• Внимание. Восстановление баз 1С7, 1C8 и Mssql после атаки шифровальщика, подробности и отзывы читайте в профильной теме.

Решена без расшифровки Шифровальщик [email protected]

Nail84

Новый пользователь
Сообщения
3
Реакции
1
Баллы
3
Здравствуйте. Не посчастливилось напороться на шифровальщик [email protected]. Очень нужна ваша помощь в расшифровке. Высылаю логи и зашифрованные файлы. Самого файла шифровальщика к сожалению обнаружить не удалось. Заранее спасибо за помощь
 

Вложения

akok

Команда форума
Администратор
Сообщения
19,311
Реакции
13,329
Баллы
2,203
Удивительно, что так поздно взломали (Windows Server 2008). Смените пароли на RDP, а лучше скройте за VPN

По поводу дешифровки, ее нет (возможно @thyrex меня поправит). Бекапы живы?

Проверьте список пользователей, нет ли лишних администратров.

Примите к сведению - после выполнения скрипта все открытые вкладки браузеров будут закрыты, произойдет выход из аккаунтов, временные файлы, куки и кэш будут очищены.
  • Отключите до перезагрузки антивирус.
  • Выделите следующий код:
    Код:
    Start::
    CreateRestorePoint:
    Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\!!! READ THIS !!!.hta [2020-07-18] () [File not signed]
    Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HOW TO RECOVER ENCRYPTED FILES.txt [2020-07-18] () [File not signed]
    2020-07-18 17:22 - 2020-07-18 10:47 - 000002906 _____ C:\Users\viner\Downloads\!!! READ THIS !!!.hta
    2020-07-18 17:22 - 2020-07-18 10:47 - 000002906 _____ C:\Users\viner\Documents\!!! READ THIS !!!.hta
    2020-07-18 17:22 - 2020-07-18 10:47 - 000002906 _____ C:\Users\viner\Desktop\!!! READ THIS !!!.hta
    2020-07-18 17:22 - 2020-07-18 10:47 - 000002906 _____ C:\Users\viner\AppData\Roaming\Microsoft\Windows\Start Menu\!!! READ THIS !!!.hta
    2020-07-18 17:22 - 2020-07-18 10:47 - 000002906 _____ C:\Users\viner\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-18 17:22 - 2020-07-18 10:47 - 000002906 _____ C:\Users\viner\AppData\Local\!!! READ THIS !!!.hta
    2020-07-18 17:22 - 2020-07-18 10:47 - 000002906 _____ C:\Users\viner\!!! READ THIS !!!.hta
    2020-07-18 17:22 - 2020-07-18 10:47 - 000002216 _____ C:\Users\viner\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-18 17:22 - 2020-07-18 10:47 - 000002216 _____ C:\Users\viner\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-18 17:22 - 2020-07-18 10:47 - 000002216 _____ C:\Users\viner\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-18 17:22 - 2020-07-18 10:47 - 000002216 _____ C:\Users\viner\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-18 17:22 - 2020-07-18 10:47 - 000002216 _____ C:\Users\viner\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-18 17:22 - 2020-07-18 10:47 - 000002216 _____ C:\Users\viner\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-18 17:22 - 2020-07-18 10:47 - 000002216 _____ C:\Users\viner\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\zhurkina\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\zhurkina\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\zhurkina\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\zhurkina\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\zhurkina\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\zhurkina\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\vyguzov\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\vyguzov\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\vyguzov\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\vyguzov\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\vyguzov\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\vyguzov\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\voronin\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\voronin\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\voronin\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\voronin\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\voronin\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\voronin\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\volgograd\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\volgograd\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\volgograd\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\volgograd\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\volgograd\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\volgograd\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\vashurkin\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\vashurkin\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\vashurkin\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\vashurkin\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\vashurkin\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\vashurkin\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\vaschenko\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\vaschenko\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\vaschenko\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\vaschenko\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\vaschenko\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\vaschenko\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\valetova\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\valetova\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\valetova\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\valetova\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\valetova\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\valetova\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\ufa1\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\ufa1\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\ufa1\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\ufa1\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\ufa1\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\ufa1\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\torshenova\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\torshenova\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\torshenova\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\torshenova\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\torshenova\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\torshenova\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\tolstobrov\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\tolstobrov\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\tolstobrov\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\tolstobrov\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\tolstobrov\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\tolstobrov\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\tokareva\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\tokareva\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\tokareva\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\tokareva\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\tokareva\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\tokareva\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\test2\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\test2\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\test2\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\test2\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\test2\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\test2\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\TEMP\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\TEMP.TERMOFOR-RU\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\TEMP.TERMOFOR-RU.001\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\svezhinin\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\svezhinin\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\svezhinin\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\svezhinin\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\svezhinin\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\svezhinin\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\Stepanova\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\Stepanova\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\Stepanova\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\Stepanova\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\Stepanova\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\Stepanova\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\shevcov\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\shevcov\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\shevcov\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\shevcov\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\shevcov\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\shevcov\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\shashkova\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\shashkova\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\shashkova\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\shashkova\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\shashkova\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\shashkova\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\shareholder\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\shareholder\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\shareholder\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\shareholder\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\shareholder\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\shareholder\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\savoskin\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\savoskin\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\savoskin\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\savoskin\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\savoskin\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\savoskin\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\saratov\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\saratov\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\saratov\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\saratov\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\saratov\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\saratov\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\sankt-peterburg6\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\sankt-peterburg6\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ C:\Users\sankt-peterburg6\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\zhurkina\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\zhurkina\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\zhurkina\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\zhurkina\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\zhurkina\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\zhurkina\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\vyguzov\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\vyguzov\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\vyguzov\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\vyguzov\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\vyguzov\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\vyguzov\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\voronin\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\voronin\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\voronin\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\voronin\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\voronin\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\voronin\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\volgograd\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\volgograd\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\volgograd\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\volgograd\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\volgograd\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\volgograd\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\vashurkin\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\vashurkin\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\vashurkin\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\vashurkin\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\vashurkin\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\vashurkin\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\vaschenko\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\vaschenko\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\vaschenko\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\vaschenko\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\vaschenko\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\vaschenko\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\valetova\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\valetova\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\valetova\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\valetova\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\valetova\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\valetova\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\ufa1\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\ufa1\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\ufa1\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\ufa1\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\ufa1\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\ufa1\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\torshenova\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\torshenova\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\torshenova\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\torshenova\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\torshenova\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\torshenova\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\tolstobrov\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\tolstobrov\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\tolstobrov\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\tolstobrov\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\tolstobrov\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\tolstobrov\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\tokareva\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\tokareva\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\tokareva\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\tokareva\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\tokareva\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\tokareva\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\test2\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\test2\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\test2\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\test2\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\test2\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\test2\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\TEMP\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\TEMP.TERMOFOR-RU\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\TEMP.TERMOFOR-RU.001\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\svezhinin\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\svezhinin\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\svezhinin\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\svezhinin\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\svezhinin\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\svezhinin\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\Stepanova\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\Stepanova\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\Stepanova\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\Stepanova\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\Stepanova\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\Stepanova\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\shevcov\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\shevcov\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\shevcov\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\shevcov\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\shevcov\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\shevcov\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\shashkova\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\shashkova\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\shashkova\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\shashkova\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\shashkova\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\shashkova\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\shareholder\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\shareholder\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\shareholder\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\shareholder\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\shareholder\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\shareholder\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\savoskin\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\savoskin\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\savoskin\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\savoskin\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\savoskin\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\savoskin\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\saratov\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\saratov\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\saratov\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\saratov\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\saratov\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\saratov\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\sankt-peterburg6\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\sankt-peterburg6\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ C:\Users\sankt-peterburg6\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg6\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg6\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg6\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg5\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg5\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg5\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg5\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg5\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg5\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg4\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg4\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg4\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg4\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg4\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg6\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg6\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg6\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg5\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg5\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg5\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg5\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg5\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg5\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg4\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg4\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg4\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg4\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg4\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg4\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg2\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg2\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg2\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg2\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg2\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg2\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg1\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg1\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg1\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg1\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg1\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\sankt-peterburg1\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\salov\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\salov\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\salov\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\salov\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\salov\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\salov\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\retailt\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\retailt\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\retailt\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\retailt\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\retailt\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\retailt\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\retailm3\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\retailm3\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\retailm3\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\retailm3\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\retailm3\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\retailm3\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\retail\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\retail\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\retail\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\retail\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\retail\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\retail\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\remote\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\remote.TERMOFOR-RU\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\REMOTE.TERMOFOR-RU.005\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\remote.TERMOFOR-RU.004\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\Remote.TERMOFOR-RU.003\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\remote.TERMOFOR-RU.002\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\remote.TERMOFOR-RU.001\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\remote.TERMOFOR-RU.000\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\pronina\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\pronina\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\pronina\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\pronina\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\pronina\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\pronina\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\ovodov\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\ovodov\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\ovodov\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\ovodov\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\ovodov\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\ovodov\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\orlov_av\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\orlov_av\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\orlov_av\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\orlov_av\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\orlov_av\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\orlov_av\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\orb1\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\orb1\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\orb1\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\orb1\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\orb1\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\orb1\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nsk5_gbsh\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nsk5_gbsh\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nsk5_gbsh\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nsk5_gbsh\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nsk5_gbsh\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nsk5_gbsh\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nikolaeva\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nikolaeva\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nikolaeva\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nikolaeva\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nikolaeva\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nikolaeva\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nikolaev\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nikolaev\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nikolaev\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nikolaev\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nikolaev\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nikolaev\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nazarenko\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nazarenko\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nazarenko\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nazarenko\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nazarenko\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\nazarenko\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\msk10\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\msk10\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\msk10\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\msk10\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\msk10\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\msk10\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\mossignal\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\mossignal\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\mossignal\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\mossignal\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\mossignal\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\mossignal\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moskow9\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moskow9\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moskow9\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moskow9\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moskow9\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moskow9\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moskow5\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moskow5\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moskow5\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moskow5\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moskow5\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moskow5\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moskow\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moshkovsky\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moshkovsky\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moshkovsky\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moshkovsky\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moshkovsky\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moshkovsky\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moscow2\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moscow2\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moscow2\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moscow2\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moscow2\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moscow2\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\morozova\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\morozova\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\morozova\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\morozova\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\morozova\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\morozova\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\melnik\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\melnik\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\melnik\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\melnik\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\melnik\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\melnik\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\machanova\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\machanova\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\machanova\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\machanova\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\machanova\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\machanova\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\lykov\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\lykov\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\lykov\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\lykov\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\lykov\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\lykov\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\limanskaya\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\limanskaya\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\limanskaya\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\limanskaya\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002906 _____ C:\Users\limanskaya\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg4\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg2\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg2\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg2\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg2\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg2\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg2\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg1\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg1\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg1\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg1\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg1\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\sankt-peterburg1\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\salov\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\salov\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\salov\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\salov\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\salov\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\salov\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\retailt\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\retailt\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\retailt\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\retailt\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\retailt\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\retailt\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\retailm3\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\retailm3\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\retailm3\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\retailm3\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\retailm3\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\retailm3\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\retail\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\retail\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\retail\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\retail\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\retail\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\retail\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\remote\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\remote.TERMOFOR-RU\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\REMOTE.TERMOFOR-RU.005\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\remote.TERMOFOR-RU.004\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\Remote.TERMOFOR-RU.003\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\remote.TERMOFOR-RU.002\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\remote.TERMOFOR-RU.001\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\remote.TERMOFOR-RU.000\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\pronina\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\pronina\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\pronina\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\pronina\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\pronina\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\pronina\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\ovodov\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\ovodov\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\ovodov\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\ovodov\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\ovodov\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\ovodov\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\orlov_av\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\orlov_av\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\orlov_av\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\orlov_av\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\orlov_av\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\orlov_av\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\orb1\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\orb1\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\orb1\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\orb1\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\orb1\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\orb1\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nsk5_gbsh\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nsk5_gbsh\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nsk5_gbsh\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nsk5_gbsh\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nsk5_gbsh\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nsk5_gbsh\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nikolaeva\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nikolaeva\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nikolaeva\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nikolaeva\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nikolaeva\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nikolaeva\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nikolaev\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nikolaev\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nikolaev\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nikolaev\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nikolaev\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nikolaev\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nazarenko\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nazarenko\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nazarenko\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nazarenko\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nazarenko\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\nazarenko\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\msk10\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\msk10\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\msk10\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\msk10\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\msk10\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\msk10\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\mossignal\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\mossignal\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\mossignal\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\mossignal\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\mossignal\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\mossignal\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moskow9\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moskow9\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moskow9\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moskow9\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moskow9\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moskow9\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moskow5\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moskow5\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moskow5\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moskow5\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moskow5\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moskow5\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moskow\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moshkovsky\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moshkovsky\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moshkovsky\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moshkovsky\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moshkovsky\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moshkovsky\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moscow2\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moscow2\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moscow2\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moscow2\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moscow2\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moscow2\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\morozova\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\morozova\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\morozova\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\morozova\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\morozova\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\morozova\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\melnik\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\melnik\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\melnik\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\melnik\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\melnik\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\melnik\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\machanova\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\machanova\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\machanova\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\machanova\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\machanova\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\machanova\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\lykov\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\lykov\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\lykov\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\lykov\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\lykov\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\lykov\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\limanskaya\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\limanskaya\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\limanskaya\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\limanskaya\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:56 - 2020-07-18 10:56 - 000002216 _____ C:\Users\limanskaya\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\limanskaya\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\Li\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\Li\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\Li\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\Li\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\Li\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\Li\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\levina\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\levina\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\levina\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\levina\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\levina\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\levina\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\lazarev\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\lazarev\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\lazarev\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\lazarev\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\lazarev\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\lazarev\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kravchenko\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kravchenko\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kravchenko\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kravchenko\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kravchenko\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kravchenko\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kolmogorova\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kolmogorova\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kolmogorova\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kolmogorova\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kolmogorova\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kolmogorova\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kolentionok\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kolentionok\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kolentionok\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kolentionok\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kolentionok\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kolentionok\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kirillova\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kirillova\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kirillova\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kirillova\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kirillova\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kirillova\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kirillov\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kirillov\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kirillov\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kirillov\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kirillov\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kirillov\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kirienko\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kirienko\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kirienko\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kirienko\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kirienko\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kirienko\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kemerovo2\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kemerovo2\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kemerovo2\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kemerovo2\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kemerovo2\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kemerovo2\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kemerovo\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kemerovo\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kemerovo\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kemerovo\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kemerovo\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kemerovo\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kazakova\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kazakova\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kazakova\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kazakova\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kazakova\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\kazakova\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\izmaylova\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\izmaylova\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\izmaylova\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\izmaylova\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\izmaylova\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\izmaylova\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\ivanova_t\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\ivanova_t\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\ivanova_t\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\ivanova_t\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\ivanova_t\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\ivanova_t\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\ivanova_n\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\ivanova_n\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\ivanova_n\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\ivanova_n\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\ivanova_n\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\ivanova_n\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\hoholko\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\hoholko\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\hoholko\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\hoholko\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\hoholko\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\hoholko\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\germes\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\germes\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\germes\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\germes\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\germes\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\germes\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\garagulya\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\garagulya\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\garagulya\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\garagulya\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\garagulya\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\garagulya\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\futcom\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\futcom\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\futcom\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\futcom\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002906 _____ C:\Users\futcom\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\limanskaya\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\Li\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\Li\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\Li\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\Li\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\Li\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\Li\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\levina\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\levina\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\levina\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\levina\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\levina\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\levina\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\lazarev\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\lazarev\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\lazarev\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\lazarev\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\lazarev\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\lazarev\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kravchenko\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kravchenko\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kravchenko\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kravchenko\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kravchenko\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kravchenko\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kolmogorova\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kolmogorova\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kolmogorova\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kolmogorova\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kolmogorova\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kolmogorova\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kolentionok\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kolentionok\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kolentionok\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kolentionok\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kolentionok\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kolentionok\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kirillova\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kirillova\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kirillova\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kirillova\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kirillova\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kirillova\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kirillov\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kirillov\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kirillov\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kirillov\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kirillov\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kirillov\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kirienko\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kirienko\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kirienko\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kirienko\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kirienko\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kirienko\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kemerovo2\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kemerovo2\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kemerovo2\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kemerovo2\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kemerovo2\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kemerovo2\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kemerovo\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kemerovo\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kemerovo\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kemerovo\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kemerovo\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kemerovo\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kazakova\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kazakova\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kazakova\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kazakova\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kazakova\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\kazakova\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\izmaylova\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\izmaylova\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\izmaylova\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\izmaylova\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\izmaylova\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\izmaylova\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\ivanova_t\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\ivanova_t\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\ivanova_t\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\ivanova_t\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\ivanova_t\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\ivanova_t\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\ivanova_n\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\ivanova_n\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\ivanova_n\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\ivanova_n\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\ivanova_n\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\ivanova_n\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\hoholko\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\hoholko\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\hoholko\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\hoholko\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\hoholko\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\hoholko\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\germes\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\germes\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\germes\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\germes\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\germes\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\germes\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\garagulya\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\garagulya\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\garagulya\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\garagulya\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\garagulya\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\garagulya\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\futcom\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\futcom\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\futcom\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\futcom\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:55 - 2020-07-18 10:56 - 000002216 _____ C:\Users\futcom\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\futcom\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\fan\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\fan\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\fan\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\fan\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\fan\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\fan\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\expert\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\expert\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\expert\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\expert\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\expert\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\expert\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\erdle\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\erdle\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\erdle\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\erdle\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\erdle\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\erdle\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\edisoft\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\edisoft\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\edisoft\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\edisoft\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\edisoft\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\edisoft\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\dudchenko\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\dudchenko\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\dudchenko\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\dudchenko\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\dudchenko\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\dudchenko\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\donets\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\donets\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\donets\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\donets\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\donets\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\donets\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\dmadmin\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\dmadmin\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\dmadmin\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\dmadmin\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\dmadmin\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\dmadmin\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Default\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Default\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Default\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Default\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Default\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Default\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Default User\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Default User\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Default User\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Default User\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Default User\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Default User\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Classic .NET AppPool\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Classic .NET AppPool\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Classic .NET AppPool\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Classic .NET AppPool\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Classic .NET AppPool\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\Classic .NET AppPool\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\chichamina\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\chichamina\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\chichamina\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\chichamina\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\chichamina\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\chichamina\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\chashchina\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\chashchina\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\chashchina\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\chashchina\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\chashchina\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\chashchina\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\buchneva\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\buchneva\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\buchneva\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\buchneva\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002906 _____ C:\Users\buchneva\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\futcom\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\fan\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\fan\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\fan\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\fan\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\fan\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\fan\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\expert\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\expert\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\expert\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\expert\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\expert\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\expert\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\erdle\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\erdle\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\erdle\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\erdle\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\erdle\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\erdle\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\edisoft\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\edisoft\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\edisoft\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\edisoft\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\edisoft\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\edisoft\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\dudchenko\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\dudchenko\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\dudchenko\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\dudchenko\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\dudchenko\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\dudchenko\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\donets\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\donets\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\donets\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\donets\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\donets\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\donets\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\dmadmin\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\dmadmin\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\dmadmin\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\dmadmin\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\dmadmin\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\dmadmin\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Default\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Default\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Default\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Default\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Default\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Default\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Default User\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Default User\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Default User\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Default User\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Default User\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Default User\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Classic .NET AppPool\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Classic .NET AppPool\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Classic .NET AppPool\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Classic .NET AppPool\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Classic .NET AppPool\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\Classic .NET AppPool\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\chichamina\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\chichamina\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\chichamina\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\chichamina\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\chichamina\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\chichamina\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\chashchina\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\chashchina\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\chashchina\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\chashchina\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\chashchina\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\chashchina\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\buchneva\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\buchneva\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\buchneva\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\buchneva\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:50 - 2020-07-18 10:47 - 000002216 _____ C:\Users\buchneva\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:56 - 000002906 _____ C:\Users\Все пользователи\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:56 - 000002906 _____ C:\Users\Public\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:56 - 000002906 _____ C:\ProgramData\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:56 - 000002216 _____ C:\Users\Все пользователи\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:56 - 000002216 _____ C:\Users\Public\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:56 - 000002216 _____ C:\ProgramData\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\buchneva\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\bsh\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\bsh\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\bsh\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\bsh\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\bsh\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\bsh\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\baskova\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\baskova\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\baskova\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\baskova\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\baskova\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\baskova\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\barskova\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\barskova\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\barskova\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\barskova\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\barskova\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\barskova\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\baranov\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\baranov\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\baranov\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\baranov\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\baranov\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\baranov\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\bakulin\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\bakulin\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\bakulin\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\bakulin\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\bakulin\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\bakulin\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\audit\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\audit\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\audit\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\audit\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\audit\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\audit\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\aristov\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\aristov\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\aristov\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\aristov\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\aristov\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\aristov\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\amorozova\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\amorozova\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\amorozova\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\amorozova\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\amorozova\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\Users\amorozova\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002906 _____ C:\ProgramData\Microsoft\Windows\Start Menu\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\buchneva\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\bsh\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\bsh\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\bsh\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\bsh\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\bsh\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\bsh\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\baskova\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\baskova\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\baskova\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\baskova\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\baskova\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\baskova\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\barskova\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\barskova\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\barskova\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\barskova\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\barskova\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\barskova\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\baranov\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\baranov\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\baranov\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\baranov\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\baranov\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\baranov\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\bakulin\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\bakulin\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\bakulin\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\bakulin\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\bakulin\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\bakulin\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\audit\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\audit\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\audit\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\audit\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\audit\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\audit\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\aristov\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\aristov\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\aristov\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\aristov\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\aristov\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\aristov\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\amorozova\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\amorozova\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\amorozova\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\amorozova\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\amorozova\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\Users\amorozova\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:47 - 000002216 _____ C:\ProgramData\Microsoft\Windows\Start Menu\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002906 _____ C:\Users\administrator\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002906 _____ C:\Users\administrator\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002906 _____ C:\Users\administrator\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002906 _____ C:\Users\administrator\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002906 _____ C:\Users\administrator\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002906 _____ C:\Users\administrator\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002906 _____ C:\Users\adm\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002906 _____ C:\Users\adm\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002906 _____ C:\Users\adm\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002906 _____ C:\Users\adm\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002906 _____ C:\Users\adm\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002906 _____ C:\Users\adm\!!! READ THIS !!!.hta
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002216 _____ C:\Users\administrator\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002216 _____ C:\Users\administrator\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002216 _____ C:\Users\administrator\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002216 _____ C:\Users\administrator\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002216 _____ C:\Users\administrator\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002216 _____ C:\Users\administrator\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002216 _____ C:\Users\adm\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002216 _____ C:\Users\adm\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002216 _____ C:\Users\adm\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002216 _____ C:\Users\adm\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002216 _____ C:\Users\adm\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:49 - 2020-07-18 10:46 - 000002216 _____ C:\Users\adm\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:48 - 2020-07-18 10:46 - 000002906 _____ C:\Users\1c\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:48 - 2020-07-18 10:46 - 000002906 _____ C:\Users\1c\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:48 - 2020-07-18 10:46 - 000002906 _____ C:\Users\1c\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:48 - 2020-07-18 10:46 - 000002906 _____ C:\Users\1c\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:48 - 2020-07-18 10:46 - 000002906 _____ C:\Users\1c\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:48 - 2020-07-18 10:46 - 000002906 _____ C:\Users\1c\!!! READ THIS !!!.hta
    2020-07-15 21:48 - 2020-07-18 10:46 - 000002216 _____ C:\Users\1c\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:48 - 2020-07-18 10:46 - 000002216 _____ C:\Users\1c\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:48 - 2020-07-18 10:46 - 000002216 _____ C:\Users\1c\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:48 - 2020-07-18 10:46 - 000002216 _____ C:\Users\1c\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:48 - 2020-07-18 10:46 - 000002216 _____ C:\Users\1c\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:48 - 2020-07-18 10:46 - 000002216 _____ C:\Users\1c\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:17 - 2020-07-18 10:56 - 000002906 _____ C:\Users\magazin\Downloads\!!! READ THIS !!!.hta
    2020-07-15 21:17 - 2020-07-18 10:56 - 000002906 _____ C:\Users\magazin\Documents\!!! READ THIS !!!.hta
    2020-07-15 21:17 - 2020-07-18 10:56 - 000002906 _____ C:\Users\magazin\Desktop\!!! READ THIS !!!.hta
    2020-07-15 21:17 - 2020-07-18 10:56 - 000002906 _____ C:\Users\magazin\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:17 - 2020-07-18 10:56 - 000002906 _____ C:\Users\magazin\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:17 - 2020-07-18 10:56 - 000002906 _____ C:\Users\magazin\!!! READ THIS !!!.hta
    2020-07-15 21:17 - 2020-07-18 10:56 - 000002216 _____ C:\Users\magazin\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:17 - 2020-07-18 10:56 - 000002216 _____ C:\Users\magazin\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:17 - 2020-07-18 10:56 - 000002216 _____ C:\Users\magazin\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:17 - 2020-07-18 10:56 - 000002216 _____ C:\Users\magazin\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:17 - 2020-07-18 10:56 - 000002216 _____ C:\Users\magazin\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:17 - 2020-07-18 10:56 - 000002216 _____ C:\Users\magazin\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 15:08 - 2020-07-18 10:56 - 000002906 _____ C:\Users\Public\Downloads\!!! READ THIS !!!.hta
    2020-07-15 15:08 - 2020-07-18 10:56 - 000002906 _____ C:\Users\Public\!!! READ THIS !!!.hta
    2020-07-15 15:08 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moskow\Downloads\!!! READ THIS !!!.hta
    2020-07-15 15:08 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moskow\Documents\!!! READ THIS !!!.hta
    2020-07-15 15:08 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moskow\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 15:08 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moskow\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 15:08 - 2020-07-18 10:56 - 000002906 _____ C:\Users\moskow\!!! READ THIS !!!.hta
    2020-07-15 15:08 - 2020-07-18 10:56 - 000002216 _____ C:\Users\Public\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 15:08 - 2020-07-18 10:56 - 000002216 _____ C:\Users\Public\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 15:08 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moskow\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 15:08 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moskow\Downloads\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 15:08 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moskow\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 15:08 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moskow\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 15:08 - 2020-07-18 10:56 - 000002216 _____ C:\Users\moskow\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 15:07 - 2020-07-18 10:56 - 000002906 _____ C:\Users\Все пользователи\Documents\!!! READ THIS !!!.hta
    2020-07-15 15:07 - 2020-07-18 10:56 - 000002906 _____ C:\Users\Public\Documents\!!! READ THIS !!!.hta
    2020-07-15 15:07 - 2020-07-18 10:56 - 000002906 _____ C:\ProgramData\Documents\!!! READ THIS !!!.hta
    2020-07-15 15:07 - 2020-07-18 10:56 - 000002216 _____ C:\Users\Все пользователи\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 15:07 - 2020-07-18 10:56 - 000002216 _____ C:\Users\Public\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 15:07 - 2020-07-18 10:56 - 000002216 _____ C:\ProgramData\Documents\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 15:07 - 2020-07-18 10:46 - 000002906 _____ C:\Users\Все пользователи\!!! READ THIS !!!.hta
    2020-07-15 15:07 - 2020-07-18 10:46 - 000002906 _____ C:\ProgramData\!!! READ THIS !!!.hta
    2020-07-15 15:07 - 2020-07-18 10:46 - 000002216 _____ C:\Users\Все пользователи\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 15:07 - 2020-07-18 10:46 - 000002216 _____ C:\ProgramData\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 15:07 - 2020-07-15 20:38 - 000002906 _____ C:\Users\Администратор.TERMOFOR-RU\Desktop\!!! READ THIS !!!.hta
    2020-07-15 15:07 - 2020-07-15 20:38 - 000002216 _____ C:\Users\Администратор.TERMOFOR-RU\Desktop\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ () C:\Users\savoskin\AppData\Roaming\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ () C:\Users\savoskin\AppData\Roaming\HOW TO RECOVER ENCRYPTED FILES.txt
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002906 _____ () C:\Users\savoskin\AppData\Local\!!! READ THIS !!!.hta
    2020-07-15 21:57 - 2020-07-18 10:57 - 000002216 _____ () C:\Users\savoskin\AppData\Local\HOW TO RECOVER ENCRYPTED FILES.txt
    End::
  • Скопируйте выделенный текст (правой кнопкой - Копировать).
  • Запустите FRST (FRST64) от имени администратора.
  • Нажмите Fix и подождите. Программа создаст лог-файл (Fixlog.txt). Прикрепите его к своему следующему сообщению.
Компьютер перезагрузите вручную.

Подробнее читайте в этом руководстве.
 

Nail84

Новый пользователь
Сообщения
3
Реакции
1
Баллы
3
Пароли сменили, лишних админов отключили. Бекапы есть, но не все. На счет VPN приняли к сведению, реализуем. Высылаю fixlog
 

Вложения

akok

Команда форума
Администратор
Сообщения
19,311
Реакции
13,329
Баллы
2,203
Только он сам себя зашифровал, а значит бесполезен.
 

akok

Команда форума
Администратор
Сообщения
19,311
Реакции
13,329
Баллы
2,203
На этом все, чем можно помочь. Данные восстанавливайте из резервных копий, если есть базы 1с, то можете попробовать восстановить (ссылка у меня в подписи).
 
Сверху Снизу