Перейти к содержанию

Шифровальщик Globeimposter-Alpha666qqaz

Толеген
 Поделиться

Рекомендуемые сообщения

Толеген

Толеген

Опубликовано
Опубликовано

Здравствуйте. Сервер с базой данных был заражен вирусом шифровальщиком-вымогателем. По наименованию файлов предполагаю, что это Globeimposter-Alpha666qqz. Поиск в интернете не дал результатов. Прошу рассмотреть файлы и выслать дешифратор

Файлы

зараженныефайлы.rar farbar logs.zip

thyrex

thyrex

Опубликовано
Опубликовано

С расшифровкой помочь не сможем. Чистка мусора в системе нужна или система под переустановку?

Толеген

Толеген

Опубликовано
  • Автор
Опубликовано

Жаль. Нужна чистка мусора.
Шифровальщик после шифрования удаляет исходные файлы или нет ? 
Можете пожалуйста дать инструкции по чистке

thyrex

thyrex

Опубликовано
Опубликовано

1. Выделите следующий код: 

Start::
CreateRestorePoint:
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
Startup: C:\Users\aarykbaeva\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\.A8D68E42E88BFDF0D21E [2021-03-27] () [File not signed]
Startup: C:\Users\aarykbaeva\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HOW TO BACK YOUR FILES.txt [2021-03-27] () [File not signed]
Startup: C:\Users\Abramov.a\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\.A8D68E42E88BFDF0D21E [2021-03-27] () [File not signed]
Startup: C:\Users\Abramov.a\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HOW TO BACK YOUR FILES.txt [2021-03-27] () [File not signed]
Startup: C:\Users\acronis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\.A8D68E42E88BFDF0D21E [2021-03-27] () [File not signed]
Startup: C:\Users\acronis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HOW TO BACK YOUR FILES.txt [2021-03-27] () [File not signed]
Startup: C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\.A8D68E42E88BFDF0D21E [2021-03-27] () [File not signed]
Startup: C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HOW TO BACK YOUR FILES.txt [2021-03-27] () [File not signed]
Startup: C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\.A8D68E42E88BFDF0D21E [2021-03-27] () [File not signed]
Startup: C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HOW TO BACK YOUR FILES.txt [2021-03-27] () [File not signed]
Startup: C:\Users\Administrator.RCPI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\.A8D68E42E88BFDF0D21E [2021-03-27] () [File not signed]
Startup: C:\Users\Administrator.RCPI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HOW TO BACK YOUR FILES.txt [2021-03-27] () [File not signed]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\.A8D68E42E88BFDF0D21E [2021-03-27] () [File not signed]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HOW TO BACK YOUR FILES.txt [2021-03-27] () [File not signed]
Startup: C:\Users\expert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\.A8D68E42E88BFDF0D21E [2021-03-27] () [File not signed]
Startup: C:\Users\expert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HOW TO BACK YOUR FILES.txt [2021-03-27] () [File not signed]
Startup: C:\Users\g_evgeniy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\.A8D68E42E88BFDF0D21E [2021-03-27] () [File not signed]
Startup: C:\Users\g_evgeniy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HOW TO BACK YOUR FILES.txt [2021-03-27] () [File not signed]
Startup: C:\Users\isla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\.A8D68E42E88BFDF0D21E [2021-03-27] () [File not signed]
Startup: C:\Users\isla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HOW TO BACK YOUR FILES.txt [2021-03-27] () [File not signed]
Startup: C:\Users\spfarm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\.A8D68E42E88BFDF0D21E [2021-03-27] () [File not signed]
Startup: C:\Users\spfarm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HOW TO BACK YOUR FILES.txt [2021-03-27] () [File not signed]
Startup: C:\Users\victor.novossad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\.A8D68E42E88BFDF0D21E [2021-03-27] () [File not signed]
Startup: C:\Users\victor.novossad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HOW TO BACK YOUR FILES.txt [2021-03-27] () [File not signed]
2021-03-27 01:50 - 2021-03-27 01:50 - 000001865 _____ C:\Program Files\Common Files\HOW TO BACK YOUR FILES.txt
2021-03-27 01:50 - 2021-03-27 01:50 - 000000948 ____H C:\Program Files\Common Files\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\Abramov.a\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\Abramov.a\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\Abramov.a\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\Abramov.a\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\Abramov.a\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\aarykbaeva\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\aarykbaeva\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\aarykbaeva\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\aarykbaeva\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\aarykbaeva\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\aarykbaeva\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\aarykbaeva\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\aarykbaeva\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\aarykbaeva\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\aarykbaeva\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5 Classic\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5 Classic\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5 Classic\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5 Classic\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5 Classic\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5 Classic\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5 Classic\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5 Classic\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5 Classic\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5 Classic\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0 Classic\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0 Classic\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0 Classic\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0 Classic\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0 Classic\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0 Classic\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0 Classic\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0 Classic\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0 Classic\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0 Classic\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Program Files\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Program Files (x86)\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\Abramov.a\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\Abramov.a\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\Abramov.a\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\Abramov.a\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\Abramov.a\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\aarykbaeva\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\aarykbaeva\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\aarykbaeva\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\aarykbaeva\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\aarykbaeva\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\aarykbaeva\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\aarykbaeva\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\aarykbaeva\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\aarykbaeva\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\aarykbaeva\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5 Classic\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5 Classic\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5 Classic\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5 Classic\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5 Classic\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5 Classic\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5 Classic\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5 Classic\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5 Classic\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5 Classic\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0 Classic\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0 Classic\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0 Classic\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0 Classic\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0 Classic\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0 Classic\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0 Classic\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0 Classic\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0 Classic\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0 Classic\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Program Files\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Program Files (x86)\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Administrator\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Administrator\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Administrator\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Administrator\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Administrator\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Administrator\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Administrator\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Administrator\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Administrator.RCPI\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Administrator.RCPI\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Administrator.RCPI\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Administrator.RCPI\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Administrator.RCPI\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\admin\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\admin\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\admin\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\admin\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\admin\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\admin\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\admin\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\admin\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\adfsservice\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\adfsservice\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\adfsservice\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\adfsservice\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\adfsservice\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\adfsservice\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\adfsservice\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\adfsservice\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\adfsservice\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\adfsservice\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\acronis\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\acronis\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\acronis\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\acronis\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\acronis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\acronis\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\acronis\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\acronis\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\acronis\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\acronis\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User 2\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User 2\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User 2\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User 2\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User 2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User 2\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User 2\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User 2\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User 2\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User 2\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Abramov.a\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Abramov.a\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Abramov.a\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Abramov.a\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Abramov.a\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Administrator\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Administrator\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Administrator\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Administrator\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Administrator\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Administrator\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Administrator\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Administrator\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Administrator.RCPI\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Administrator.RCPI\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Administrator.RCPI\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Administrator.RCPI\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Administrator.RCPI\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\admin\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\admin\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\admin\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\admin\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\admin\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\admin\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\admin\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\admin\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\adfsservice\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\adfsservice\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\adfsservice\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\adfsservice\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\adfsservice\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\adfsservice\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\adfsservice\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\adfsservice\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\adfsservice\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\adfsservice\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\acronis\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\acronis\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\acronis\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\acronis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\acronis\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\acronis\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\acronis\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\acronis\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\acronis\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\acronis\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User 2\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User 2\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User 2\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User 2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User 2\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User 2\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User 2\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User 2\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User 2\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User 2\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Abramov.a\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Abramov.a\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Abramov.a\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Abramov.a\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Abramov.a\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\g_evgeniy\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\g_evgeniy\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\g_evgeniy\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\g_evgeniy\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\g_evgeniy\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\expert\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\expert\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\expert\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\expert\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\expert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\expert\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\expert\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\expert\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\expert\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\expert\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Default\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Default\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Default\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Default\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Default\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Default\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Default\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Classic .NET AppPool\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Classic .NET AppPool\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Classic .NET AppPool\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Classic .NET AppPool\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Classic .NET AppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Classic .NET AppPool\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Classic .NET AppPool\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Classic .NET AppPool\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Classic .NET AppPool\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Classic .NET AppPool\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\ASN User\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\ASN User\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\ASN User\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\ASN User\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\ASN User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\ASN User\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\ASN User\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\ASN User\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\ASN User\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\ASN User\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Administrator.RCPI\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Administrator.RCPI\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Administrator.RCPI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Administrator.RCPI\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Administrator.RCPI\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\ProgramData\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\ProgramData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\g_evgeniy\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\g_evgeniy\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\g_evgeniy\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\g_evgeniy\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\g_evgeniy\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\expert\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\expert\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\expert\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\expert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\expert\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\expert\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\expert\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\expert\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\expert\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\expert\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Default\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Default\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Default\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Default\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Default\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Default\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Default\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Classic .NET AppPool\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Classic .NET AppPool\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Classic .NET AppPool\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Classic .NET AppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Classic .NET AppPool\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Classic .NET AppPool\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Classic .NET AppPool\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Classic .NET AppPool\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Classic .NET AppPool\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Classic .NET AppPool\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\ASN User\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\ASN User\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\ASN User\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\ASN User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\ASN User\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\ASN User\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\ASN User\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\ASN User\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\ASN User\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\ASN User\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Administrator.RCPI\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Administrator.RCPI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Administrator.RCPI\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Administrator.RCPI\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Administrator.RCPI\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\ProgramData\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\ProgramData\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\ProgramData\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\spfarm\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\spfarm\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\spfarm\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\spfarm\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\spfarm\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\spfarm\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\Public\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\Public\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\Public\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\Public\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQLFDLauncher\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQLFDLauncher\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQLFDLauncher\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQLFDLauncher\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQLFDLauncher\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQLFDLauncher\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQLFDLauncher\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQLFDLauncher\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQLFDLauncher\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQLFDLauncher\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQL$MICROSOFT##WID\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQL$MICROSOFT##WID\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQL$MICROSOFT##WID\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQL$MICROSOFT##WID\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQL$MICROSOFT##WID\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQL$MICROSOFT##WID\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQL$MICROSOFT##WID\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQL$MICROSOFT##WID\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQL$MICROSOFT##WID\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQL$MICROSOFT##WID\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\ksnproxy\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\ksnproxy\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\ksnproxy\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\ksnproxy\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\ksnproxy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\ksnproxy\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\ksnproxy\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\ksnproxy\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\ksnproxy\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\ksnproxy\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc.PRAVO\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc.PRAVO\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc.PRAVO\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc.PRAVO\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc.PRAVO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc.PRAVO\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc.PRAVO\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc.PRAVO\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc.PRAVO\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc.PRAVO\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\isla\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\isla\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\isla\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\isla\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\isla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\isla\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\isla\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\isla\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\isla\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\isla\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\g_evgeniy\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\g_evgeniy\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\g_evgeniy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\g_evgeniy\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\g_evgeniy\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\ProgramData\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\ProgramData\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\spfarm\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\spfarm\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\spfarm\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\spfarm\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\spfarm\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\Public\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\Public\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\Public\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\Public\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQLFDLauncher\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQLFDLauncher\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQLFDLauncher\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQLFDLauncher\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQLFDLauncher\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQLFDLauncher\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQLFDLauncher\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQLFDLauncher\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQLFDLauncher\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQLFDLauncher\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQL$MICROSOFT##WID\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQL$MICROSOFT##WID\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQL$MICROSOFT##WID\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQL$MICROSOFT##WID\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQL$MICROSOFT##WID\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQL$MICROSOFT##WID\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQL$MICROSOFT##WID\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQL$MICROSOFT##WID\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQL$MICROSOFT##WID\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQL$MICROSOFT##WID\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\ksnproxy\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\ksnproxy\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\ksnproxy\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\ksnproxy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\ksnproxy\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\ksnproxy\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\ksnproxy\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\ksnproxy\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\ksnproxy\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\ksnproxy\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc.PRAVO\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc.PRAVO\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc.PRAVO\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc.PRAVO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc.PRAVO\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc.PRAVO\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc.PRAVO\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc.PRAVO\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc.PRAVO\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc.PRAVO\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\isla\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\isla\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\isla\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\isla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\isla\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\isla\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\isla\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\isla\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\isla\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\isla\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\g_evgeniy\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\g_evgeniy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\g_evgeniy\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\g_evgeniy\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\g_evgeniy\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\ProgramData\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\ProgramData\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:42 - 2021-03-27 01:42 - 000001865 _____ C:\Users\victor.novossad\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:42 - 2021-03-27 01:42 - 000001865 _____ C:\Users\victor.novossad\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:42 - 2021-03-27 01:42 - 000001865 _____ C:\Users\victor.novossad\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:42 - 2021-03-27 01:42 - 000001865 _____ C:\Users\sqladmin\HOW TO BACK YOUR FILES.txt
2021-03-27 01:42 - 2021-03-27 01:42 - 000001865 _____ C:\Users\sqladmin\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:42 - 2021-03-27 01:42 - 000001865 _____ C:\Users\sqladmin\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:42 - 2021-03-27 01:42 - 000001865 _____ C:\Users\sqladmin\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:42 - 2021-03-27 01:42 - 000001865 _____ C:\Users\sqladmin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:42 - 2021-03-27 01:42 - 000001865 _____ C:\Users\sqladmin\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:42 - 2021-03-27 01:42 - 000001865 _____ C:\Users\sqladmin\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:42 - 2021-03-27 01:42 - 000001865 _____ C:\Users\sqladmin\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:42 - 2021-03-27 01:42 - 000001865 _____ C:\Users\sqladmin\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:42 - 2021-03-27 01:42 - 000001865 _____ C:\Users\sqladmin\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:42 - 2021-03-27 01:42 - 000001865 _____ C:\Users\spfarm\HOW TO BACK YOUR FILES.txt
2021-03-27 01:42 - 2021-03-27 01:42 - 000001865 _____ C:\Users\spfarm\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:42 - 2021-03-27 01:42 - 000001865 _____ C:\Users\spfarm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:42 - 2021-03-27 01:42 - 000001865 _____ C:\Users\spfarm\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:42 - 2021-03-27 01:42 - 000000948 ____H C:\Users\victor.novossad\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:42 - 2021-03-27 01:42 - 000000948 ____H C:\Users\victor.novossad\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:42 - 2021-03-27 01:42 - 000000948 ____H C:\Users\victor.novossad\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:42 - 2021-03-27 01:42 - 000000948 ____H C:\Users\sqladmin\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:42 - 2021-03-27 01:42 - 000000948 ____H C:\Users\sqladmin\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:42 - 2021-03-27 01:42 - 000000948 ____H C:\Users\sqladmin\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:42 - 2021-03-27 01:42 - 000000948 ____H C:\Users\sqladmin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:42 - 2021-03-27 01:42 - 000000948 ____H C:\Users\sqladmin\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:42 - 2021-03-27 01:42 - 000000948 ____H C:\Users\sqladmin\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:42 - 2021-03-27 01:42 - 000000948 ____H C:\Users\sqladmin\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:42 - 2021-03-27 01:42 - 000000948 ____H C:\Users\sqladmin\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:42 - 2021-03-27 01:42 - 000000948 ____H C:\Users\sqladmin\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:42 - 2021-03-27 01:42 - 000000948 ____H C:\Users\sqladmin\.A8D68E42E88BFDF0D21E
2021-03-27 01:42 - 2021-03-27 01:42 - 000000948 ____H C:\Users\spfarm\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:42 - 2021-03-27 01:42 - 000000948 ____H C:\Users\spfarm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:42 - 2021-03-27 01:42 - 000000948 ____H C:\Users\spfarm\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:42 - 2021-03-27 01:42 - 000000948 ____H C:\Users\spfarm\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:42 - 2021-03-27 01:42 - 000000948 ____H C:\Users\spfarm\.A8D68E42E88BFDF0D21E
2021-03-27 01:38 - 2021-03-27 01:38 - 000001865 _____ C:\Users\victor.novossad\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:38 - 2021-03-27 01:38 - 000001865 _____ C:\Users\victor.novossad\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:38 - 2021-03-27 01:38 - 000000948 ____H C:\Users\victor.novossad\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:38 - 2021-03-27 01:38 - 000000948 ____H C:\Users\victor.novossad\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:37 - 2021-03-27 01:37 - 000001865 _____ C:\Users\victor.novossad\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:37 - 2021-03-27 01:37 - 000000948 ____H C:\Users\victor.novossad\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:33 - 2021-03-27 01:33 - 000001360 ____N C:\Users\sqladmin\AppData\Local\Temp\ymfctc.vbs.Globeimposter-Alpha666qqz
2021-03-27 01:32 - 2021-03-27 15:30 - 000000000 ____D C:\Users\isla\Desktop\glob_txt
2021-03-27 01:32 - 2021-03-27 01:43 - 000000000 ____D C:\Users\isla\Desktop\DefenderControl
2021-03-27 01:32 - 2021-03-27 01:32 - 000001865 _____ C:\Users\victor.novossad\HOW TO BACK YOUR FILES.txt
2021-03-27 01:32 - 2021-03-27 01:32 - 000001865 _____ C:\Users\victor.novossad\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:32 - 2021-03-27 01:32 - 000001865 _____ C:\Users\victor.novossad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:32 - 2021-03-27 01:32 - 000001865 _____ C:\Users\victor.novossad\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:32 - 2021-03-27 01:32 - 000001865 _____ C:\Users\HOW TO BACK YOUR FILES.txt
2021-03-27 01:32 - 2021-03-27 01:32 - 000001865 _____ C:\HOW TO BACK YOUR FILES.txt
2021-03-27 01:32 - 2021-03-27 01:32 - 000000948 ____H C:\Users\victor.novossad\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:32 - 2021-03-27 01:32 - 000000948 ____H C:\Users\victor.novossad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:32 - 2021-03-27 01:32 - 000000948 ____H C:\Users\victor.novossad\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:32 - 2021-03-27 01:32 - 000000948 ____H C:\Users\victor.novossad\.A8D68E42E88BFDF0D21E
2021-03-27 01:32 - 2021-03-27 01:32 - 000000948 ____H C:\Users\.A8D68E42E88BFDF0D21E
2021-03-27 01:32 - 2021-03-27 01:32 - 000000948 ____H C:\.A8D68E42E88BFDF0D21E
End::


2. Скопируйте выделенный текст (правая кнопка мыши – Копировать).
3. Запустите Farbar Recovery Scan Tool.
4. Нажмите один раз на кнопку Fix и подождите. Программа создаст лог-файл (Fixlog.txt). Пожалуйста, прикрепите его в следующем сообщении.

 

  • Обратите внимание: перезагрузку компьютера нужно выполнить вручную после данного скрипта.


 

Пожалуйста, войдите, чтобы комментировать

Вы сможете оставить комментарий после входа в



Войти
 Поделиться
Перейти к списку тем

  • Похожий контент

    • AndrewDanilov
      GlobeImposter 2.0 cyber761@tuta.io and cyber@asia.com and cyber761@proton.me
      Автор AndrewDanilov
      Всем доброго дня.
      Столкнулись с проблемой зашифровки данных. 
      Вероятно проникли через RDP порт.
      По данным портала https://id-ransomware.malwarehunterteam.com/identify.php?case=e67359c2d3a82a25ca820bb8d43542fc05fdd5e8 это GlobeImposter 2.0
      Погуглив по форуму пишут что шансов мало ...
      Прикладываю:
      1) пример 3х файлов: docx & PDF & файл hta (Архив  Files - пароль virus)
      2) отчет сканирования по инструкции
      3) снимок экрана о вымогательстве
       

      Files.rar FRST.txt
    • Ser25
      Шифровальщик
      Автор Ser25
      Взломали пароль и зашифровали удаленный комп. Пока ничего не предпринимал
      20250507.7z
    • Пользователь 1551
      Шифровальщик
      Автор Пользователь 1551
      Добрый день! У нас аналогичная ситуация? Удалось расшифровать?
       
      Сообщение от модератора Mark D. Pearlstone Перемещено из темы.
    • Thunderer
      Шифровальщик
      Автор Thunderer
      Зашифровали файлы на компьютере и все общие папки 
      Подключились к компьютеру по RDP 
      В архиве логи frst, зашифрованный и расшифрованный файлы
      -Файлы.zip
    • Сергей_00
      шифровальщик
      Автор Сергей_00
      Добрый день!
      Сегодня шифровальщик зашифровал большую часть нужных файлов, благо выключили компьютер из розетки...
      В результате остались файлы в папке запуска подозрительного файла   svhostss.exe, а именно в папке c:\users\пользователь\BD3FDDDF-6CAF-3EBC-D9CF-C8DF72D8F78A\svhostss.exe
      следующие файлы:
      Everything.db
      Everything32.dll
      Everything64.dll
      session.tmp
      svhostss.exe
       
      быть может есть возможность дешифровать данные? 
×
×
  • Создать...