Перейти к содержанию

Шифровальщик Globeimposter-Alpha666qqaz

Толеген
 Share

Рекомендуемые сообщения

Толеген Новичок

Толеген

Опубликовано
Опубликовано

Здравствуйте. Сервер с базой данных был заражен вирусом шифровальщиком-вымогателем. По наименованию файлов предполагаю, что это Globeimposter-Alpha666qqz. Поиск в интернете не дал результатов. Прошу рассмотреть файлы и выслать дешифратор

Файлы

зараженныефайлы.rar farbar logs.zip

Ссылка на комментарий
Поделиться на другие сайты
Толеген Новичок

Толеген

Опубликовано
  • Автор
Опубликовано

Жаль. Нужна чистка мусора.
Шифровальщик после шифрования удаляет исходные файлы или нет ? 
Можете пожалуйста дать инструкции по чистке

Ссылка на комментарий
Поделиться на другие сайты
thyrex Мудрец

thyrex

Опубликовано
Опубликовано

1. Выделите следующий код: 

Start::
CreateRestorePoint:
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
Startup: C:\Users\aarykbaeva\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\.A8D68E42E88BFDF0D21E [2021-03-27] () [File not signed]
Startup: C:\Users\aarykbaeva\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HOW TO BACK YOUR FILES.txt [2021-03-27] () [File not signed]
Startup: C:\Users\Abramov.a\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\.A8D68E42E88BFDF0D21E [2021-03-27] () [File not signed]
Startup: C:\Users\Abramov.a\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HOW TO BACK YOUR FILES.txt [2021-03-27] () [File not signed]
Startup: C:\Users\acronis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\.A8D68E42E88BFDF0D21E [2021-03-27] () [File not signed]
Startup: C:\Users\acronis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HOW TO BACK YOUR FILES.txt [2021-03-27] () [File not signed]
Startup: C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\.A8D68E42E88BFDF0D21E [2021-03-27] () [File not signed]
Startup: C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HOW TO BACK YOUR FILES.txt [2021-03-27] () [File not signed]
Startup: C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\.A8D68E42E88BFDF0D21E [2021-03-27] () [File not signed]
Startup: C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HOW TO BACK YOUR FILES.txt [2021-03-27] () [File not signed]
Startup: C:\Users\Administrator.RCPI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\.A8D68E42E88BFDF0D21E [2021-03-27] () [File not signed]
Startup: C:\Users\Administrator.RCPI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HOW TO BACK YOUR FILES.txt [2021-03-27] () [File not signed]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\.A8D68E42E88BFDF0D21E [2021-03-27] () [File not signed]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HOW TO BACK YOUR FILES.txt [2021-03-27] () [File not signed]
Startup: C:\Users\expert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\.A8D68E42E88BFDF0D21E [2021-03-27] () [File not signed]
Startup: C:\Users\expert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HOW TO BACK YOUR FILES.txt [2021-03-27] () [File not signed]
Startup: C:\Users\g_evgeniy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\.A8D68E42E88BFDF0D21E [2021-03-27] () [File not signed]
Startup: C:\Users\g_evgeniy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HOW TO BACK YOUR FILES.txt [2021-03-27] () [File not signed]
Startup: C:\Users\isla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\.A8D68E42E88BFDF0D21E [2021-03-27] () [File not signed]
Startup: C:\Users\isla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HOW TO BACK YOUR FILES.txt [2021-03-27] () [File not signed]
Startup: C:\Users\spfarm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\.A8D68E42E88BFDF0D21E [2021-03-27] () [File not signed]
Startup: C:\Users\spfarm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HOW TO BACK YOUR FILES.txt [2021-03-27] () [File not signed]
Startup: C:\Users\victor.novossad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\.A8D68E42E88BFDF0D21E [2021-03-27] () [File not signed]
Startup: C:\Users\victor.novossad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HOW TO BACK YOUR FILES.txt [2021-03-27] () [File not signed]
2021-03-27 01:50 - 2021-03-27 01:50 - 000001865 _____ C:\Program Files\Common Files\HOW TO BACK YOUR FILES.txt
2021-03-27 01:50 - 2021-03-27 01:50 - 000000948 ____H C:\Program Files\Common Files\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\Abramov.a\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\Abramov.a\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\Abramov.a\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\Abramov.a\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\Abramov.a\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\aarykbaeva\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\aarykbaeva\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\aarykbaeva\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\aarykbaeva\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\aarykbaeva\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\aarykbaeva\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\aarykbaeva\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\aarykbaeva\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\aarykbaeva\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\aarykbaeva\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5 Classic\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5 Classic\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5 Classic\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5 Classic\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5 Classic\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5 Classic\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5 Classic\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5 Classic\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5 Classic\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5 Classic\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0 Classic\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0 Classic\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0 Classic\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0 Classic\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0 Classic\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0 Classic\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0 Classic\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0 Classic\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0 Classic\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0 Classic\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Program Files\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Program Files (x86)\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\Abramov.a\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\Abramov.a\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\Abramov.a\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\Abramov.a\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\Abramov.a\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\aarykbaeva\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\aarykbaeva\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\aarykbaeva\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\aarykbaeva\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\aarykbaeva\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\aarykbaeva\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\aarykbaeva\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\aarykbaeva\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\aarykbaeva\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\aarykbaeva\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5 Classic\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5 Classic\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5 Classic\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5 Classic\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5 Classic\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5 Classic\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5 Classic\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5 Classic\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5 Classic\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5 Classic\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0 Classic\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0 Classic\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0 Classic\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0 Classic\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0 Classic\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0 Classic\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0 Classic\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0 Classic\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0 Classic\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0 Classic\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Program Files\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Program Files (x86)\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Administrator\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Administrator\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Administrator\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Administrator\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Administrator\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Administrator\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Administrator\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Administrator\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Administrator.RCPI\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Administrator.RCPI\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Administrator.RCPI\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Administrator.RCPI\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Administrator.RCPI\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\admin\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\admin\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\admin\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\admin\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\admin\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\admin\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\admin\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\admin\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\adfsservice\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\adfsservice\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\adfsservice\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\adfsservice\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\adfsservice\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\adfsservice\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\adfsservice\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\adfsservice\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\adfsservice\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\adfsservice\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\acronis\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\acronis\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\acronis\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\acronis\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\acronis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\acronis\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\acronis\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\acronis\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\acronis\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\acronis\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User 2\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User 2\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User 2\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User 2\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User 2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User 2\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User 2\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User 2\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User 2\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User 2\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Abramov.a\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Abramov.a\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Abramov.a\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Abramov.a\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Abramov.a\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Administrator\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Administrator\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Administrator\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Administrator\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Administrator\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Administrator\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Administrator\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Administrator\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Administrator.RCPI\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Administrator.RCPI\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Administrator.RCPI\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Administrator.RCPI\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Administrator.RCPI\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\admin\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\admin\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\admin\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\admin\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\admin\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\admin\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\admin\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\admin\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\adfsservice\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\adfsservice\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\adfsservice\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\adfsservice\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\adfsservice\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\adfsservice\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\adfsservice\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\adfsservice\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\adfsservice\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\adfsservice\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\acronis\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\acronis\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\acronis\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\acronis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\acronis\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\acronis\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\acronis\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\acronis\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\acronis\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\acronis\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User 2\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User 2\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User 2\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User 2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User 2\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User 2\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User 2\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User 2\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User 2\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User 2\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Abramov.a\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Abramov.a\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Abramov.a\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Abramov.a\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Abramov.a\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\g_evgeniy\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\g_evgeniy\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\g_evgeniy\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\g_evgeniy\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\g_evgeniy\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\expert\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\expert\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\expert\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\expert\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\expert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\expert\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\expert\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\expert\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\expert\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\expert\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Default\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Default\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Default\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Default\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Default\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Default\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Default\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Classic .NET AppPool\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Classic .NET AppPool\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Classic .NET AppPool\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Classic .NET AppPool\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Classic .NET AppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Classic .NET AppPool\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Classic .NET AppPool\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Classic .NET AppPool\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Classic .NET AppPool\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Classic .NET AppPool\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\ASN User\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\ASN User\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\ASN User\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\ASN User\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\ASN User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\ASN User\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\ASN User\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\ASN User\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\ASN User\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\ASN User\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Administrator.RCPI\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Administrator.RCPI\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Administrator.RCPI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Administrator.RCPI\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Administrator.RCPI\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\ProgramData\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\ProgramData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\g_evgeniy\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\g_evgeniy\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\g_evgeniy\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\g_evgeniy\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\g_evgeniy\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\expert\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\expert\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\expert\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\expert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\expert\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\expert\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\expert\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\expert\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\expert\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\expert\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Default\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Default\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Default\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Default\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Default\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Default\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Default\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Classic .NET AppPool\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Classic .NET AppPool\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Classic .NET AppPool\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Classic .NET AppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Classic .NET AppPool\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Classic .NET AppPool\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Classic .NET AppPool\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Classic .NET AppPool\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Classic .NET AppPool\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Classic .NET AppPool\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\ASN User\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\ASN User\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\ASN User\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\ASN User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\ASN User\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\ASN User\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\ASN User\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\ASN User\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\ASN User\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\ASN User\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Administrator.RCPI\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Administrator.RCPI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Administrator.RCPI\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Administrator.RCPI\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Administrator.RCPI\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\ProgramData\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\ProgramData\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\ProgramData\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\spfarm\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\spfarm\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\spfarm\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\spfarm\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\spfarm\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\spfarm\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\Public\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\Public\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\Public\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\Public\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQLFDLauncher\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQLFDLauncher\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQLFDLauncher\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQLFDLauncher\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQLFDLauncher\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQLFDLauncher\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQLFDLauncher\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQLFDLauncher\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQLFDLauncher\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQLFDLauncher\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQL$MICROSOFT##WID\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQL$MICROSOFT##WID\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQL$MICROSOFT##WID\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQL$MICROSOFT##WID\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQL$MICROSOFT##WID\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQL$MICROSOFT##WID\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQL$MICROSOFT##WID\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQL$MICROSOFT##WID\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQL$MICROSOFT##WID\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQL$MICROSOFT##WID\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\ksnproxy\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\ksnproxy\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\ksnproxy\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\ksnproxy\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\ksnproxy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\ksnproxy\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\ksnproxy\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\ksnproxy\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\ksnproxy\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\ksnproxy\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc.PRAVO\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc.PRAVO\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc.PRAVO\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc.PRAVO\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc.PRAVO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc.PRAVO\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc.PRAVO\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc.PRAVO\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc.PRAVO\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc.PRAVO\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\isla\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\isla\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\isla\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\isla\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\isla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\isla\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\isla\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\isla\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\isla\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\isla\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\g_evgeniy\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\g_evgeniy\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\g_evgeniy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\g_evgeniy\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\g_evgeniy\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\ProgramData\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\ProgramData\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\spfarm\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\spfarm\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\spfarm\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\spfarm\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\spfarm\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\Public\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\Public\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\Public\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\Public\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQLFDLauncher\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQLFDLauncher\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQLFDLauncher\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQLFDLauncher\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQLFDLauncher\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQLFDLauncher\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQLFDLauncher\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQLFDLauncher\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQLFDLauncher\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQLFDLauncher\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQL$MICROSOFT##WID\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQL$MICROSOFT##WID\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQL$MICROSOFT##WID\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQL$MICROSOFT##WID\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQL$MICROSOFT##WID\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQL$MICROSOFT##WID\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQL$MICROSOFT##WID\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQL$MICROSOFT##WID\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQL$MICROSOFT##WID\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQL$MICROSOFT##WID\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\ksnproxy\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\ksnproxy\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\ksnproxy\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\ksnproxy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\ksnproxy\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\ksnproxy\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\ksnproxy\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\ksnproxy\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\ksnproxy\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\ksnproxy\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc.PRAVO\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc.PRAVO\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc.PRAVO\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc.PRAVO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc.PRAVO\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc.PRAVO\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc.PRAVO\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc.PRAVO\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc.PRAVO\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc.PRAVO\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\isla\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\isla\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\isla\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\isla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\isla\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\isla\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\isla\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\isla\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\isla\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\isla\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\g_evgeniy\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\g_evgeniy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\g_evgeniy\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\g_evgeniy\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\g_evgeniy\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\ProgramData\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\ProgramData\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:42 - 2021-03-27 01:42 - 000001865 _____ C:\Users\victor.novossad\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:42 - 2021-03-27 01:42 - 000001865 _____ C:\Users\victor.novossad\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:42 - 2021-03-27 01:42 - 000001865 _____ C:\Users\victor.novossad\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:42 - 2021-03-27 01:42 - 000001865 _____ C:\Users\sqladmin\HOW TO BACK YOUR FILES.txt
2021-03-27 01:42 - 2021-03-27 01:42 - 000001865 _____ C:\Users\sqladmin\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:42 - 2021-03-27 01:42 - 000001865 _____ C:\Users\sqladmin\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:42 - 2021-03-27 01:42 - 000001865 _____ C:\Users\sqladmin\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:42 - 2021-03-27 01:42 - 000001865 _____ C:\Users\sqladmin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:42 - 2021-03-27 01:42 - 000001865 _____ C:\Users\sqladmin\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:42 - 2021-03-27 01:42 - 000001865 _____ C:\Users\sqladmin\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:42 - 2021-03-27 01:42 - 000001865 _____ C:\Users\sqladmin\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:42 - 2021-03-27 01:42 - 000001865 _____ C:\Users\sqladmin\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:42 - 2021-03-27 01:42 - 000001865 _____ C:\Users\sqladmin\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:42 - 2021-03-27 01:42 - 000001865 _____ C:\Users\spfarm\HOW TO BACK YOUR FILES.txt
2021-03-27 01:42 - 2021-03-27 01:42 - 000001865 _____ C:\Users\spfarm\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:42 - 2021-03-27 01:42 - 000001865 _____ C:\Users\spfarm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:42 - 2021-03-27 01:42 - 000001865 _____ C:\Users\spfarm\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:42 - 2021-03-27 01:42 - 000000948 ____H C:\Users\victor.novossad\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:42 - 2021-03-27 01:42 - 000000948 ____H C:\Users\victor.novossad\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:42 - 2021-03-27 01:42 - 000000948 ____H C:\Users\victor.novossad\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:42 - 2021-03-27 01:42 - 000000948 ____H C:\Users\sqladmin\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:42 - 2021-03-27 01:42 - 000000948 ____H C:\Users\sqladmin\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:42 - 2021-03-27 01:42 - 000000948 ____H C:\Users\sqladmin\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:42 - 2021-03-27 01:42 - 000000948 ____H C:\Users\sqladmin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:42 - 2021-03-27 01:42 - 000000948 ____H C:\Users\sqladmin\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:42 - 2021-03-27 01:42 - 000000948 ____H C:\Users\sqladmin\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:42 - 2021-03-27 01:42 - 000000948 ____H C:\Users\sqladmin\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:42 - 2021-03-27 01:42 - 000000948 ____H C:\Users\sqladmin\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:42 - 2021-03-27 01:42 - 000000948 ____H C:\Users\sqladmin\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:42 - 2021-03-27 01:42 - 000000948 ____H C:\Users\sqladmin\.A8D68E42E88BFDF0D21E
2021-03-27 01:42 - 2021-03-27 01:42 - 000000948 ____H C:\Users\spfarm\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:42 - 2021-03-27 01:42 - 000000948 ____H C:\Users\spfarm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:42 - 2021-03-27 01:42 - 000000948 ____H C:\Users\spfarm\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:42 - 2021-03-27 01:42 - 000000948 ____H C:\Users\spfarm\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:42 - 2021-03-27 01:42 - 000000948 ____H C:\Users\spfarm\.A8D68E42E88BFDF0D21E
2021-03-27 01:38 - 2021-03-27 01:38 - 000001865 _____ C:\Users\victor.novossad\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:38 - 2021-03-27 01:38 - 000001865 _____ C:\Users\victor.novossad\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:38 - 2021-03-27 01:38 - 000000948 ____H C:\Users\victor.novossad\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:38 - 2021-03-27 01:38 - 000000948 ____H C:\Users\victor.novossad\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:37 - 2021-03-27 01:37 - 000001865 _____ C:\Users\victor.novossad\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:37 - 2021-03-27 01:37 - 000000948 ____H C:\Users\victor.novossad\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:33 - 2021-03-27 01:33 - 000001360 ____N C:\Users\sqladmin\AppData\Local\Temp\ymfctc.vbs.Globeimposter-Alpha666qqz
2021-03-27 01:32 - 2021-03-27 15:30 - 000000000 ____D C:\Users\isla\Desktop\glob_txt
2021-03-27 01:32 - 2021-03-27 01:43 - 000000000 ____D C:\Users\isla\Desktop\DefenderControl
2021-03-27 01:32 - 2021-03-27 01:32 - 000001865 _____ C:\Users\victor.novossad\HOW TO BACK YOUR FILES.txt
2021-03-27 01:32 - 2021-03-27 01:32 - 000001865 _____ C:\Users\victor.novossad\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:32 - 2021-03-27 01:32 - 000001865 _____ C:\Users\victor.novossad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:32 - 2021-03-27 01:32 - 000001865 _____ C:\Users\victor.novossad\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:32 - 2021-03-27 01:32 - 000001865 _____ C:\Users\HOW TO BACK YOUR FILES.txt
2021-03-27 01:32 - 2021-03-27 01:32 - 000001865 _____ C:\HOW TO BACK YOUR FILES.txt
2021-03-27 01:32 - 2021-03-27 01:32 - 000000948 ____H C:\Users\victor.novossad\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:32 - 2021-03-27 01:32 - 000000948 ____H C:\Users\victor.novossad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:32 - 2021-03-27 01:32 - 000000948 ____H C:\Users\victor.novossad\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:32 - 2021-03-27 01:32 - 000000948 ____H C:\Users\victor.novossad\.A8D68E42E88BFDF0D21E
2021-03-27 01:32 - 2021-03-27 01:32 - 000000948 ____H C:\Users\.A8D68E42E88BFDF0D21E
2021-03-27 01:32 - 2021-03-27 01:32 - 000000948 ____H C:\.A8D68E42E88BFDF0D21E
End::


2. Скопируйте выделенный текст (правая кнопка мыши – Копировать).
3. Запустите Farbar Recovery Scan Tool.
4. Нажмите один раз на кнопку Fix и подождите. Программа создаст лог-файл (Fixlog.txt). Пожалуйста, прикрепите его в следующем сообщении.

 

  • Обратите внимание: перезагрузку компьютера нужно выполнить вручную после данного скрипта.


 

Ссылка на комментарий
Поделиться на другие сайты

Пожалуйста, войдите, чтобы комментировать

Вы сможете оставить комментарий после входа в



Войти
 Share
Перейти к списку тем

  • Похожий контент

    • Александр94
      Шифровальщик
      От Александр94
      Поймаи шифровальщик один в один как в теме  
       
      csb.log.[MJ-UE8059316472](decodehop@gmail.com ).rar csb.log.[MJ-UE8059316472](decodehop@gmail.com ).rar FRST.txt Addition.txt
    • ad_art
      Шифровальщик BlackBit
      От ad_art
      Здравствуйте, требуется помощь в расшифровке файлов.
      Прилагаю образец вируса в запароленном архиве, ключи реестра содержащие данные для шифрации.
      First.txt Addition.txt Зашифрованные файлы.7z Оригинальные файлы.7z virus_sample.7z Требования вируса.7z reg_keys.7z
    • IrinaC
      Поймали шифровальщика
      От IrinaC
      Здравствуйте!
      Сегодня утром появился шифровальщик, при том в такое время, когда никто не работает, в 6.13 по Москве. Никто не признается, что скачал и запустил зараженный файл, допускаем, что было подключение извне.
      Базы данных, документы, архивы - все файлы получили расширение *.Bpant. При этом, зашифровано всё только на диске D. Диск С остался нетронутым. Логи, зашифрованные данные, письмо от злоумышленников прилагаю.
      Addition.txt FRST.txt Шифровки.rar
    • yarosvent
      поймали шифровальщика
      От yarosvent
      Доброго,
      просим помочь расшифровать данные
    • WL787878
      Шифровальщик
      От WL787878
      Key2030_Help.txt
      Здравствуйте. Возможно ли получить помощь в расшифровке файлов? Логи прилагаю.
      Addition.txt FRST.txt
×
×
  • Создать...