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\tokareva\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\tokareva\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\test2\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\test2\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\test2\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\test2\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\test2\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\test2\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\TEMP\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\TEMP.TERMOFOR-RU\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\TEMP.TERMOFOR-RU.001\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\svezhinin\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\svezhinin\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\svezhinin\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\svezhinin\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\svezhinin\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\svezhinin\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\Stepanova\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\Stepanova\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\Stepanova\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\Stepanova\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\Stepanova\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\Stepanova\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\shevcov\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\shevcov\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\shevcov\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\shevcov\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\shevcov\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\shevcov\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\shashkova\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\shashkova\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\shashkova\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\shashkova\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\shashkova\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\shashkova\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\shareholder\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\shareholder\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\shareholder\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\shareholder\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\shareholder\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\shareholder\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\savoskin\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\savoskin\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\savoskin\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\savoskin\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\savoskin\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\savoskin\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\saratov\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\saratov\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\saratov\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\saratov\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\saratov\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\saratov\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\sankt-peterburg6\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\sankt-peterburg6\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\sankt-peterburg6\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\zhurkina\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\zhurkina\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\zhurkina\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\zhurkina\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\zhurkina\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\zhurkina\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\vyguzov\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\vyguzov\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\vyguzov\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\vyguzov\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\vyguzov\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\vyguzov\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\voronin\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\voronin\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\voronin\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\voronin\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\voronin\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\voronin\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\volgograd\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\volgograd\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\volgograd\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\volgograd\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\volgograd\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\volgograd\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\vashurkin\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\vashurkin\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\vashurkin\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\vashurkin\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\vashurkin\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\vashurkin\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\vaschenko\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\vaschenko\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\vaschenko\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\vaschenko\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\vaschenko\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\vaschenko\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\valetova\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\valetova\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\valetova\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\valetova\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\valetova\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\valetova\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\ufa1\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\ufa1\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\ufa1\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\ufa1\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\ufa1\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\ufa1\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\torshenova\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\torshenova\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\torshenova\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\torshenova\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\torshenova\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\torshenova\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\tolstobrov\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\tolstobrov\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\tolstobrov\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\tolstobrov\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\tolstobrov\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\tolstobrov\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\tokareva\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\tokareva\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\tokareva\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\tokareva\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\tokareva\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\tokareva\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\test2\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\test2\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\test2\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\test2\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\test2\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\test2\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\TEMP\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\TEMP.TERMOFOR-RU\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\TEMP.TERMOFOR-RU.001\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\svezhinin\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\svezhinin\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\svezhinin\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\svezhinin\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\svezhinin\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\svezhinin\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\Stepanova\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\Stepanova\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\Stepanova\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\Stepanova\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\Stepanova\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\Stepanova\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\shevcov\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\shevcov\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\shevcov\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\shevcov\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\shevcov\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\shevcov\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\shashkova\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\shashkova\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\shashkova\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\shashkova\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\shashkova\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\shashkova\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\shareholder\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\shareholder\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\shareholder\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\shareholder\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\shareholder\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\shareholder\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\savoskin\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\savoskin\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\savoskin\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\savoskin\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\savoskin\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\savoskin\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\saratov\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\saratov\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\saratov\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\saratov\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\saratov\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\saratov\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\sankt-peterburg6\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\sankt-peterburg6\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\sankt-peterburg6\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg6\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg6\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg6\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg5\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg5\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg5\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg5\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg5\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg5\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg4\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg4\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg4\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg4\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg4\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg6\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg6\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg6\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg5\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg5\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg5\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg5\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg5\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg5\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg4\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg4\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg4\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg4\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg4\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg4\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg2\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg2\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg2\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg2\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg2\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg2\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg1\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg1\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg1\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg1\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg1\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg1\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\salov\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\salov\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\salov\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\salov\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\salov\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\salov\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\retailt\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\retailt\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\retailt\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\retailt\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\retailt\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\retailt\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\retailm3\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\retailm3\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\retailm3\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\retailm3\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\retailm3\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\retailm3\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\retail\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\retail\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\retail\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\retail\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\retail\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\retail\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\remote\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\remote.TERMOFOR-RU\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\REMOTE.TERMOFOR-RU.005\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\remote.TERMOFOR-RU.004\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\Remote.TERMOFOR-RU.003\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\remote.TERMOFOR-RU.002\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\remote.TERMOFOR-RU.001\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\remote.TERMOFOR-RU.000\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\pronina\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\pronina\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\pronina\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\pronina\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\pronina\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\pronina\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\ovodov\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\ovodov\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\ovodov\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\ovodov\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\ovodov\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\ovodov\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\orlov_av\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\orlov_av\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\orlov_av\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\orlov_av\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\orlov_av\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\orlov_av\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\orb1\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\orb1\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\orb1\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\orb1\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\orb1\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\orb1\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nsk5_gbsh\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nsk5_gbsh\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nsk5_gbsh\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nsk5_gbsh\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nsk5_gbsh\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nsk5_gbsh\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nikolaeva\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nikolaeva\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nikolaeva\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nikolaeva\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nikolaeva\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nikolaeva\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nikolaev\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nikolaev\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nikolaev\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nikolaev\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nikolaev\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nikolaev\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nazarenko\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nazarenko\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nazarenko\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nazarenko\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nazarenko\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nazarenko\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\msk10\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\msk10\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\msk10\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\msk10\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\msk10\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\msk10\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\mossignal\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\mossignal\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\mossignal\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\mossignal\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\mossignal\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\mossignal\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moskow9\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moskow9\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moskow9\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moskow9\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moskow9\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moskow9\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moskow5\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moskow5\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moskow5\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moskow5\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moskow5\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moskow5\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moskow\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moshkovsky\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moshkovsky\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moshkovsky\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moshkovsky\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moshkovsky\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moshkovsky\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moscow2\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moscow2\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moscow2\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moscow2\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moscow2\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moscow2\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\morozova\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\morozova\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\morozova\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\morozova\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\morozova\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\morozova\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\melnik\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\melnik\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\melnik\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\melnik\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\melnik\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\melnik\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\machanova\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\machanova\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\machanova\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\machanova\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\machanova\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\machanova\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\lykov\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\lykov\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\lykov\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\lykov\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\lykov\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\lykov\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\limanskaya\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\limanskaya\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\limanskaya\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\limanskaya\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\limanskaya\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg4\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg2\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg2\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg2\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg2\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg2\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg2\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg1\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg1\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg1\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg1\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg1\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg1\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\salov\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\salov\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\salov\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\salov\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\salov\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\salov\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\retailt\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\retailt\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\retailt\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\retailt\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\retailt\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\retailt\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\retailm3\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\retailm3\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\retailm3\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\retailm3\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\retailm3\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\retailm3\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\retail\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\retail\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\retail\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\retail\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\retail\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\retail\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\remote\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\remote.TERMOFOR-RU\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\REMOTE.TERMOFOR-RU.005\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\remote.TERMOFOR-RU.004\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\Remote.TERMOFOR-RU.003\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\remote.TERMOFOR-RU.002\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\remote.TERMOFOR-RU.001\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\remote.TERMOFOR-RU.000\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\pronina\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\pronina\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\pronina\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\pronina\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\pronina\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\pronina\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\ovodov\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\ovodov\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\ovodov\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\ovodov\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\ovodov\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\ovodov\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\orlov_av\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\orlov_av\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\orlov_av\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\orlov_av\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\orlov_av\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\orlov_av\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\orb1\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\orb1\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\orb1\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\orb1\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\orb1\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\orb1\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nsk5_gbsh\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nsk5_gbsh\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nsk5_gbsh\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nsk5_gbsh\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nsk5_gbsh\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nsk5_gbsh\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nikolaeva\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nikolaeva\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nikolaeva\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nikolaeva\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nikolaeva\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nikolaeva\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nikolaev\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nikolaev\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nikolaev\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nikolaev\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nikolaev\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nikolaev\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nazarenko\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nazarenko\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nazarenko\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nazarenko\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nazarenko\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nazarenko\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\msk10\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\msk10\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\msk10\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\msk10\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\msk10\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\msk10\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\mossignal\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\mossignal\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\mossignal\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\mossignal\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\mossignal\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\mossignal\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moskow9\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moskow9\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moskow9\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moskow9\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moskow9\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moskow9\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moskow5\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moskow5\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moskow5\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moskow5\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moskow5\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moskow5\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moskow\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moshkovsky\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moshkovsky\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moshkovsky\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moshkovsky\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moshkovsky\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moshkovsky\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moscow2\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moscow2\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moscow2\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moscow2\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moscow2\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moscow2\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\morozova\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\morozova\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\morozova\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\morozova\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\morozova\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\morozova\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\melnik\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\melnik\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\melnik\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\melnik\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\melnik\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\melnik\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\machanova\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\machanova\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\machanova\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\machanova\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\machanova\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\machanova\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\lykov\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\lykov\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\lykov\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\lykov\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\lykov\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\lykov\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\limanskaya\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\limanskaya\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\limanskaya\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\limanskaya\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\limanskaya\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\limanskaya\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\Li\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\Li\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\Li\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\Li\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\Li\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\Li\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\levina\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\levina\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\levina\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\levina\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\levina\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\levina\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\lazarev\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\lazarev\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\lazarev\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\lazarev\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\lazarev\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\lazarev\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kravchenko\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kravchenko\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kravchenko\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kravchenko\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kravchenko\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kravchenko\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kolmogorova\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kolmogorova\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kolmogorova\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kolmogorova\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kolmogorova\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kolmogorova\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kolentionok\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kolentionok\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kolentionok\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kolentionok\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kolentionok\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kolentionok\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kirillova\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kirillova\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kirillova\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kirillova\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kirillova\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kirillova\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kirillov\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kirillov\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kirillov\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kirillov\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kirillov\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kirillov\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kirienko\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kirienko\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kirienko\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kirienko\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kirienko\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kirienko\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kemerovo2\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kemerovo2\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kemerovo2\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kemerovo2\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kemerovo2\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kemerovo2\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kemerovo\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kemerovo\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kemerovo\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kemerovo\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kemerovo\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kemerovo\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kazakova\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kazakova\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kazakova\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kazakova\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kazakova\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kazakova\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\izmaylova\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\izmaylova\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\izmaylova\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\izmaylova\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\izmaylova\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\izmaylova\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\ivanova_t\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\ivanova_t\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\ivanova_t\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\ivanova_t\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\ivanova_t\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\ivanova_t\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\ivanova_n\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\ivanova_n\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\ivanova_n\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\ivanova_n\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\ivanova_n\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\ivanova_n\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\hoholko\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\hoholko\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\hoholko\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\hoholko\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\hoholko\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\hoholko\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\germes\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\germes\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\germes\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\germes\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\germes\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\germes\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\garagulya\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\garagulya\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\garagulya\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\garagulya\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\garagulya\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\garagulya\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\futcom\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\futcom\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\futcom\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\futcom\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\futcom\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\limanskaya\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\Li\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\Li\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\Li\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\Li\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\Li\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\Li\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\levina\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\levina\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\levina\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\levina\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\levina\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\levina\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\lazarev\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\lazarev\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\lazarev\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\lazarev\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\lazarev\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\lazarev\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kravchenko\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kravchenko\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kravchenko\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kravchenko\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kravchenko\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kravchenko\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kolmogorova\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kolmogorova\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kolmogorova\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kolmogorova\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kolmogorova\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kolmogorova\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kolentionok\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kolentionok\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kolentionok\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kolentionok\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kolentionok\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kolentionok\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kirillova\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kirillova\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kirillova\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kirillova\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kirillova\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kirillova\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kirillov\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kirillov\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kirillov\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kirillov\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kirillov\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kirillov\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kirienko\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kirienko\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kirienko\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kirienko\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kirienko\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kirienko\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kemerovo2\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kemerovo2\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kemerovo2\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kemerovo2\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kemerovo2\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kemerovo2\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kemerovo\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kemerovo\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kemerovo\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kemerovo\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kemerovo\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kemerovo\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kazakova\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kazakova\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kazakova\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kazakova\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kazakova\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kazakova\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\izmaylova\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\izmaylova\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\izmaylova\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\izmaylova\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\izmaylova\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\izmaylova\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\ivanova_t\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\ivanova_t\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\ivanova_t\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\ivanova_t\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\ivanova_t\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\ivanova_t\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\ivanova_n\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\ivanova_n\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\ivanova_n\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\ivanova_n\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\ivanova_n\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\ivanova_n\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\hoholko\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\hoholko\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\hoholko\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\hoholko\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\hoholko\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\hoholko\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\germes\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\germes\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\germes\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\germes\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\germes\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\germes\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\garagulya\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\garagulya\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\garagulya\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\garagulya\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\garagulya\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\garagulya\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\futcom\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\futcom\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\futcom\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\futcom\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\futcom\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\futcom\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\fan\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\fan\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\fan\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\fan\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\fan\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\fan\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\expert\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\expert\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\expert\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\expert\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\expert\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\expert\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\erdle\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\erdle\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\erdle\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\erdle\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\erdle\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\erdle\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\edisoft\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\edisoft\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\edisoft\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\edisoft\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\edisoft\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\edisoft\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\dudchenko\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\dudchenko\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\dudchenko\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\dudchenko\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\dudchenko\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\dudchenko\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\donets\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\donets\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\donets\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\donets\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\donets\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\donets\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\dmadmin\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\dmadmin\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\dmadmin\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\dmadmin\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\dmadmin\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\dmadmin\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Default\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Default\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Default\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Default\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Default\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Default\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Default User\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Default User\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Default User\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Default User\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Default User\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Default User\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Classic .NET AppPool\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Classic .NET AppPool\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Classic .NET AppPool\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Classic .NET AppPool\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Classic .NET AppPool\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Classic .NET AppPool\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\chichamina\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\chichamina\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\chichamina\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\chichamina\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\chichamina\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\chichamina\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\chashchina\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\chashchina\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\chashchina\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\chashchina\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\chashchina\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\chashchina\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\buchneva\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\buchneva\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\buchneva\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\buchneva\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\buchneva\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\futcom\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\fan\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\fan\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\fan\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\fan\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\fan\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\fan\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\expert\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\expert\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\expert\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\expert\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\expert\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\expert\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\erdle\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\erdle\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\erdle\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\erdle\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\erdle\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\erdle\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\edisoft\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\edisoft\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\edisoft\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\edisoft\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\edisoft\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\edisoft\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\dudchenko\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\dudchenko\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\dudchenko\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\dudchenko\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\dudchenko\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\dudchenko\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\donets\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\donets\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\donets\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\donets\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\donets\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\donets\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\dmadmin\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\dmadmin\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\dmadmin\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\dmadmin\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\dmadmin\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\dmadmin\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Default\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Default\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Default\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Default\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Default\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Default\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Default User\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Default User\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Default User\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Default User\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Default User\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Default User\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Classic .NET AppPool\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Classic .NET AppPool\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Classic .NET AppPool\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Classic .NET AppPool\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Classic .NET AppPool\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Classic .NET AppPool\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\chichamina\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\chichamina\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\chichamina\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\chichamina\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\chichamina\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\chichamina\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\chashchina\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\chashchina\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\chashchina\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\chashchina\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\chashchina\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\chashchina\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\buchneva\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\buchneva\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\buchneva\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\buchneva\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\buchneva\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:56 - 000002906 _____ C:\Users\Все пользователи\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:56 - 000002906 _____ C:\Users\Public\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:56 - 000002906 _____ C:\ProgramData\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:56 - 000002216 _____ C:\Users\Все пользователи\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:56 - 000002216 _____ C:\Users\Public\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:56 - 000002216 _____ C:\ProgramData\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\buchneva\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\bsh\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\bsh\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\bsh\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\bsh\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\bsh\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\bsh\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\baskova\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\baskova\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\baskova\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\baskova\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\baskova\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\baskova\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\barskova\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\barskova\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\barskova\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\barskova\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\barskova\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\barskova\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\baranov\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\baranov\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\baranov\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\baranov\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\baranov\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\baranov\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\bakulin\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\bakulin\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\bakulin\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\bakulin\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\bakulin\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\bakulin\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\audit\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\audit\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\audit\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\audit\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\audit\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\audit\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\aristov\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\aristov\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\aristov\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\aristov\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\aristov\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\aristov\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\amorozova\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\amorozova\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\amorozova\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\amorozova\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\amorozova\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\amorozova\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\ProgramData\Microsoft\Windows\Start Menu\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\buchneva\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\bsh\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\bsh\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\bsh\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\bsh\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\bsh\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\bsh\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\baskova\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\baskova\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\baskova\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\baskova\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\baskova\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\baskova\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\barskova\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\barskova\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\barskova\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\barskova\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\barskova\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\barskova\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\baranov\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\baranov\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\baranov\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\baranov\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\baranov\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\baranov\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\bakulin\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\bakulin\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\bakulin\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\bakulin\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\bakulin\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\bakulin\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\audit\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\audit\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\audit\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\audit\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\audit\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\audit\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\aristov\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\aristov\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\aristov\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\aristov\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\aristov\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\aristov\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\amorozova\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\amorozova\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\amorozova\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\amorozova\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\amorozova\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\amorozova\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\ProgramData\Microsoft\Windows\Start Menu\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002906 _____ C:\Users\administrator\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002906 _____ C:\Users\administrator\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002906 _____ C:\Users\administrator\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002906 _____ C:\Users\administrator\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002906 _____ C:\Users\administrator\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002906 _____ C:\Users\administrator\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002906 _____ C:\Users\adm\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002906 _____ C:\Users\adm\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002906 _____ C:\Users\adm\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002906 _____ C:\Users\adm\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002906 _____ C:\Users\adm\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002906 _____ C:\Users\adm\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002216 _____ C:\Users\administrator\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002216 _____ C:\Users\administrator\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002216 _____ C:\Users\administrator\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002216 _____ C:\Users\administrator\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002216 _____ C:\Users\administrator\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002216 _____ C:\Users\administrator\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002216 _____ C:\Users\adm\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002216 _____ C:\Users\adm\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002216 _____ C:\Users\adm\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002216 _____ C:\Users\adm\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002216 _____ C:\Users\adm\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002216 _____ C:\Users\adm\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:48 - 2020-07-18 10:46 - 000002906 _____ C:\Users\1c\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:48 - 2020-07-18 10:46 - 000002906 _____ C:\Users\1c\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:48 - 2020-07-18 10:46 - 000002906 _____ C:\Users\1c\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:48 - 2020-07-18 10:46 - 000002906 _____ C:\Users\1c\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:48 - 2020-07-18 10:46 - 000002906 _____ C:\Users\1c\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:48 - 2020-07-18 10:46 - 000002906 _____ C:\Users\1c\!!! READ THIS !!!.hta
    2020-07-15 21:48 - 2020-07-18 10:46 - 000002216 _____ C:\Users\1c\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:48 - 2020-07-18 10:46 - 000002216 _____ C:\Users\1c\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:48 - 2020-07-18 10:46 - 000002216 _____ C:\Users\1c\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:48 - 2020-07-18 10:46 - 000002216 _____ C:\Users\1c\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:48 - 2020-07-18 10:46 - 000002216 _____ C:\Users\1c\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:48 - 2020-07-18 10:46 - 000002216 _____ C:\Users\1c\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:17 - 2020-07-18 10:56 - 000002906 _____ C:\Users\magazin\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:17 - 2020-07-18 10:56 - 000002906 _____ C:\Users\magazin\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:17 - 2020-07-18 10:56 - 000002906 _____ C:\Users\magazin\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:17 - 2020-07-18 10:56 - 000002906 _____ C:\Users\magazin\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:17 - 2020-07-18 10:56 - 000002906 _____ C:\Users\magazin\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:17 - 2020-07-18 10:56 - 000002906 _____ C:\Users\magazin\!!! READ THIS !!!.hta
    2020-07-15 21:17 - 2020-07-18 10:56 - 000002216 _____ C:\Users\magazin\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:17 - 2020-07-18 10:56 - 000002216 _____ C:\Users\magazin\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:17 - 2020-07-18 10:56 - 000002216 _____ C:\Users\magazin\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:17 - 2020-07-18 10:56 - 000002216 _____ C:\Users\magazin\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:17 - 2020-07-18 10:56 - 000002216 _____ C:\Users\magazin\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:17 - 2020-07-18 10:56 - 000002216 _____ C:\Users\magazin\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 15:08 - 2020-07-18 10:56 - 000002906 _____ C:\Users\Public\Downloads\!!! READ THIS !!!.hta
    2020-07-15 15:08 - 2020-07-18 10:56 - 000002906 _____ C:\Users\Public\!!! READ THIS !!!.hta
    2020-07-15 15:08 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moskow\Downloads\!!! READ THIS !!!.hta
    2020-07-15 15:08 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moskow\Documents\!!! READ THIS !!!.hta
    2020-07-15 15:08 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moskow\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 15:08 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moskow\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 15:08 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moskow\!!! READ THIS !!!.hta
    2020-07-15 15:08 - 2020-07-18 10:56 - 000002216 _____ C:\Users\Public\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 15:08 - 2020-07-18 10:56 - 000002216 _____ C:\Users\Public\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 15:08 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moskow\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 15:08 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moskow\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 15:08 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moskow\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 15:08 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moskow\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 15:08 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moskow\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 15:07 - 2020-07-18 10:56 - 000002906 _____ C:\Users\Все пользователи\Documents\!!! READ THIS !!!.hta
    2020-07-15 15:07 - 2020-07-18 10:56 - 000002906 _____ C:\Users\Public\Documents\!!! READ THIS !!!.hta
    2020-07-15 15:07 - 2020-07-18 10:56 - 000002906 _____ C:\ProgramData\Documents\!!! READ THIS !!!.hta
    2020-07-15 15:07 - 2020-07-18 10:56 - 000002216 _____ C:\Users\Все пользователи\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 15:07 - 2020-07-18 10:56 - 000002216 _____ C:\Users\Public\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 15:07 - 2020-07-18 10:56 - 000002216 _____ C:\ProgramData\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 15:07 - 2020-07-18 10:46 - 000002906 _____ C:\Users\Все пользователи\!!! READ THIS !!!.hta
    2020-07-15 15:07 - 2020-07-18 10:46 - 000002906 _____ C:\ProgramData\!!! READ THIS !!!.hta
    2020-07-15 15:07 - 2020-07-18 10:46 - 000002216 _____ C:\Users\Все пользователи\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 15:07 - 2020-07-18 10:46 - 000002216 _____ C:\ProgramData\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 15:07 - 2020-07-15 20:38 - 000002906 _____ C:\Users\Администратор.TERMOFOR-RU\Desktop\!!! READ THIS !!!.hta
    2020-07-15 15:07 - 2020-07-15 20:38 - 000002216 _____ C:\Users\Администратор.TERMOFOR-RU\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ () C:\Users\savoskin\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ () C:\Users\savoskin\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ () C:\Users\savoskin\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ () C:\Users\savoskin\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    End::
  • Скопируйте выделенный текст (правой кнопкой - Копировать).
  • Запустите FRST (FRST64) от имени администратора.
  • Нажмите Fix и подождите. Программа создаст лог-файл (Fixlog.txt). Прикрепите его к своему следующему сообщению.
Компьютер перезагрузите вручную.

Подробнее читайте в этом руководстве.
 

Nail84

Новый пользователь
Сообщения
3
Реакции
1
Баллы
3
Пароли сменили, лишних админов отключили. Бекапы есть, но не все. На счет VPN приняли к сведению, реализуем. Высылаю fixlog
 

Вложения

  • Fixlog.txt
    220.7 KB · Просмотры: 1

Nail84

Новый пользователь
Сообщения
3
Реакции
1
Баллы
3
Кстати, кажется файлик вируса нашелся, если это он конечно, пароль к архиву: 123
 

Вложения

  • [sclown@elude.in][id=389ED2B9]setup.exe(пароль 123).7z
    187.7 KB · Просмотры: 1
  • Like
Реакции: akok

akok

Команда форума
Администратор
Сообщения
20,043
Реакции
13,701
Баллы
2,203
Только он сам себя зашифровал, а значит бесполезен.
 

akok

Команда форума
Администратор
Сообщения
20,043
Реакции
13,701
Баллы
2,203
На этом все, чем можно помочь. Данные восстанавливайте из резервных копий, если есть базы 1с, то можете попробовать восстановить (ссылка у меня в подписи).
 
Сверху Снизу