Перейти к содержанию

Шифровальщик Globeimposter-Alpha666qqaz


Рекомендуемые сообщения

Здравствуйте. Сервер с базой данных был заражен вирусом шифровальщиком-вымогателем. По наименованию файлов предполагаю, что это Globeimposter-Alpha666qqz. Поиск в интернете не дал результатов. Прошу рассмотреть файлы и выслать дешифратор

Файлы

зараженныефайлы.rar farbar logs.zip

Ссылка на сообщение
Поделиться на другие сайты

Жаль. Нужна чистка мусора.
Шифровальщик после шифрования удаляет исходные файлы или нет ? 
Можете пожалуйста дать инструкции по чистке

Ссылка на сообщение
Поделиться на другие сайты

1. Выделите следующий код:

Start::
CreateRestorePoint:
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
Startup: C:\Users\aarykbaeva\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\.A8D68E42E88BFDF0D21E [2021-03-27] () [File not signed]
Startup: C:\Users\aarykbaeva\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HOW TO BACK YOUR FILES.txt [2021-03-27] () [File not signed]
Startup: C:\Users\Abramov.a\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\.A8D68E42E88BFDF0D21E [2021-03-27] () [File not signed]
Startup: C:\Users\Abramov.a\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HOW TO BACK YOUR FILES.txt [2021-03-27] () [File not signed]
Startup: C:\Users\acronis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\.A8D68E42E88BFDF0D21E [2021-03-27] () [File not signed]
Startup: C:\Users\acronis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HOW TO BACK YOUR FILES.txt [2021-03-27] () [File not signed]
Startup: C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\.A8D68E42E88BFDF0D21E [2021-03-27] () [File not signed]
Startup: C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HOW TO BACK YOUR FILES.txt [2021-03-27] () [File not signed]
Startup: C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\.A8D68E42E88BFDF0D21E [2021-03-27] () [File not signed]
Startup: C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HOW TO BACK YOUR FILES.txt [2021-03-27] () [File not signed]
Startup: C:\Users\Administrator.RCPI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\.A8D68E42E88BFDF0D21E [2021-03-27] () [File not signed]
Startup: C:\Users\Administrator.RCPI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HOW TO BACK YOUR FILES.txt [2021-03-27] () [File not signed]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\.A8D68E42E88BFDF0D21E [2021-03-27] () [File not signed]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HOW TO BACK YOUR FILES.txt [2021-03-27] () [File not signed]
Startup: C:\Users\expert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\.A8D68E42E88BFDF0D21E [2021-03-27] () [File not signed]
Startup: C:\Users\expert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HOW TO BACK YOUR FILES.txt [2021-03-27] () [File not signed]
Startup: C:\Users\g_evgeniy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\.A8D68E42E88BFDF0D21E [2021-03-27] () [File not signed]
Startup: C:\Users\g_evgeniy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HOW TO BACK YOUR FILES.txt [2021-03-27] () [File not signed]
Startup: C:\Users\isla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\.A8D68E42E88BFDF0D21E [2021-03-27] () [File not signed]
Startup: C:\Users\isla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HOW TO BACK YOUR FILES.txt [2021-03-27] () [File not signed]
Startup: C:\Users\spfarm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\.A8D68E42E88BFDF0D21E [2021-03-27] () [File not signed]
Startup: C:\Users\spfarm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HOW TO BACK YOUR FILES.txt [2021-03-27] () [File not signed]
Startup: C:\Users\victor.novossad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\.A8D68E42E88BFDF0D21E [2021-03-27] () [File not signed]
Startup: C:\Users\victor.novossad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HOW TO BACK YOUR FILES.txt [2021-03-27] () [File not signed]
2021-03-27 01:50 - 2021-03-27 01:50 - 000001865 _____ C:\Program Files\Common Files\HOW TO BACK YOUR FILES.txt
2021-03-27 01:50 - 2021-03-27 01:50 - 000000948 ____H C:\Program Files\Common Files\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\Abramov.a\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\Abramov.a\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\Abramov.a\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\Abramov.a\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\Abramov.a\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\aarykbaeva\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\aarykbaeva\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\aarykbaeva\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\aarykbaeva\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\aarykbaeva\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\aarykbaeva\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\aarykbaeva\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\aarykbaeva\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\aarykbaeva\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\aarykbaeva\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5 Classic\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5 Classic\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5 Classic\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5 Classic\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5 Classic\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5 Classic\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5 Classic\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5 Classic\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5 Classic\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v4.5 Classic\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0 Classic\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0 Classic\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0 Classic\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0 Classic\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0 Classic\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0 Classic\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0 Classic\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0 Classic\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0 Classic\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Users\.NET v2.0 Classic\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Program Files\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000001865 _____ C:\Program Files (x86)\HOW TO BACK YOUR FILES.txt
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\Abramov.a\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\Abramov.a\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\Abramov.a\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\Abramov.a\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\Abramov.a\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\aarykbaeva\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\aarykbaeva\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\aarykbaeva\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\aarykbaeva\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\aarykbaeva\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\aarykbaeva\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\aarykbaeva\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\aarykbaeva\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\aarykbaeva\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\aarykbaeva\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5 Classic\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5 Classic\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5 Classic\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5 Classic\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5 Classic\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5 Classic\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5 Classic\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5 Classic\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5 Classic\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v4.5 Classic\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0 Classic\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0 Classic\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0 Classic\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0 Classic\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0 Classic\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0 Classic\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0 Classic\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0 Classic\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0 Classic\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Users\.NET v2.0 Classic\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Program Files\.A8D68E42E88BFDF0D21E
2021-03-27 01:46 - 2021-03-27 01:46 - 000000948 ____H C:\Program Files (x86)\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Administrator\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Administrator\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Administrator\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Administrator\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Administrator\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Administrator\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Administrator\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Administrator\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Administrator.RCPI\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Administrator.RCPI\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Administrator.RCPI\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Administrator.RCPI\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Administrator.RCPI\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\admin\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\admin\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\admin\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\admin\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\admin\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\admin\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\admin\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\admin\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\adfsservice\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\adfsservice\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\adfsservice\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\adfsservice\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\adfsservice\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\adfsservice\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\adfsservice\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\adfsservice\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\adfsservice\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\adfsservice\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\acronis\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\acronis\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\acronis\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\acronis\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\acronis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\acronis\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\acronis\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\acronis\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\acronis\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\acronis\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User 2\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User 2\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User 2\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User 2\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User 2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User 2\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User 2\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User 2\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User 2\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Acronis Agent User 2\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Abramov.a\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Abramov.a\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Abramov.a\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Abramov.a\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000001865 _____ C:\Users\Abramov.a\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Administrator\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Administrator\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Administrator\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Administrator\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Administrator\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Administrator\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Administrator\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Administrator\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Administrator.RCPI\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Administrator.RCPI\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Administrator.RCPI\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Administrator.RCPI\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Administrator.RCPI\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\admin\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\admin\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\admin\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\admin\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\admin\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\admin\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\admin\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\admin\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\adfsservice\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\adfsservice\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\adfsservice\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\adfsservice\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\adfsservice\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\adfsservice\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\adfsservice\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\adfsservice\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\adfsservice\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\adfsservice\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\acronis\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\acronis\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\acronis\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\acronis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\acronis\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\acronis\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\acronis\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\acronis\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\acronis\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\acronis\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User 2\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User 2\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User 2\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User 2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User 2\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User 2\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User 2\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User 2\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User 2\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Acronis Agent User 2\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Abramov.a\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Abramov.a\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Abramov.a\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Abramov.a\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:45 - 2021-03-27 01:45 - 000000948 ____H C:\Users\Abramov.a\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\g_evgeniy\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\g_evgeniy\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\g_evgeniy\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\g_evgeniy\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\g_evgeniy\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\expert\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\expert\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\expert\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\expert\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\expert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\expert\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\expert\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\expert\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\expert\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\expert\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Default\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Default\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Default\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Default\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Default\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Default\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Default\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Classic .NET AppPool\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Classic .NET AppPool\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Classic .NET AppPool\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Classic .NET AppPool\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Classic .NET AppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Classic .NET AppPool\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Classic .NET AppPool\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Classic .NET AppPool\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Classic .NET AppPool\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Classic .NET AppPool\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\ASN User\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\ASN User\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\ASN User\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\ASN User\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\ASN User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\ASN User\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\ASN User\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\ASN User\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\ASN User\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\ASN User\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Administrator.RCPI\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Administrator.RCPI\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Administrator.RCPI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Administrator.RCPI\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\Users\Administrator.RCPI\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\ProgramData\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000001865 _____ C:\ProgramData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\g_evgeniy\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\g_evgeniy\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\g_evgeniy\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\g_evgeniy\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\g_evgeniy\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\expert\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\expert\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\expert\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\expert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\expert\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\expert\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\expert\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\expert\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\expert\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\expert\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Default\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Default\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Default\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Default\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Default\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Default\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Default\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Classic .NET AppPool\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Classic .NET AppPool\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Classic .NET AppPool\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Classic .NET AppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Classic .NET AppPool\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Classic .NET AppPool\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Classic .NET AppPool\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Classic .NET AppPool\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Classic .NET AppPool\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Classic .NET AppPool\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\ASN User\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\ASN User\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\ASN User\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\ASN User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\ASN User\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\ASN User\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\ASN User\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\ASN User\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\ASN User\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\ASN User\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Administrator.RCPI\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Administrator.RCPI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Administrator.RCPI\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Administrator.RCPI\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\Users\Administrator.RCPI\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\ProgramData\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\ProgramData\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:44 - 2021-03-27 01:44 - 000000948 ____H C:\ProgramData\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\spfarm\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\spfarm\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\spfarm\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\spfarm\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\spfarm\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\spfarm\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\Public\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\Public\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\Public\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\Public\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQLFDLauncher\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQLFDLauncher\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQLFDLauncher\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQLFDLauncher\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQLFDLauncher\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQLFDLauncher\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQLFDLauncher\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQLFDLauncher\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQLFDLauncher\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQLFDLauncher\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQL$MICROSOFT##WID\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQL$MICROSOFT##WID\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQL$MICROSOFT##WID\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQL$MICROSOFT##WID\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQL$MICROSOFT##WID\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQL$MICROSOFT##WID\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQL$MICROSOFT##WID\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQL$MICROSOFT##WID\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQL$MICROSOFT##WID\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\MSSQL$MICROSOFT##WID\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\ksnproxy\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\ksnproxy\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\ksnproxy\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\ksnproxy\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\ksnproxy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\ksnproxy\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\ksnproxy\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\ksnproxy\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\ksnproxy\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\ksnproxy\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc.PRAVO\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc.PRAVO\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc.PRAVO\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc.PRAVO\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc.PRAVO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc.PRAVO\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc.PRAVO\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc.PRAVO\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc.PRAVO\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\KlNagSvc.PRAVO\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\isla\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\isla\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\isla\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\isla\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\isla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\isla\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\isla\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\isla\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\isla\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\isla\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\g_evgeniy\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\g_evgeniy\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\g_evgeniy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\g_evgeniy\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\Users\g_evgeniy\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\ProgramData\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000001865 _____ C:\ProgramData\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\spfarm\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\spfarm\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\spfarm\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\spfarm\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\spfarm\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\Public\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\Public\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\Public\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\Public\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQLFDLauncher\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQLFDLauncher\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQLFDLauncher\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQLFDLauncher\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQLFDLauncher\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQLFDLauncher\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQLFDLauncher\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQLFDLauncher\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQLFDLauncher\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQLFDLauncher\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQL$MICROSOFT##WID\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQL$MICROSOFT##WID\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQL$MICROSOFT##WID\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQL$MICROSOFT##WID\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQL$MICROSOFT##WID\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQL$MICROSOFT##WID\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQL$MICROSOFT##WID\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQL$MICROSOFT##WID\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQL$MICROSOFT##WID\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\MSSQL$MICROSOFT##WID\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\ksnproxy\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\ksnproxy\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\ksnproxy\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\ksnproxy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\ksnproxy\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\ksnproxy\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\ksnproxy\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\ksnproxy\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\ksnproxy\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\ksnproxy\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc.PRAVO\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc.PRAVO\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc.PRAVO\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc.PRAVO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc.PRAVO\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc.PRAVO\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc.PRAVO\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc.PRAVO\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc.PRAVO\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\KlNagSvc.PRAVO\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\isla\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\isla\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\isla\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\isla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\isla\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\isla\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\isla\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\isla\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\isla\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\isla\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\g_evgeniy\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\g_evgeniy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\g_evgeniy\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\g_evgeniy\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\Users\g_evgeniy\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\ProgramData\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:43 - 2021-03-27 01:43 - 000000948 ____H C:\ProgramData\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:42 - 2021-03-27 01:42 - 000001865 _____ C:\Users\victor.novossad\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:42 - 2021-03-27 01:42 - 000001865 _____ C:\Users\victor.novossad\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:42 - 2021-03-27 01:42 - 000001865 _____ C:\Users\victor.novossad\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:42 - 2021-03-27 01:42 - 000001865 _____ C:\Users\sqladmin\HOW TO BACK YOUR FILES.txt
2021-03-27 01:42 - 2021-03-27 01:42 - 000001865 _____ C:\Users\sqladmin\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:42 - 2021-03-27 01:42 - 000001865 _____ C:\Users\sqladmin\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:42 - 2021-03-27 01:42 - 000001865 _____ C:\Users\sqladmin\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:42 - 2021-03-27 01:42 - 000001865 _____ C:\Users\sqladmin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:42 - 2021-03-27 01:42 - 000001865 _____ C:\Users\sqladmin\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:42 - 2021-03-27 01:42 - 000001865 _____ C:\Users\sqladmin\AppData\Roaming\HOW TO BACK YOUR FILES.txt
2021-03-27 01:42 - 2021-03-27 01:42 - 000001865 _____ C:\Users\sqladmin\AppData\LocalLow\HOW TO BACK YOUR FILES.txt
2021-03-27 01:42 - 2021-03-27 01:42 - 000001865 _____ C:\Users\sqladmin\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:42 - 2021-03-27 01:42 - 000001865 _____ C:\Users\sqladmin\AppData\HOW TO BACK YOUR FILES.txt
2021-03-27 01:42 - 2021-03-27 01:42 - 000001865 _____ C:\Users\spfarm\HOW TO BACK YOUR FILES.txt
2021-03-27 01:42 - 2021-03-27 01:42 - 000001865 _____ C:\Users\spfarm\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:42 - 2021-03-27 01:42 - 000001865 _____ C:\Users\spfarm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:42 - 2021-03-27 01:42 - 000001865 _____ C:\Users\spfarm\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:42 - 2021-03-27 01:42 - 000000948 ____H C:\Users\victor.novossad\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:42 - 2021-03-27 01:42 - 000000948 ____H C:\Users\victor.novossad\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:42 - 2021-03-27 01:42 - 000000948 ____H C:\Users\victor.novossad\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:42 - 2021-03-27 01:42 - 000000948 ____H C:\Users\sqladmin\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:42 - 2021-03-27 01:42 - 000000948 ____H C:\Users\sqladmin\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:42 - 2021-03-27 01:42 - 000000948 ____H C:\Users\sqladmin\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:42 - 2021-03-27 01:42 - 000000948 ____H C:\Users\sqladmin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:42 - 2021-03-27 01:42 - 000000948 ____H C:\Users\sqladmin\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:42 - 2021-03-27 01:42 - 000000948 ____H C:\Users\sqladmin\AppData\Roaming\.A8D68E42E88BFDF0D21E
2021-03-27 01:42 - 2021-03-27 01:42 - 000000948 ____H C:\Users\sqladmin\AppData\LocalLow\.A8D68E42E88BFDF0D21E
2021-03-27 01:42 - 2021-03-27 01:42 - 000000948 ____H C:\Users\sqladmin\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:42 - 2021-03-27 01:42 - 000000948 ____H C:\Users\sqladmin\AppData\.A8D68E42E88BFDF0D21E
2021-03-27 01:42 - 2021-03-27 01:42 - 000000948 ____H C:\Users\sqladmin\.A8D68E42E88BFDF0D21E
2021-03-27 01:42 - 2021-03-27 01:42 - 000000948 ____H C:\Users\spfarm\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:42 - 2021-03-27 01:42 - 000000948 ____H C:\Users\spfarm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:42 - 2021-03-27 01:42 - 000000948 ____H C:\Users\spfarm\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:42 - 2021-03-27 01:42 - 000000948 ____H C:\Users\spfarm\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:42 - 2021-03-27 01:42 - 000000948 ____H C:\Users\spfarm\.A8D68E42E88BFDF0D21E
2021-03-27 01:38 - 2021-03-27 01:38 - 000001865 _____ C:\Users\victor.novossad\Downloads\HOW TO BACK YOUR FILES.txt
2021-03-27 01:38 - 2021-03-27 01:38 - 000001865 _____ C:\Users\victor.novossad\Desktop\HOW TO BACK YOUR FILES.txt
2021-03-27 01:38 - 2021-03-27 01:38 - 000000948 ____H C:\Users\victor.novossad\Downloads\.A8D68E42E88BFDF0D21E
2021-03-27 01:38 - 2021-03-27 01:38 - 000000948 ____H C:\Users\victor.novossad\Desktop\.A8D68E42E88BFDF0D21E
2021-03-27 01:37 - 2021-03-27 01:37 - 000001865 _____ C:\Users\victor.novossad\AppData\Local\Temp\HOW TO BACK YOUR FILES.txt
2021-03-27 01:37 - 2021-03-27 01:37 - 000000948 ____H C:\Users\victor.novossad\AppData\Local\Temp\.A8D68E42E88BFDF0D21E
2021-03-27 01:33 - 2021-03-27 01:33 - 000001360 ____N C:\Users\sqladmin\AppData\Local\Temp\ymfctc.vbs.Globeimposter-Alpha666qqz
2021-03-27 01:32 - 2021-03-27 15:30 - 000000000 ____D C:\Users\isla\Desktop\glob_txt
2021-03-27 01:32 - 2021-03-27 01:43 - 000000000 ____D C:\Users\isla\Desktop\DefenderControl
2021-03-27 01:32 - 2021-03-27 01:32 - 000001865 _____ C:\Users\victor.novossad\HOW TO BACK YOUR FILES.txt
2021-03-27 01:32 - 2021-03-27 01:32 - 000001865 _____ C:\Users\victor.novossad\Documents\HOW TO BACK YOUR FILES.txt
2021-03-27 01:32 - 2021-03-27 01:32 - 000001865 _____ C:\Users\victor.novossad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HOW TO BACK YOUR FILES.txt
2021-03-27 01:32 - 2021-03-27 01:32 - 000001865 _____ C:\Users\victor.novossad\AppData\Roaming\Microsoft\Windows\Start Menu\HOW TO BACK YOUR FILES.txt
2021-03-27 01:32 - 2021-03-27 01:32 - 000001865 _____ C:\Users\HOW TO BACK YOUR FILES.txt
2021-03-27 01:32 - 2021-03-27 01:32 - 000001865 _____ C:\HOW TO BACK YOUR FILES.txt
2021-03-27 01:32 - 2021-03-27 01:32 - 000000948 ____H C:\Users\victor.novossad\Documents\.A8D68E42E88BFDF0D21E
2021-03-27 01:32 - 2021-03-27 01:32 - 000000948 ____H C:\Users\victor.novossad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.A8D68E42E88BFDF0D21E
2021-03-27 01:32 - 2021-03-27 01:32 - 000000948 ____H C:\Users\victor.novossad\AppData\Roaming\Microsoft\Windows\Start Menu\.A8D68E42E88BFDF0D21E
2021-03-27 01:32 - 2021-03-27 01:32 - 000000948 ____H C:\Users\victor.novossad\.A8D68E42E88BFDF0D21E
2021-03-27 01:32 - 2021-03-27 01:32 - 000000948 ____H C:\Users\.A8D68E42E88BFDF0D21E
2021-03-27 01:32 - 2021-03-27 01:32 - 000000948 ____H C:\.A8D68E42E88BFDF0D21E
End::


2. Скопируйте выделенный текст (правая кнопка мышиКопировать).
3. Запустите Farbar Recovery Scan Tool.
4. Нажмите один раз на кнопку Fix и подождите. Программа создаст лог-файл (Fixlog.txt). Пожалуйста, прикрепите его в следующем сообщении.

 

  • Обратите внимание: перезагрузку компьютера нужно выполнить вручную после данного скрипта.


 

Ссылка на сообщение
Поделиться на другие сайты

Присоединяйтесь к обсуждению

Вы можете написать сейчас и зарегистрироваться позже. Если у вас есть аккаунт, авторизуйтесь, чтобы опубликовать от имени своего аккаунта.

Гость
Ответить в этой теме...

×   Вставлено с форматированием.   Вставить как обычный текст

  Разрешено использовать не более 75 эмодзи.

×   Ваша ссылка была автоматически встроена.   Отображать как обычную ссылку

×   Ваш предыдущий контент был восстановлен.   Очистить редактор

×   Вы не можете вставлять изображения напрямую. Загружайте или вставляйте изображения по ссылке.

  • Похожий контент

    • Veresk
      От Veresk
      Всем доброго дня.
       
      Физический сервер, Windows 2003 R2 (Service Pack 2), лицензия, антивируса нет. Два стечения обстоятельств - забытая старая учетка с довольно простым паролем и открытый RDP (хоть и не на стандартном порту), который открывался на "пару дней" полгода назад. Под конец рабочего дня, некто, с канадского IP (если верить логам - Имя клиента: WIN-SLK700A2O30,  Адрес клиента: 172.245.27.60) зашел по RDP на сервер, и сделал свое грязное дело. Обнаружилось все только на следующее утро.
       
      На сервере крутится библиотечная база, бэкап базы есть (пусть и месячной давности), но самая большая потеря - это электронные копии статей/книг/публикаций и т.п..
       
      Отправляли зашифрованные файлы в drweb, там определили заразу как Trojan.Encoder #Maoloa, и расшифровать они не могут.
       
      В архиве есть пара файлов в нормальном и зашифрованном виде ("Задание_на_обновление_базы_Web.bat" и "КАБИС. Catalog.doc")
       
      Для просмотра уведомления о том что файлы зашифрованы нужно было запустить "HOW TO BACK YOUR FILES.exe", который по сути показывал html-страничку, 
      FRST.txt Addition.txt __KABIS_VIRUS.zip how_to_back_your_files.html
    • Alex Nikitin
      От Alex Nikitin
      Здравствуйте!
      На SQL сервере поймали вирус шифровальщик globeimposter-alpha666qqz
      Утилитой не удалось собрать логи
      Прикрепляю файлы зашифрованные
      образец.rar
    • Дмитрий93
      От Дмитрий93
      Добрый день, зашифровали файлы. Есть ли возможность расшифровки?
      Письмо во вложении. Globeimposter-Alpha666qqz расширение файла стало такое.
      HOW TO BACK YOUR FILES.txt
    • Arsen_z3
      От Arsen_z3
      Здравствуйте! 
       
      подскажите, сталкивался ли кто-то с шифровальщиком, которые добавляет расширение Globeimpostar-Alpha666qqz?  Вроде  Maoloi называется
    • viruga
      От viruga
      Зашифрован весь диск, подключились по удаленке через порт, в конце каждого файла: Hermes666 Возможно ли как-то решить проблему? Спасибо.
      Файлы которые генерирует шивровщик.zip
      отчет Farbar Recovery Scan Tool.rar
×
×
  • Создать...