Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Cryptowall 3.0


  • This topic is locked This topic is locked
30 replies to this topic

#1 wademon

wademon

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:04:33 PM

Posted 03 February 2015 - 01:11 AM

Sorry I have already ran scans with Malwarebyes Pro, Super AntiSpyware Pro, Combofix, RogueKiller, AdwCleaner, JRT, TDSSKiller, and Rectordecryptor. I had done all of this prior to seeing forum post here. I seen post from "Oh My" resolving this issue, just unsure on where to go after post 16. I believe Computer is close to being clean and just need to decrypt files. This is copy of FRST with *decrypt* filter. 
Thank you for any help.
Wademon
 
 
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 01-02-2015
Ran by Jay (administrator) on JAY-PC on 02-02-2015 23:07:59
Running from C:\Users\Jay\Desktop
Loaded Profiles: Jay (Available profiles: Jay)
Platform: Microsoft Windows 7 Professional  Service Pack 1 (X86) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Wave Systems Corp.) C:\Program Files\Wave Systems Corp\Trusted Drive Manager\TdmService.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
(TeamViewer GmbH) C:\Program Files\TeamViewer\TeamViewer_Service.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\TeamViewer_Desktop.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\tv_w32.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Microsoft) C:\dell\DBRM\Reminder\DbrmTrayicon.exe
(SUPERAntiSpyware) C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Intel Corporation) C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files\Intel\AMT\lms.exe
(Intel Corporation) C:\Program Files\Common Files\Intel\Privacy Icon\UNS\UNS.exe
 
 
==================== Registry (Whitelisted) ==================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [974432 2014-08-22] (Microsoft Corporation)
HKLM\...\Run: [DBRMTray] => C:\Dell\DBRM\Reminder\DbrmTrayIcon.exe [203776 2009-11-12] (Microsoft)
HKLM\...\Run: [SDTray] => C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
HKLM\...\RunOnce: [DBRMTray] => C:\Dell\DBRM\Reminder\TrayApp.exe [7168 2010-02-04] (Microsoft)
Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X]
HKU\S-1-5-21-4268295745-387851499-3762584080-1000\...\Run: [SUPERAntiSpyware] => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [6699800 2015-01-30] (SUPERAntiSpyware)
Lsa: [Authentication Packages] msv1_0 wvauth
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll (Autodesk, Inc.)
ShellIconOverlayIdentifiers: [EnabledUnlockedFDEIconOverlay] -> {30D3C2AF-9709-4D05-9CF4-13335F3C1E4A} => C:\Program Files\Wave Systems Corp\Trusted Drive Manager\TdmIconOverlay.dll (Wave Systems Corp.)
ShellIconOverlayIdentifiers: [UninitializedFdeIconOverlay] -> {CF08DA3E-C97D-4891-A66B-E39B28DD270F} => C:\Program Files\Wave Systems Corp\Trusted Drive Manager\TdmIconOverlay.dll (Wave Systems Corp.)
BootExecute: autocheck autochk * sdnclean.exe
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 
==================== Internet (Whitelisted) ====================
 
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 
HKU\S-1-5-21-4268295745-387851499-3762584080-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
SearchScopes: HKLM -> {460C3D19-B3D4-4964-A550-77D263B0CCCB} URL = http://www.bing.com/search?q={searchTerms}&form=DLRDF8&pc=MDDR&src=IE-SearchBox
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-4268295745-387851499-3762584080-1000 -> {87689F23-4EB9-4384-89BF-CF9AF2196A50} URL = 
BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKU\S-1-5-21-4268295745-387851499-3762584080-1000 -> No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
DPF: {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} http://catalog.update.microsoft.com/v7/site/ClientControl/en/x86/MuCatalogWebControl.cab?1315506439017
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Tcpip\..\Interfaces\{A3A6E14B-2400-4371-AAB1-38268889876A}: [NameServer] 8.8.8.8,8.8.4.4
 
FireFox:
========
FF ProfilePath: C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default
FF SelectedSearchEngine: StartWeb
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_16_0_0_296.dll ()
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.10.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.10.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=14.0.8081.0709 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
 
Chrome: 
=======
CHR HomePage: Default -> hxxp://start.iminent.com/?appId=6911B625-6CC7-416A-A7BC-3F6272690275
CHR StartupUrls: Default -> "hxxp://start.iminent.com/?appId=6911B625-6CC7-416A-A7BC-3F6272690275"
CHR DefaultSearchKeyword: Default -> start.iminent.com
CHR DefaultSearchURL: Default -> http://start.iminent.com/?appId=6911B625-6CC7-416A-A7BC-3F6272690275&ref=toolbox&q={searchTerms}
CHR DefaultSuggestURL: Default -> 
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\39.0.2171.95\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\39.0.2171.95\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\39.0.2171.95\pdf.dll ()
CHR Plugin: (registryAccess) - C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaojmikegpiepcfdkkjaplodkpfmlo\7.15.14.33467_0\background/registryAccess.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File
CHR Plugin: (Java™ Platform SE 7 U10) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (McAfee Security Scanner +) - C:\Program Files\McAfee Security Scan\3.0.318\npMcAfeeMss.dll No File
CHR Plugin: (Windows Live® Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.100.18) - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll No File
CHR Profile: C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2015-01-30]
CHR Extension: (Google Wallet) - C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-23]
 
========================== Services (Whitelisted) =================
 
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 
R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE [142648 2014-09-23] (SUPERAntiSpyware.com)
S2 8df1bcd0; c:\Program Files\Optimizer Pro 3.38\OptProMon.dll [1633848 2015-01-30] ()
S3 FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [1045840 2013-03-05] (Flexera Software LLC.)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22192 2014-08-22] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [288120 2014-08-22] (Microsoft Corporation)
R2 SDScannerService; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
S3 SecureStorageService; C:\Program Files\Wave Systems Corp\Secure Storage Manager\SecureStorageService.exe [1032192 2010-02-03] (Wave Systems Corp.) [File not signed]
S2 tcsd_win32.exe; C:\Program Files\NTRU Cryptosystems\NTRU TCG Software Stack\bin\tcsd_win32.exe [1273856 2008-11-12] () [File not signed]
R2 TdmService; C:\Program Files\Wave Systems Corp\Trusted Drive Manager\TdmService.exe [1164648 2010-03-29] (Wave Systems Corp.)
R2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [5429520 2015-01-30] (TeamViewer GmbH)
R2 UNS; C:\Program Files\Common Files\Intel\Privacy Icon\UNS\UNS.exe [2066968 2010-02-18] (Intel Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-26] (Microsoft Corporation)
S2 22134214; "C:\Windows\system32\rundll32.exe" "c:\Program Files\Super Optimizer\SupOptStats.dll",ENT
 
==================== Drivers (Whitelisted) ====================
 
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [231800 2014-07-17] (Microsoft Corporation)
R1 MpKsl4a54521e; c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{C15547B3-8201-4EBB-A0C4-87B502CDB6BC}\MpKsl4a54521e.sys [39464 2015-02-02] (Microsoft Corporation)
S3 NAL; C:\Windows\system32\Drivers\iqvw32.sys [30880 2009-10-14] (Intel Corporation )
R0 PBADRV; C:\Windows\System32\DRIVERS\PBADRV.sys [26608 2008-06-04] (Dell Inc)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS [12880 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS [67664 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R2 WavxDMgr; C:\Windows\System32\DRIVERS\WavxDMgr.sys [229888 2010-01-19] (Wave Systems Corp.) [File not signed]
S3 lmimirr; system32\DRIVERS\lmimirr.sys [X]
 
==================== NetSvcs (Whitelisted) ===================
 
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 
==================== One Month Created Files and Folders ========
 
(If an entry is included in the fixlist, the file\folder will be moved.)
 
2015-02-02 23:07 - 2015-02-02 23:08 - 00013311 _____ () C:\Users\Jay\Desktop\FRST.txt
2015-02-02 22:49 - 2015-02-02 22:50 - 00025059 _____ () C:\Users\Jay\Desktop\Additionno decrypt.txt
2015-02-02 22:48 - 2015-02-02 22:50 - 00031755 _____ () C:\Users\Jay\Desktop\FRSTnodecrypt.txt
2015-02-02 19:38 - 2015-02-02 23:08 - 00000000 ____D () C:\FRST
2015-02-02 19:33 - 2015-02-02 19:33 - 00002133 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2015-02-02 19:33 - 2015-02-02 19:33 - 00002121 _____ () C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2015-02-02 19:33 - 2015-02-02 19:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2015-02-02 19:32 - 2013-09-20 10:49 - 00018968 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean.exe
2015-02-02 19:25 - 2015-02-02 21:29 - 00010283 _____ () C:\Windows\wininit.ini
2015-02-02 19:23 - 2015-02-02 19:24 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\Jay\Downloads\spybot-2.4.exe
2015-02-02 19:12 - 2015-02-02 19:10 - 01122304 _____ (Farbar) C:\Users\Jay\Desktop\FRST.exe
2015-02-02 19:05 - 2015-02-02 19:11 - 00227576 _____ () C:\Users\Jay\Desktop\SystemLook.txt
2015-02-02 19:03 - 2015-02-02 22:48 - 00000000 ____D () C:\Users\Jay\Desktop\Clean tools
2015-02-02 10:29 - 2015-02-02 14:34 - 00000000 ____D () C:\NPE
2015-02-02 10:26 - 2015-02-02 15:17 - 00000000 ____D () C:\Users\Jay\AppData\Local\NPE
2015-02-01 21:22 - 2015-02-02 08:58 - 00035064 _____ () C:\Windows\system32\Drivers\TrueSight.sys
2015-02-01 21:22 - 2015-02-02 06:59 - 00000000 ____D () C:\ProgramData\RogueKiller
2015-02-01 21:18 - 2015-02-01 21:18 - 00001052 _____ () C:\Users\Jay\Desktop\JRT.txt
2015-02-01 21:17 - 2015-02-02 06:59 - 00000000 ____D () C:\Windows\ERUNT
2015-02-01 20:48 - 2015-02-01 20:49 - 04176437 _____ () C:\Users\Jay\Downloads\tdsskiller.zip
2015-02-01 10:18 - 2015-02-01 10:18 - 00020124 _____ () C:\ComboFix.txt
2015-02-01 10:01 - 2011-06-25 23:45 - 00256000 _____ () C:\Windows\PEV.exe
2015-02-01 10:01 - 2010-11-07 10:20 - 00208896 _____ () C:\Windows\MBR.exe
2015-02-01 10:01 - 2009-04-19 21:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-02-01 10:01 - 2000-08-30 17:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-02-01 10:01 - 2000-08-30 17:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-02-01 10:01 - 2000-08-30 17:00 - 00098816 _____ () C:\Windows\sed.exe
2015-02-01 10:01 - 2000-08-30 17:00 - 00080412 _____ () C:\Windows\grep.exe
2015-02-01 10:01 - 2000-08-30 17:00 - 00068096 _____ () C:\Windows\zip.exe
2015-02-01 10:00 - 2015-02-02 06:59 - 00000000 ____D () C:\Windows\erdnt
2015-02-01 10:00 - 2015-02-02 06:58 - 00000000 ____D () C:\Qoobox
2015-02-01 09:59 - 2015-02-01 09:59 - 00000000 ____D () C:\Users\Jay\AppData\Local\TeamViewer
2015-02-01 09:58 - 2015-02-02 12:26 - 00000000 ____D () C:\Program Files\TeamViewer
2015-02-01 09:58 - 2015-02-01 09:58 - 00001003 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 10.lnk
2015-02-01 09:58 - 2015-02-01 09:58 - 00000991 _____ () C:\Users\Public\Desktop\TeamViewer 10.lnk
2015-02-01 09:58 - 2015-02-01 09:58 - 00000000 ____D () C:\Users\Jay\AppData\Roaming\TeamViewer
2015-02-01 03:06 - 2015-02-01 03:06 - 00008554 _____ () C:\Users\Jay\HELP_DECRYPT.HTML
2015-02-01 03:06 - 2015-02-01 03:06 - 00008554 _____ () C:\Users\Jay\Downloads\HELP_DECRYPT.HTML
2015-02-01 03:06 - 2015-02-01 03:06 - 00008554 _____ () C:\Users\Jay\Documents\HELP_DECRYPT.HTML
2015-02-01 03:06 - 2015-02-01 03:06 - 00008554 _____ () C:\Users\Jay\Desktop\HELP_DECRYPT.HTML
2015-02-01 03:06 - 2015-02-01 03:06 - 00004220 _____ () C:\Users\Jay\HELP_DECRYPT.TXT
2015-02-01 03:06 - 2015-02-01 03:06 - 00004220 _____ () C:\Users\Jay\Downloads\HELP_DECRYPT.TXT
2015-02-01 03:06 - 2015-02-01 03:06 - 00004220 _____ () C:\Users\Jay\Documents\HELP_DECRYPT.TXT
2015-02-01 03:06 - 2015-02-01 03:06 - 00004220 _____ () C:\Users\Jay\Desktop\HELP_DECRYPT.TXT
2015-02-01 03:06 - 2015-02-01 03:06 - 00000276 _____ () C:\Users\Jay\HELP_DECRYPT.URL
2015-02-01 03:06 - 2015-02-01 03:06 - 00000276 _____ () C:\Users\Jay\Downloads\HELP_DECRYPT.URL
2015-02-01 03:06 - 2015-02-01 03:06 - 00000276 _____ () C:\Users\Jay\Documents\HELP_DECRYPT.URL
2015-02-01 03:06 - 2015-02-01 03:06 - 00000276 _____ () C:\Users\Jay\Desktop\HELP_DECRYPT.URL
2015-02-01 03:05 - 2015-02-01 03:05 - 00008554 _____ () C:\Users\Jay\AppData\Roaming\HELP_DECRYPT.HTML
2015-02-01 03:05 - 2015-02-01 03:05 - 00008554 _____ () C:\Users\Jay\AppData\HELP_DECRYPT.HTML
2015-02-01 03:05 - 2015-02-01 03:05 - 00004220 _____ () C:\Users\Jay\AppData\Roaming\HELP_DECRYPT.TXT
2015-02-01 03:05 - 2015-02-01 03:05 - 00004220 _____ () C:\Users\Jay\AppData\HELP_DECRYPT.TXT
2015-02-01 03:05 - 2015-02-01 03:05 - 00000276 _____ () C:\Users\Jay\AppData\Roaming\HELP_DECRYPT.URL
2015-02-01 03:05 - 2015-02-01 03:05 - 00000276 _____ () C:\Users\Jay\AppData\HELP_DECRYPT.URL
2015-02-01 02:56 - 2015-02-02 06:59 - 00000000 ____D () C:\Users\Jay\AppData\Roaming\Local Store
2015-01-31 12:15 - 2015-01-31 12:16 - 00101814 _____ () C:\Users\Jay\Downloads\EB0D.tmp
2015-01-31 12:13 - 2015-01-31 12:13 - 00376184 _____ () C:\Users\Jay\Downloads\Unconfirmed 688426.crdownload
2015-01-31 08:42 - 2015-01-31 08:42 - 00568174 _____ () C:\Users\Jay\Downloads\Unconfirmed 8624.crdownload
2015-01-31 08:39 - 2015-01-31 08:39 - 00402574 _____ () C:\Users\Jay\Downloads\Unconfirmed 288907.crdownload
2015-01-31 08:10 - 2015-01-31 08:11 - 00449494 _____ () C:\Users\Jay\Downloads\Unconfirmed 603633.crdownload
2015-01-30 20:59 - 2015-01-30 20:59 - 00376184 _____ () C:\Users\Jay\Downloads\Unconfirmed 596293.crdownload
2015-01-30 20:11 - 2015-01-30 20:12 - 00376184 _____ () C:\Users\Jay\Downloads\Unconfirmed 157822.crdownload
2015-01-30 19:22 - 2015-01-30 19:22 - 00376184 _____ () C:\Users\Jay\Downloads\Unconfirmed 723395.crdownload
2015-01-30 19:21 - 2015-01-30 19:21 - 00376184 _____ () C:\Users\Jay\Downloads\Unconfirmed 722475.crdownload
2015-01-30 18:49 - 2015-01-30 18:49 - 00376184 _____ () C:\Users\Jay\Downloads\Unconfirmed 549094.crdownload
2015-01-30 18:30 - 2015-01-30 18:30 - 00009412 _____ () C:\Users\Jay\Downloads\Unconfirmed 320572.crdownload
2015-01-30 15:01 - 2015-01-30 15:01 - 00390512 _____ (INSTALLER_COMPANY_NAME) C:\Users\Jay\Downloads\Unconfirmed 941856.crdownload
2015-01-30 10:08 - 2015-02-02 21:29 - 00000000 ____D () C:\Program Files\Optimizer Pro 3.38
2015-01-30 10:08 - 2015-02-02 08:07 - 00000000 ____D () C:\ProgramData\{f71e25ed-8b90-5375-f71e-e25ed8b997b6}
2015-01-28 23:46 - 2015-01-29 18:00 - 01280140 _____ () C:\ProgramData\befecgj.html
2015-01-28 23:45 - 2015-01-28 23:45 - 03932214 _____ () C:\Users\Jay\Documents\Decrypt-All-Files-jytxdub.bmp
2015-01-28 23:45 - 2015-01-28 23:45 - 00001552 _____ () C:\Users\Jay\Documents\Decrypt-All-Files-jytxdub.txt
2015-01-27 13:17 - 2015-02-02 06:59 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2015-01-27 13:05 - 2015-01-27 13:05 - 00009380 _____ () C:\Users\Jay\Downloads\Unconfirmed 201807.crdownload
2015-01-25 21:38 - 2015-01-25 21:38 - 00375496 _____ () C:\Users\Jay\Downloads\Unconfirmed 399120.crdownload
2015-01-24 12:57 - 2015-01-24 12:57 - 04070576 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerInstaller.exe
2015-01-23 14:13 - 2015-01-23 14:13 - 00008542 _____ () C:\Users\Jay\AppData\Local\HELP_DECRYPT.HTML
2015-01-23 14:13 - 2015-01-23 14:13 - 00008542 _____ () C:\ProgramData\HELP_DECRYPT.HTML
2015-01-23 14:13 - 2015-01-23 14:13 - 00001392 _____ () C:\Users\Jay\AppData\Local\HELP_DECRYPT.TXT.jytxdub
2015-01-23 14:13 - 2015-01-23 14:13 - 00001392 _____ () C:\ProgramData\HELP_DECRYPT.TXT.jytxdub
2015-01-23 14:13 - 2015-01-23 14:13 - 00000272 _____ () C:\Users\Jay\AppData\Local\HELP_DECRYPT.URL
2015-01-23 14:13 - 2015-01-23 14:13 - 00000272 _____ () C:\ProgramData\HELP_DECRYPT.URL
2015-01-23 14:10 - 2015-02-02 08:07 - 00000000 ____D () C:\ProgramData\HirdOhhe
2015-01-22 13:24 - 2015-01-22 13:24 - 03389777 _____ (tuneuppro.com ) C:\Users\Jay\Downloads\6BCE.tmp
2015-01-19 22:33 - 2015-01-19 22:34 - 00035841 _____ () C:\Users\Jay\Downloads\F511.tmp
2015-01-18 21:47 - 2015-01-18 21:49 - 56495408 _____ () C:\Users\Jay\Downloads\DOcJ-FxaFrRg4gtDEwOjJvdTowODE7eZ.mp4
2015-01-15 16:19 - 2014-12-18 19:43 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-01-15 16:19 - 2014-12-18 18:34 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2015-01-15 16:19 - 2014-12-11 22:11 - 03971512 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-01-15 16:19 - 2014-12-11 22:11 - 03916728 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-01-15 16:19 - 2014-12-11 10:47 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2015-01-15 16:19 - 2014-12-05 20:50 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2015-01-07 18:45 - 2015-01-07 18:45 - 00117576 _____ (Swift Installer ) C:\Users\Jay\Downloads\5233.tmp
2015-01-06 22:55 - 2015-01-06 22:55 - 00828336 _____ () C:\Users\Jay\Downloads\sanchari.1.4.zip
 
==================== One Month Modified Files and Folders =======
 
(If an entry is included in the fixlist, the file\folder will be moved.)
 
2015-02-02 22:57 - 2014-03-13 10:59 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-02-02 22:41 - 2010-10-22 11:18 - 00000886 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-02-02 21:29 - 2013-07-31 08:50 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2015-02-02 21:28 - 2009-07-13 21:55 - 01708070 _____ () C:\Windows\WindowsUpdate.log
2015-02-02 19:38 - 2009-07-13 21:34 - 00025424 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-02-02 19:38 - 2009-07-13 21:34 - 00025424 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-02-02 19:37 - 2010-07-22 18:13 - 00782510 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-02-02 19:33 - 2013-07-31 08:50 - 00000000 ____D () C:\Program Files\Spybot - Search & Destroy 2
2015-02-02 19:31 - 2013-08-31 08:13 - 00000000 ____D () C:\Program Files\SUPERAntiSpyware
2015-02-02 19:31 - 2010-10-22 11:18 - 00000882 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-02 19:30 - 2010-07-22 21:00 - 00656964 _____ () C:\Windows\PFRO.log
2015-02-02 19:30 - 2009-07-13 21:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-02 19:30 - 2009-07-13 21:39 - 00041889 _____ () C:\Windows\setupact.log
2015-02-02 17:53 - 2009-07-13 21:52 - 00000000 ____D () C:\Windows\system32\FxsTmp
2015-02-02 11:45 - 2009-07-13 19:37 - 00000000 ____D () C:\Windows\system32\NDF
2015-02-02 10:28 - 2009-07-13 21:53 - 00032570 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-02-02 10:26 - 2010-09-23 07:36 - 00000000 ____D () C:\ProgramData\Norton
2015-02-02 08:09 - 2014-09-23 10:44 - 00114904 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-02-02 08:08 - 2009-07-13 21:52 - 00000000 ____D () C:\Windows\twain_32
2015-02-02 07:13 - 2010-09-23 07:29 - 00167176 _____ () C:\Users\Jay\AppData\Local\GDIPFONTCACHEV1.DAT
2015-02-02 07:00 - 2010-09-23 07:29 - 00000000 ____D () C:\Users\Jay
2015-02-02 07:00 - 2009-07-13 19:37 - 00000000 ____D () C:\Windows\system32\wfp
2015-02-02 06:59 - 2013-08-31 08:13 - 00000000 ____D () C:\Users\Jay\AppData\Roaming\SUPERAntiSpyware.com
2015-02-02 06:59 - 2013-08-31 08:00 - 00000000 ____D () C:\Windows\pss
2015-02-02 06:59 - 2010-10-05 11:41 - 00000000 ___RD () C:\Users\Jay\Documents\Old My Doc
2015-02-02 06:59 - 2010-10-05 11:30 - 00000000 ____D () C:\Users\Jay\AppData\Roaming\Qualcomm
2015-02-02 06:59 - 2009-07-13 19:37 - 00000000 ___RD () C:\Users\Public
2015-02-02 06:59 - 2009-07-13 19:37 - 00000000 ____D () C:\Windows\registration
2015-02-02 06:58 - 2009-07-13 19:37 - 00000000 __RHD () C:\Users\Default
2015-02-01 21:11 - 2015-01-02 14:35 - 00000000 ____D () C:\AdwCleaner
2015-02-01 20:40 - 2009-07-13 21:33 - 00564416 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-02-01 20:39 - 2009-07-13 19:37 - 00000000 ____D () C:\Program Files\Common Files\System
2015-02-01 16:03 - 2011-12-27 08:14 - 00013066 _____ () C:\Windows\123R5MM.INI
2015-02-01 16:03 - 2011-12-27 08:14 - 00000903 _____ () C:\Windows\lotus.ini
2015-02-01 10:15 - 2009-07-13 19:04 - 00000215 _____ () C:\Windows\system.ini
2015-02-01 09:43 - 2011-09-28 15:57 - 00000000 ____D () C:\Users\Jay\AppData\Local\CrashDumps
2015-02-01 09:39 - 2014-12-11 13:33 - 00000000 ____D () C:\Users\Jay\AppData\Roaming\FrameworkUpdate
2015-02-01 09:37 - 2009-07-13 21:52 - 00000000 ____D () C:\Windows\Performance
2015-02-01 08:49 - 2014-12-11 13:33 - 00000696 _____ () C:\ProgramData\@system.temp
2015-02-01 03:06 - 2013-09-10 13:20 - 00000000 ____D () C:\Users\Jay\Documents\CCWin
2015-02-01 03:06 - 2011-11-15 08:11 - 00000000 ____D () C:\Users\Jay\Documents\Personal AutoCAD
2015-02-01 03:06 - 2011-11-15 08:11 - 00000000 ____D () C:\Users\Jay\Documents\Montana West
2015-02-01 03:06 - 2011-09-08 12:22 - 00000000 ____D () C:\Users\Jay\Downloads\oki 4350
2015-01-31 10:47 - 2014-12-30 12:01 - 00000000 ____D () C:\Users\Jay\AppData\Local\12055
2015-01-31 10:47 - 2014-12-30 11:36 - 00000000 ____D () C:\Users\Jay\AppData\Local\71E8F13C-AD18-834A-B53E-B1EBD1B50E7D
2015-01-30 15:13 - 2014-09-23 10:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-01-30 15:13 - 2014-09-23 10:43 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware
2015-01-30 15:13 - 2013-07-31 08:41 - 00001062 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-01-30 09:58 - 2012-10-01 11:51 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2015-01-28 23:52 - 2010-11-17 17:38 - 00000000 ____D () C:\Users\Jay\Documents\Dale Suspension
2015-01-28 23:49 - 2010-10-05 11:37 - 00000000 ____D () C:\Users\Jay\AppData\Roaming\Mozilla
2015-01-28 23:45 - 2010-09-23 07:38 - 00000000 ____D () C:\Users\Jay\Documents\Symantec
2015-01-28 23:43 - 2013-03-05 18:19 - 00000000 ____D () C:\Users\Jay\AppData\Roaming\MapInfo
2015-01-28 23:43 - 2011-08-23 16:21 - 00000000 ____D () C:\Users\Jay\AppData\Local\Symantec
2015-01-28 23:43 - 2011-04-28 08:13 - 00000000 ____D () C:\Users\Jay\AppData\Roaming\Autodesk
2015-01-28 23:43 - 2010-10-05 11:37 - 00000000 ____D () C:\Users\Jay\AppData\Local\Mozilla
2015-01-28 23:43 - 2010-09-23 08:38 - 00000000 ____D () C:\Users\Jay\AppData\Roaming\Adobe
2015-01-28 23:42 - 2013-08-31 08:13 - 00000000 ____D () C:\ProgramData\SUPERAntiSpyware.com
2015-01-28 23:42 - 2011-04-28 08:13 - 00000000 ____D () C:\Users\Jay\AppData\Local\Autodesk
2015-01-28 23:42 - 2010-10-22 11:18 - 00000000 ____D () C:\Users\Jay\AppData\Local\Google
2015-01-28 23:41 - 2011-12-27 08:13 - 00000000 ____D () C:\123R5MM
2015-01-28 23:40 - 2011-04-28 08:20 - 00000000 ____D () C:\ProgramData\FLEXnet
2015-01-24 12:57 - 2013-10-25 09:34 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-01-24 12:57 - 2011-12-30 17:12 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-01-16 03:09 - 2013-07-29 02:05 - 00000000 ____D () C:\Windows\system32\MRT
2015-01-16 03:02 - 2010-10-05 13:32 - 110348472 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-01-05 13:26 - 2013-07-08 19:20 - 00078800 _____ () C:\Users\Jay\Downloads\BingPlacesSample.XLSX.jytxdub
 
==================== Files in the root of some directories =======
 
2015-02-01 03:05 - 2015-02-01 03:05 - 0008554 _____ () C:\Users\Jay\AppData\Roaming\HELP_DECRYPT.HTML
2015-02-01 03:05 - 2015-02-01 03:05 - 0045593 _____ () C:\Users\Jay\AppData\Roaming\HELP_DECRYPT.PNG
2015-02-01 03:05 - 2015-02-01 03:05 - 0004220 _____ () C:\Users\Jay\AppData\Roaming\HELP_DECRYPT.TXT
2015-02-01 03:05 - 2015-02-01 03:05 - 0000276 _____ () C:\Users\Jay\AppData\Roaming\HELP_DECRYPT.URL
2010-09-23 08:38 - 2010-09-23 08:38 - 0012358 _____ () C:\Users\Jay\AppData\Roaming\PFP120JCM.{PB
2010-09-23 08:38 - 2010-09-23 08:38 - 0061678 _____ () C:\Users\Jay\AppData\Roaming\PFP120JPR.{PB
2014-12-11 13:33 - 2014-12-11 13:33 - 0000480 ____H () C:\Users\Jay\AppData\Roaming\麽鎒駓覜
2015-01-23 14:13 - 2015-01-23 14:13 - 0008542 _____ () C:\Users\Jay\AppData\Local\HELP_DECRYPT.HTML
2015-01-23 14:13 - 2015-01-23 14:13 - 0045595 _____ () C:\Users\Jay\AppData\Local\HELP_DECRYPT.PNG
2015-01-23 14:13 - 2015-01-23 14:13 - 0001392 _____ () C:\Users\Jay\AppData\Local\HELP_DECRYPT.TXT.jytxdub
2015-01-23 14:13 - 2015-01-23 14:13 - 0000272 _____ () C:\Users\Jay\AppData\Local\HELP_DECRYPT.URL
2014-09-18 16:44 - 2014-09-18 16:44 - 0068415 _____ () C:\Users\Jay\AppData\Local\jfotncst
2013-07-31 08:47 - 2013-08-14 10:57 - 0000000 _____ () C:\Users\Jay\AppData\Local\WavXMapDrive.bat
2011-01-04 14:55 - 2013-07-11 14:46 - 0001940 _____ () C:\Users\Jay\AppData\Local\{96C87F53-AC72-4604-A9CC-186A49F17F3C}.ini
2014-12-11 13:33 - 2015-02-01 08:49 - 0000696 _____ () C:\ProgramData\@system.temp
2015-01-28 23:46 - 2015-01-29 18:00 - 1280140 _____ () C:\ProgramData\befecgj.html
2015-01-23 14:13 - 2015-01-23 14:13 - 0008542 _____ () C:\ProgramData\HELP_DECRYPT.HTML
2015-01-23 14:13 - 2015-01-23 14:13 - 0045595 _____ () C:\ProgramData\HELP_DECRYPT.PNG
2015-01-23 14:13 - 2015-01-23 14:13 - 0001392 _____ () C:\ProgramData\HELP_DECRYPT.TXT.jytxdub
2015-01-23 14:13 - 2015-01-23 14:13 - 0000272 _____ () C:\ProgramData\HELP_DECRYPT.URL
 
==================== Bamital & volsnap Check =================
 
(There is no automatic fix for files that do not pass verification.)
 
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
 
 
LastRegBack: 2015-01-28 00:41
 
==================== End Of Log ============================
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 01-02-2015
Ran by Jay at 2015-02-02 23:08:17
Running from C:\Users\Jay\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Microsoft Security Essentials (Enabled - Up to date) {4F35CFC4-45A3-FC37-EF17-759A02E39AB1}
AS: Microsoft Security Essentials (Enabled - Up to date) {F4542E20-6399-F3B9-D5A7-4EE87964D00C}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

2007 Microsoft Office system (HKLM\...\PROHYBRIDR) (Version: 12.0.6612.1000 - Microsoft Corporation)
3-D TopoQuads (HKLM\...\3-D TopoQuads) (Version: - )
ADDS Flight Path Tool (HKU\S-1-5-21-4268295745-387851499-3762584080-1000\...\ADDS Flight Path Tool) (Version: - Aviation Weather Center)
Adobe AIR (HKLM\...\Adobe AIR) (Version: 2.0.4.13090 - Adobe Systems Inc.)
Adobe Flash Player 10 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 10.0.42.34 - Adobe Systems Incorporated)
Adobe Flash Player 16 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 16.0.0.296 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.05) (HKLM\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.05 - Adobe Systems Incorporated)
AutoCAD 2010 Language Pack - English (Version: 13.0.034.0 - Autodesk) Hidden
AutoCAD Map 3D 2010 (HKLM\...\AutoCAD Map 3D 2010) (Version: 13.0.034.0 - Autodesk)
AutoCAD Map 3D 2010 (Version: 13.0.034.0 - Autodesk) Hidden
BioAPI Framework (Version: 1.0.1 - Dell Inc.) Hidden
DCP32MMWrapper (Version: 1.6.461.83 - Broadcom Corporation) Hidden
Dell Backup and Recovery Manager (HKLM\...\{AC474F86-9A17-4BCB-8B15-11ABFD5B7F95}) (Version: 1.2.3 - Dell Inc.)
Dell Control Point (Version: 1.6.461.83 - Broadcom Corporation) Hidden
Dell ControlPoint Security Manager (HKLM\...\{F4487649-7368-4217-AEA3-1E04DB3E2C5C}) (Version: 1.6.461.83 - Dell Inc.)
Dell Edoc Viewer (HKLM\...\{3138EAD3-700B-4A10-B617-B3F8096EE30D}) (Version: 1.0.0 - Dell Inc)
Dell Embassy Trust Suite by Wave Systems (Version: 03.05.03.000 - Wave Systems Corp) Hidden
Dell Security Device Driver Pack (HKLM\...\{FF1DDCF4-3A28-4F7F-96D8-E3F4BD1C1702}) (Version: 1.4.055 - Dell Inc.)
Document Manager Lite (Version: 06.09.00.159 - Wave Systems Corp.) Hidden
EMBASSY Security Center (Version: 04.00.00.101 - Wave Systems Corp) Hidden
EMBASSY Security Setup (Version: 04.00.00.090 - Wave Systems Corp) Hidden
ESC Home Page Plugin (Version: 04.00.00.018 - Wave Systems Corp) Hidden
Eudora (HKLM\...\{3C578FD6-47FA-4426-8215-792E5B744B42}) (Version: 7.0 - )
Gemalto (Version: 01.01.00.0000 - Wave Systems Corp) Hidden
Google Chrome (HKLM\...\Google Chrome) (Version: 39.0.2171.95 - Google Inc.)
Google Earth (HKLM\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden
Intel® Control Center (HKLM\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel® Graphics Media Accelerator Driver (HKLM\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2057 - Intel Corporation)
Intel® Network Connections 14.8.43.0 (HKLM\...\PROSetDX) (Version: 14.8.43.0 - Dell)
Intel® Rapid Storage Technology (HKLM\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 9.6.0.1014 - Intel Corporation)
Intel® TV Wizard (HKLM\...\TVWiz) (Version: - Intel Corporation)
Intel® Active Management Technology (HKLM\...\MESOL) (Version: - Intel Corporation)
Java 7 Update 10 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217010FF}) (Version: 7.0.100 - Oracle)
Java™ 6 Update 20 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83216020FF}) (Version: 6.0.200 - Sun Microsystems, Inc.)
Junk Mail filter update (Version: 14.0.8089.726 - Microsoft Corporation) Hidden
KONICA MINOLTA C652Series (HKLM\...\KONICA MINOLTA C652Series Installer) (Version: - KONICA MINOLTA)
KONICA MINOLTA Universal PCL (HKLM\...\KONICA MINOLTA Universal PCL) (Version: - KONICA MINOLTA)
Malwarebytes Anti-Malware version 2.0.4.1028 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Access database engine 2010 (English) (HKLM\...\{90140000-00D1-0409-0000-0000000FF1CE}) (Version: 14.0.6029.1000 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{91120000-0031-0000-0000-0000000FF1CE}_PROHYBRIDR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office 2010 (HKLM\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.6.305.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Sync Framework Runtime Native v1.0 (x86) (HKLM\...\{8A74E887-8F0F-4017-AF53-CBA42211AAA5}) (Version: 1.0.1215.0 - Microsoft Corporation)
Microsoft Sync Framework Services Native v1.0 (x86) (HKLM\...\{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}) (Version: 1.0.1215.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 35.0.1 (x86 en-US) (HKLM\...\Mozilla Firefox 35.0.1 (x86 en-US)) (Version: 35.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
NTRU TCG Software Stack (Version: 2.1.29 - NTRU Cryptosystems) Hidden
OAS (HKU\S-1-5-21-4268295745-387851499-3762584080-1000\...\Online Ad Scanner) (Version: 1.00 - OAS Corp)
OGA Notifier 2.0.0048.0 (Version: 2.0.0048.0 - Microsoft Corporation) Hidden
PowerDVD DX (HKLM\...\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}) (Version: 8.3.5424 - CyberLink Corp.)
Preboot Manager (Version: 03.00.00.154 - Wave Systems Corp.) Hidden
Private Information Manager (Version: 06.04.00.065 - Wave Systems Corp.) Hidden
RadioWORKS (HKLM\...\{2760CEE4-D4DA-4B3F-A03E-93492D397F11}) (Version: 2.0.12 - Joseph B. Kowalski)
Roxio Creator DE 10.3 (HKLM\...\{09760D42-E223-42AD-8C3E-55B47D0DDAC3}) (Version: 10.3 - Roxio)
Security Wizards (Version: 01.07.00.026 - Your Company Name) Hidden
SO32MMWrapper (Version: 1.6.461.83 - Broadcom Corporation) Hidden
Spybot - Search & Destroy (HKLM\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
SUPERAntiSpyware (HKLM\...\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}) (Version: 5.6.1030 - SUPERAntiSpyware.com)
TeamViewer 10 (HKLM\...\TeamViewer) (Version: 10.0.38475 - TeamViewer)
Trusted Drive Manager (Version: 3.3.3.104 - Wave Systems Corp.) Hidden
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{91120000-0031-0000-0000-0000000FF1CE}_PROHYBRIDR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
UPEK TouchChip Fingerprint Reader (Version: 1.2.0 - Dell Inc.) Hidden
Visual Studio 2012 x86 Redistributables (HKLM\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
Wave Infrastructure Installer (Version: 07.01.30.0022 - Wave Systems Corp) Hidden
Wave Support Software (Version: 05.10.00.073 - Wave Systems Corp) Hidden
Windows Driver Package - Dell Inc. PBADRV System (09/11/2009 1.0.1.6) (HKLM\...\9512AA21B791B05A54E27065C45BBC417AB282DF) (Version: 09/11/2009 1.0.1.6 - Dell Inc.)
Windows Live Essentials (HKLM\...\WinLiveSuite_Wave3) (Version: 14.0.8089.0726 - Microsoft Corporation)
Windows Live Sign-in Assistant (HKLM\...\{45338B07-A236-4270-9A77-EBB4115517B5}) (Version: 5.000.818.5 - Microsoft Corporation)
Windows Live Sync (HKLM\...\{84EBDF39-4B33-49D7-A0BD-EB6E2C4E81C1}) (Version: 14.0.8089.726 - Microsoft Corporation)
Windows Live Upload Tool (HKLM\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)
WordPerfect Office 12 (HKLM\...\{AF19F291-F22F-4798-9662-525305AE9E48}) (Version: 12.0.0.238 - Corel Corporation)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-4268295745-387851499-3762584080-1000_Classes\CLSID\{117270FA-48AC-45BB-9171-B63D1B42A910}\localserver32 -> "C:\Users\Jay\AppData\Local\12055\Updater.exe" No File
CustomCLSID: HKU\S-1-5-21-4268295745-387851499-3762584080-1000_Classes\CLSID\{19041B6B-8F97-4669-BA21-C17572737ED2}\localserver32 -> "C:\Users\Jay\AppData\Local\CrossBrowser\Application\36.0.1985.137\delegate_execute.exe" No File
CustomCLSID: HKU\S-1-5-21-4268295745-387851499-3762584080-1000_Classes\CLSID\{6D7AE628-FF41-4CD3-91DD-34825BB1A251}\localserver32 -> C:\Program Files\AutoCAD Map 3D 2010\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-4268295745-387851499-3762584080-1000_Classes\CLSID\{D70E31AD-2614-49F2-B0FC-ACA781D81F3E}\localserver32 -> C:\Program Files\AutoCAD Map 3D 2010\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-4268295745-387851499-3762584080-1000_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\AutoCAD Map 3D 2010\acadficn.dll (Autodesk, Inc.)

==================== Restore Points =========================

31-01-2015 11:11:00 Windows Update
02-02-2015 06:47:18 Restore Operation
02-02-2015 13:53:05 Norton_Power_Eraser_20150202135304551

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-13 19:04 - 2015-02-02 10:17 - 00000747 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {021A52D2-6EE5-48C7-8D09-F0C00758E8AF} - System32\Tasks\gtaUpt => C:\Program Files\shopperz\zaeed.bat
Task: {0FB80217-E2FD-49FF-91B6-E2CFA7DD0FE0} - System32\Tasks\PastaLeads => C:\Program Files\pastaleads\ScheduledTask.exe
Task: {12536B13-481D-42D0-8D17-DE93A29D3E5B} - \lzrfhmi No Task File <==== ATTENTION
Task: {145CAC6E-6B78-4F37-A37B-D4426CE00A86} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-24] (Google Inc.)
Task: {22C8124C-EE23-41D6-93DA-C616ACAD1585} - \SMWPUpd No Task File <==== ATTENTION
Task: {25F6C242-1EB7-4454-BD2F-59EBB2929344} - \Runner IC No Task File <==== ATTENTION
Task: {4682809B-04D5-4965-903B-6FC7C869F3BB} - \SMW_UpdateTask_Time_323135323533383531372d5b4a4a416c34232a2a6c555a No Task File <==== ATTENTION
Task: {4EC837EE-3709-4D8F-BC88-5FAAB19209DB} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-01-24] (Adobe Systems Incorporated)
Task: {5B801F69-AE1D-4C7B-B28A-E4E3F392A754} - System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update2 <==== ATTENTION
Task: {724ACC2F-6471-4B78-93D4-B853771DB429} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-24] (Google Inc.)
Task: {9C6227E7-A198-42AB-B185-A73A8644E8B6} - System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update3 <==== ATTENTION
Task: {B327858D-BF20-43DA-9F30-77C3B280B848} - \Microsoft\Windows\Maintenance\Update IC No Task File <==== ATTENTION

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2011-03-10 15:14 - 2012-07-11 15:49 - 00011264 _____ () C:\Windows\System32\KOAZCJ_L.DLL
2011-03-10 15:14 - 2012-07-11 15:49 - 00011264 _____ () C:\Windows\System32\KOAZCA_L.DLL
2011-03-10 15:14 - 2012-07-11 15:49 - 00888832 _____ () C:\Windows\system32\spool\DRIVERS\W32X86\3\KOAZCJ_O.DLL
2010-01-19 09:44 - 2010-01-19 09:44 - 00249856 _____ () C:\Windows\system32\wxvault.dll
2015-02-02 19:32 - 2014-05-13 12:04 - 00109400 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2015-02-02 19:32 - 2014-05-13 12:04 - 00416600 _____ () C:\Program Files\Spybot - Search & Destroy 2\DEC150.bpl
2015-02-02 19:32 - 2014-05-13 12:04 - 00167768 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2015-02-02 19:32 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files\Spybot - Search & Destroy 2\sqlite3.dll
2015-02-02 19:32 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files\Spybot - Search & Destroy 2\av\BDSmartDB.dll
2014-10-16 02:41 - 2014-10-16 02:41 - 00170496 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\3d576cbc4ffc5ad06fd61510c5d8f326\IsdiInterop.ni.dll
2010-07-22 18:08 - 2010-03-03 17:08 - 00058880 _____ () C:\Program Files\Intel\Intel® Rapid Storage Technology\IsdiInterop.dll
2010-07-22 18:10 - 2010-02-18 12:18 - 00077824 _____ () C:\Program Files\Common Files\Intel\Privacy Icon\UNS\DTMessageLib.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SMR430 => ""="Service"

==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^McAfee Security Scan Plus.lnk => C:\Windows\pss\McAfee Security Scan Plus.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^TdmNotify.lnk => C:\Windows\pss\TdmNotify.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Jay^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^HELP_DECRYPT.HTML => C:\Windows\pss\HELP_DECRYPT.HTML.Startup
MSCONFIG\startupfolder: C:^Users^Jay^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^HELP_DECRYPT.PNG => C:\Windows\pss\HELP_DECRYPT.PNG.Startup
MSCONFIG\startupfolder: C:^Users^Jay^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^HELP_DECRYPT.TXT => C:\Windows\pss\HELP_DECRYPT.TXT.Startup
MSCONFIG\startupfolder: C:^Users^Jay^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^HELP_DECRYPT.URL => C:\Windows\pss\HELP_DECRYPT.URL.Startup
MSCONFIG\startupfolder: C:^Users^Jay^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^optimizerpro_soft_partner.lnk => C:\Windows\pss\optimizerpro_soft_partner.lnk.Startup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: BluetoothS => rundll32.exe "%appdata%\BtvStack.dll",BTHF_Register
MSCONFIG\startupreg: DBRMTray => C:\Dell\DBRM\Reminder\DbrmTrayIcon.exe
MSCONFIG\startupreg: DellControlPoint => "C:\Program Files\Dell\Dell ControlPoint\Dell.ControlPoint.exe"
MSCONFIG\startupreg: HirdOhhe => regsvr32.exe "C:\ProgramData\HirdOhhe\LegsEdhi.wmw"
MSCONFIG\startupreg: HotKeysCmds => C:\Windows\system32\hkcmd.exe
MSCONFIG\startupreg: IAStorIcon => C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
MSCONFIG\startupreg: IgfxTray => C:\Windows\system32\igfxtray.exe
MSCONFIG\startupreg: PDVDDXSrv => "C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe"
MSCONFIG\startupreg: Persistence => C:\Windows\system32\igfxpers.exe
MSCONFIG\startupreg: picon => "C:\Program Files\Common Files\Intel\Privacy Icon\PIconStartup.exe" -startup
MSCONFIG\startupreg: SDTray => "C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe"
MSCONFIG\startupreg: SoundMAXPnP => C:\Program Files\Analog Devices\Core\smax4pnp.exe
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: USCService => C:\Program Files\Dell\Dell ControlPoint\Security Manager\BcmDeviceAndTaskStatusService.exe
MSCONFIG\startupreg: WavXMgr => C:\Program Files\Wave Systems Corp\Services Manager\Docmgr\bin\WavXDocMgr.exe

========================= Accounts: ==========================

Administrator (S-1-5-21-4268295745-387851499-3762584080-500 - Administrator - Disabled)
Guest (S-1-5-21-4268295745-387851499-3762584080-501 - Limited - Disabled)
Jay (S-1-5-21-4268295745-387851499-3762584080-1000 - Administrator - Enabled) => C:\Users\Jay

==================== Faulty Device Manager Devices =============

Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft Teredo Tunneling Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (02/02/2015 00:54:00 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Dependent Assembly Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (02/02/2015 00:52:21 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Dependent Assembly Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.


System errors:
=============
Error: (02/02/2015 07:31:02 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the SuperOptimizer Stats service to connect.

Error: (02/02/2015 07:30:29 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The NTRU TSS v1.2.1.29 TCS service depends on the TPM Base Services service which failed to start because of the following error:
%%0

Error: (02/02/2015 01:59:17 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the SuperOptimizer Stats service to connect.

Error: (02/02/2015 01:58:46 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The NTRU TSS v1.2.1.29 TCS service depends on the TPM Base Services service which failed to start because of the following error:
%%0

Error: (02/02/2015 01:58:08 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: The NPEService service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.

Error: (02/02/2015 01:56:19 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the SuperOptimizer Stats service to connect.

Error: (02/02/2015 01:55:47 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The NTRU TSS v1.2.1.29 TCS service depends on the TPM Base Services service which failed to start because of the following error:
%%0

Error: (02/02/2015 00:54:59 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the SuperOptimizer Stats service to connect.

Error: (02/02/2015 00:54:29 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The NTRU TSS v1.2.1.29 TCS service depends on the TPM Base Services service which failed to start because of the following error:
%%0

Error: (02/02/2015 00:53:47 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: The NPEService service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.


Microsoft Office Sessions:
=========================
Error: (06/25/2013 04:53:41 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6665.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 632325 seconds with 120 seconds of active time. This session ended with a crash.

Error: (05/18/2012 04:03:56 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6661.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 784219 seconds with 300 seconds of active time. This session ended with a crash.


==================== Memory info ===========================

Processor: Intel® Core™2 Duo CPU E8400 @ 3.00GHz
Percentage of memory in use: 35%
Total physical RAM: 1995.59 MB
Available physical RAM: 1291.51 MB
Total Pagefile: 4995.59 MB
Available Pagefile: 3567.97 MB
Total Virtual: 2047.88 MB
Available Virtual: 1915.56 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:139.33 GB) (Free:86.55 GB) NTFS
Drive f: (LEXAR) (Fixed) (Total:0.24 GB) (Free:0.14 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 149 GB) (Disk ID: 98000000)
Partition 1: (Not Active) - (Size=94 MB) - (Type=DE)
Partition 2: (Active) - (Size=9.6 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=139.3 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows XP) (Size: 247.5 MB) (Disk ID: C3072E18)
Partition 1: (Not Active) - (Size=247 MB) - (Type=07 NTFS)

==================== End Of Log ============================

Attached Files


Edited by Oh My!, 03 February 2015 - 11:11 PM.
Posted Attach.txt


BC AdBot (Login to Remove)

 


#2 Oh My!

Oh My!

    Adware and Spyware and Malware.....


  • Malware Response Instructor
  • 36,392 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:California
  • Local time:03:33 PM

Posted 03 February 2015 - 11:22 PM

Greetings Wade and :welcome: to BleepingComputer's Virus/Trojan/Spyware/Malware Removal forum.

My name is Oh My! and I am here to help you! Now that we are "friends" please call me Gary.

If you would allow me to call you by your first name I would prefer to do that. :thumbup2:

===================================================

Ground Rules:
  • First, I would like to inform you that most of us here at Bleeping Computer offer our expert assistance out of the goodness of our hearts. Please try to match our commitment to you with your patience toward us. If this was easy we would never have met. :)
  • Please do not run any tools or take any steps other than those I will provide for you while we work on your computer together. I need to be certain about the state of your computer in order to provide appropriate and effective steps for you to take. Most often "well intentioned" (and usually panic driven!) independent efforts can make things much worse for both of us. If at any point you would prefer to take your own steps please let me know, I will not be offended. I would be happy to focus on the many others who are waiting in line for assistance.
  • Please perform all steps in the order they are listed in each set of instructions. Some steps may be a bit complicated. If things are not clear, be sure to stop and let me know. We need to work on this together with confidence.
  • Please copy and paste all logs into your post unless directed otherwise. Please do not re-run any programs I suggest. If you encounter problems simply stop and tell me.
  • When you post your reply, use the Replytopic.jpg button instead.
  • In the upper right hand corner of the topic you will see the Followtopic.jpg button. Click on this then choose Immediate E-Mail notification and then Proceed and you will be sent an email once I have posted a response.
  • If you do not reply to your topic after 5 days we assume it has been abandoned and I will close it.
  • When your computer is clean I will alert you of such. I will also provide for you detailed information about how you can combat future infections.
  • I would like to remind you to make no further changes to your computer unless I direct you to do so.
  • Now let's get started :thumbup2:
===================================================

Now that I am assisting you, you can expect that I will be very responsive to your situation. If you are able, I would request you check this thread at least once per day so that we can try to resolve your issues effectively and efficiently. If you are going to be delayed please be considerate and post that information so that I know you are still with me. Unfortunately, there are many people waiting to be assisted and not enough of us at BleepingComputer to go around. I appreciate your understanding and diligence.

Thank you for your patience thus far. Unfortunately there is no way for me to decrypt the files but we can clean your computer.

Please run the below for me.

===================================================

Farbar's Recovery Scan Tool - Run Fix in Normal or Safe Mode

--------------------
  • Press the Windows key Windows_Logo_key.gif + r on your keyboard at the same time. Type in notepad and press Enter
  • Please copy and paste the contents of the below code box into the open notepad and save it to your desktop (<<<Important) as fixlist.txt
Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKU\S-1-5-21-4268295745-387851499-3762584080-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
Toolbar: HKU\S-1-5-21-4268295745-387851499-3762584080-1000 -> No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
S3 lmimirr; system32\DRIVERS\lmimirr.sys [X]
2015-02-01 03:06 - 2015-02-01 03:06 - 00008554 _____ () C:\Users\Jay\HELP_DECRYPT.HTML
2015-02-01 03:06 - 2015-02-01 03:06 - 00008554 _____ () C:\Users\Jay\Downloads\HELP_DECRYPT.HTML
2015-02-01 03:06 - 2015-02-01 03:06 - 00008554 _____ () C:\Users\Jay\Documents\HELP_DECRYPT.HTML
2015-02-01 03:06 - 2015-02-01 03:06 - 00008554 _____ () C:\Users\Jay\Desktop\HELP_DECRYPT.HTML
2015-02-01 03:06 - 2015-02-01 03:06 - 00004220 _____ () C:\Users\Jay\HELP_DECRYPT.TXT
2015-02-01 03:06 - 2015-02-01 03:06 - 00004220 _____ () C:\Users\Jay\Downloads\HELP_DECRYPT.TXT
2015-02-01 03:06 - 2015-02-01 03:06 - 00004220 _____ () C:\Users\Jay\Documents\HELP_DECRYPT.TXT
2015-02-01 03:06 - 2015-02-01 03:06 - 00004220 _____ () C:\Users\Jay\Desktop\HELP_DECRYPT.TXT
2015-02-01 03:06 - 2015-02-01 03:06 - 00000276 _____ () C:\Users\Jay\HELP_DECRYPT.URL
2015-02-01 03:06 - 2015-02-01 03:06 - 00000276 _____ () C:\Users\Jay\Downloads\HELP_DECRYPT.URL
2015-02-01 03:06 - 2015-02-01 03:06 - 00000276 _____ () C:\Users\Jay\Documents\HELP_DECRYPT.URL
2015-02-01 03:06 - 2015-02-01 03:06 - 00000276 _____ () C:\Users\Jay\Desktop\HELP_DECRYPT.URL
2015-02-01 03:05 - 2015-02-01 03:05 - 00008554 _____ () C:\Users\Jay\AppData\Roaming\HELP_DECRYPT.HTML
2015-02-01 03:05 - 2015-02-01 03:05 - 00008554 _____ () C:\Users\Jay\AppData\HELP_DECRYPT.HTML
2015-02-01 03:05 - 2015-02-01 03:05 - 00004220 _____ () C:\Users\Jay\AppData\Roaming\HELP_DECRYPT.TXT
2015-02-01 03:05 - 2015-02-01 03:05 - 00004220 _____ () C:\Users\Jay\AppData\HELP_DECRYPT.TXT
2015-02-01 03:05 - 2015-02-01 03:05 - 00000276 _____ () C:\Users\Jay\AppData\Roaming\HELP_DECRYPT.URL
2015-02-01 03:05 - 2015-02-01 03:05 - 00000276 _____ () C:\Users\Jay\AppData\HELP_DECRYPT.URL
2015-02-01 03:05 - 2015-02-01 03:05 - 0045593 _____ () C:\Users\Jay\AppData\Roaming\HELP_DECRYPT.PNG
2015-01-23 14:13 - 2015-01-23 14:13 - 0008542 _____ () C:\ProgramData\HELP_DECRYPT.HTML
2015-01-23 14:13 - 2015-01-23 14:13 - 0045595 _____ () C:\ProgramData\HELP_DECRYPT.PNG
2015-01-23 14:13 - 2015-01-23 14:13 - 0001392 _____ () C:\ProgramData\HELP_DECRYPT.TXT.jytxdub
2015-01-23 14:13 - 2015-01-23 14:13 - 0000272 _____ () C:\ProgramData\HELP_DECRYPT.URL
2015-01-28 23:46 - 2015-01-29 18:00 - 01280140 _____ () C:\ProgramData\befecgj.html
2015-01-28 23:45 - 2015-01-28 23:45 - 03932214 _____ () C:\Users\Jay\Documents\Decrypt-All-Files-jytxdub.bmp
2015-01-28 23:45 - 2015-01-28 23:45 - 00001552 _____ () C:\Users\Jay\Documents\Decrypt-All-Files-jytxdub.txt
2015-01-30 10:08 - 2015-02-02 08:07 - 00000000 ____D () C:\ProgramData\{f71e25ed-8b90-5375-f71e-e25ed8b997b6}
2015-01-31 12:13 - 2015-01-31 12:13 - 00376184 _____ () C:\Users\Jay\Downloads\Unconfirmed 688426.crdownload
2015-01-31 08:42 - 2015-01-31 08:42 - 00568174 _____ () C:\Users\Jay\Downloads\Unconfirmed 8624.crdownload
2015-01-31 08:39 - 2015-01-31 08:39 - 00402574 _____ () C:\Users\Jay\Downloads\Unconfirmed 288907.crdownload
2015-01-31 08:10 - 2015-01-31 08:11 - 00449494 _____ () C:\Users\Jay\Downloads\Unconfirmed 603633.crdownload
2015-01-30 20:59 - 2015-01-30 20:59 - 00376184 _____ () C:\Users\Jay\Downloads\Unconfirmed 596293.crdownload
2015-01-30 20:11 - 2015-01-30 20:12 - 00376184 _____ () C:\Users\Jay\Downloads\Unconfirmed 157822.crdownload
2015-01-30 19:22 - 2015-01-30 19:22 - 00376184 _____ () C:\Users\Jay\Downloads\Unconfirmed 723395.crdownload
2015-01-30 19:21 - 2015-01-30 19:21 - 00376184 _____ () C:\Users\Jay\Downloads\Unconfirmed 722475.crdownload
2015-01-30 18:49 - 2015-01-30 18:49 - 00376184 _____ () C:\Users\Jay\Downloads\Unconfirmed 549094.crdownload
2015-01-30 18:30 - 2015-01-30 18:30 - 00009412 _____ () C:\Users\Jay\Downloads\Unconfirmed 320572.crdownload
2015-01-30 15:01 - 2015-01-30 15:01 - 00390512 _____ (INSTALLER_COMPANY_NAME) C:\Users\Jay\Downloads\Unconfirmed 941856.crdownload
2015-01-27 13:05 - 2015-01-27 13:05 - 00009380 _____ () C:\Users\Jay\Downloads\Unconfirmed 201807.crdownload
2015-01-25 21:38 - 2015-01-25 21:38 - 00375496 _____ () C:\Users\Jay\Downloads\Unconfirmed 399120.crdownload
2015-01-23 14:13 - 2015-01-23 14:13 - 00008542 _____ () C:\Users\Jay\AppData\Local\HELP_DECRYPT.HTML
2015-01-23 14:13 - 2015-01-23 14:13 - 00008542 _____ () C:\ProgramData\HELP_DECRYPT.HTML
2015-01-23 14:13 - 2015-01-23 14:13 - 00001392 _____ () C:\Users\Jay\AppData\Local\HELP_DECRYPT.TXT.jytxdub
2015-01-23 14:13 - 2015-01-23 14:13 - 00001392 _____ () C:\ProgramData\HELP_DECRYPT.TXT.jytxdub
2015-01-23 14:13 - 2015-01-23 14:13 - 00000272 _____ () C:\Users\Jay\AppData\Local\HELP_DECRYPT.URL
2015-01-23 14:13 - 2015-01-23 14:13 - 00000272 _____ () C:\ProgramData\HELP_DECRYPT.URL
2015-01-23 14:10 - 2015-02-02 08:07 - 00000000 ____D () C:\ProgramData\HirdOhhe
2015-01-22 13:24 - 2015-01-22 13:24 - 03389777 _____ (tuneuppro.com ) C:\Users\Jay\Downloads\6BCE.tmp
2015-01-19 22:33 - 2015-01-19 22:34 - 00035841 _____ () C:\Users\Jay\Downloads\F511.tmp
2015-01-07 18:45 - 2015-01-07 18:45 - 00117576 _____ (Swift Installer ) C:\Users\Jay\Downloads\5233.tmp
2015-02-01 16:03 - 2011-12-27 08:14 - 00013066 _____ () C:\Windows\123R5MM.INI
2015-02-01 16:03 - 2011-12-27 08:14 - 00000903 _____ () C:\Windows\lotus.ini
2015-02-01 08:49 - 2014-12-11 13:33 - 00000696 _____ () C:\ProgramData\@system.temp
2015-01-31 10:47 - 2014-12-30 12:01 - 00000000 ____D () C:\Users\Jay\AppData\Local\12055
2015-01-31 10:47 - 2014-12-30 11:36 - 00000000 ____D () C:\Users\Jay\AppData\Local\71E8F13C-AD18-834A-B53E-B1EBD1B50E7D
2015-01-28 23:41 - 2011-12-27 08:13 - 00000000 ____D () C:\123R5MM
2014-12-11 13:33 - 2014-12-11 13:33 - 0000480 ____H () C:\Users\Jay\AppData\Roaming\麽鎒駓覜
CustomCLSID: HKU\S-1-5-21-4268295745-387851499-3762584080-1000_Classes\CLSID\{117270FA-48AC-45BB-9171-B63D1B42A910}\localserver32 -> "C:\Users\Jay\AppData\Local\12055\Updater.exe" No File
CustomCLSID: HKU\S-1-5-21-4268295745-387851499-3762584080-1000_Classes\CLSID\{19041B6B-8F97-4669-BA21-C17572737ED2}\localserver32 -> "C:\Users\Jay\AppData\Local\CrossBrowser\Application\36.0.1985.137\delegate_execute.exe" No File
Task: {021A52D2-6EE5-48C7-8D09-F0C00758E8AF} - System32\Tasks\gtaUpt => C:\Program Files\shopperz\zaeed.bat
Task: {0FB80217-E2FD-49FF-91B6-E2CFA7DD0FE0} - System32\Tasks\PastaLeads => C:\Program Files\pastaleads\ScheduledTask.exe
Task: {12536B13-481D-42D0-8D17-DE93A29D3E5B} - \lzrfhmi No Task File <==== ATTENTION
Task: {22C8124C-EE23-41D6-93DA-C616ACAD1585} - \SMWPUpd No Task File <==== ATTENTION
Task: {25F6C242-1EB7-4454-BD2F-59EBB2929344} - \Runner IC No Task File <==== ATTENTION
Task: {4682809B-04D5-4965-903B-6FC7C869F3BB} - \SMW_UpdateTask_Time_323135323533383531372d5b4a4a416c34232a2a6c555a No Task File <==== ATTENTION
Task: {5B801F69-AE1D-4C7B-B28A-E4E3F392A754} - System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update2 <==== ATTENTION
Task: {9C6227E7-A198-42AB-B185-A73A8644E8B6} - System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update3 <==== ATTENTION
Task: {B327858D-BF20-43DA-9F30-77C3B280B848} - \Microsoft\Windows\Maintenance\Update IC No Task File <==== ATTENTION
C:\Program Files\shopperz
C:\Program Files\pastaleads
C:\PROGRA~1\COMMON~1\System\SysMenu.dll
  • Launch FRST and press the Fix button just once and wait, the program will automatically launch fixlist.txt.
  • The tool will create a log on the desktop called Fixlog.txt. Please copy and paste the contents of the file in your reply.
  • Reboot your computer
===================================================

SystemLook by jpshortstuff

--------------------
  • Please download SystemLook from one of the links below and save it to your Desktop.

Download Mirror #1
Download Mirror #2
Download Mirror #3 For 64-bit users

  • Double-click SystemLook.exe to run it.
  • Vista\Windows 7 users:: Right click on SystemLook.exe, click Run As Administrator
  • Copy the content of the following codebox into the main textfield:
:filefind
*decrypt*
:regfind
*decrypt*
  • Click the Look button to start the scan.
  • When finished, a notepad window will open with the results of the scan. Please post this log in your next reply or, if necessary zip and attach the file.
===================================================

System Summary Information

--------------------
  • Press the windows key Windows_Logo_key.gif + r on your keyboard at the same time
  • Type msinfo32 and press Enter
  • Left click on System Summary
  • Click File, Save, and name the file Summary
  • Zip and attach the file to your reply
===================================================

Things I would like to see in your next reply. Please be sure to copy and paste any requested log information unless you are asked to attach it. :thumbsup2:
  • Fixlog
  • SystemLook log
  • System Summary Information
  • Update on computer performance

Gary
 
If I do not reply within 24 hours please send me a Personal Message.

"Lord, to whom would we go? You have the words that give eternal life. We believe, and we know you are the Holy One of God."

#3 wademon

wademon
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:04:33 PM

Posted 04 February 2015 - 01:13 AM

Hi Gary,
First names are great :thumbup2:  mine is Wade. Sorry for my delay and thank you for your response. I have gathered the info you have requested.
 
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 01-02-2015
Ran by Jay at 2015-02-03 21:48:18 Run:1
Running from C:\Users\Jay\Desktop
Loaded Profiles: Jay (Available profiles: Jay)
Boot Mode: Normal
 
==============================================
 
Content of fixlist:
*****************
Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKU\S-1-5-21-4268295745-387851499-3762584080-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
Toolbar: HKU\S-1-5-21-4268295745-387851499-3762584080-1000 -> No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
S3 lmimirr; system32\DRIVERS\lmimirr.sys [X]
2015-02-01 03:06 - 2015-02-01 03:06 - 00008554 _____ () C:\Users\Jay\HELP_DECRYPT.HTML
2015-02-01 03:06 - 2015-02-01 03:06 - 00008554 _____ () C:\Users\Jay\Downloads\HELP_DECRYPT.HTML
2015-02-01 03:06 - 2015-02-01 03:06 - 00008554 _____ () C:\Users\Jay\Documents\HELP_DECRYPT.HTML
2015-02-01 03:06 - 2015-02-01 03:06 - 00008554 _____ () C:\Users\Jay\Desktop\HELP_DECRYPT.HTML
2015-02-01 03:06 - 2015-02-01 03:06 - 00004220 _____ () C:\Users\Jay\HELP_DECRYPT.TXT
2015-02-01 03:06 - 2015-02-01 03:06 - 00004220 _____ () C:\Users\Jay\Downloads\HELP_DECRYPT.TXT
2015-02-01 03:06 - 2015-02-01 03:06 - 00004220 _____ () C:\Users\Jay\Documents\HELP_DECRYPT.TXT
2015-02-01 03:06 - 2015-02-01 03:06 - 00004220 _____ () C:\Users\Jay\Desktop\HELP_DECRYPT.TXT
2015-02-01 03:06 - 2015-02-01 03:06 - 00000276 _____ () C:\Users\Jay\HELP_DECRYPT.URL
2015-02-01 03:06 - 2015-02-01 03:06 - 00000276 _____ () C:\Users\Jay\Downloads\HELP_DECRYPT.URL
2015-02-01 03:06 - 2015-02-01 03:06 - 00000276 _____ () C:\Users\Jay\Documents\HELP_DECRYPT.URL
2015-02-01 03:06 - 2015-02-01 03:06 - 00000276 _____ () C:\Users\Jay\Desktop\HELP_DECRYPT.URL
2015-02-01 03:05 - 2015-02-01 03:05 - 00008554 _____ () C:\Users\Jay\AppData\Roaming\HELP_DECRYPT.HTML
2015-02-01 03:05 - 2015-02-01 03:05 - 00008554 _____ () C:\Users\Jay\AppData\HELP_DECRYPT.HTML
2015-02-01 03:05 - 2015-02-01 03:05 - 00004220 _____ () C:\Users\Jay\AppData\Roaming\HELP_DECRYPT.TXT
2015-02-01 03:05 - 2015-02-01 03:05 - 00004220 _____ () C:\Users\Jay\AppData\HELP_DECRYPT.TXT
2015-02-01 03:05 - 2015-02-01 03:05 - 00000276 _____ () C:\Users\Jay\AppData\Roaming\HELP_DECRYPT.URL
2015-02-01 03:05 - 2015-02-01 03:05 - 00000276 _____ () C:\Users\Jay\AppData\HELP_DECRYPT.URL
2015-02-01 03:05 - 2015-02-01 03:05 - 0045593 _____ () C:\Users\Jay\AppData\Roaming\HELP_DECRYPT.PNG
2015-01-23 14:13 - 2015-01-23 14:13 - 0008542 _____ () C:\ProgramData\HELP_DECRYPT.HTML
2015-01-23 14:13 - 2015-01-23 14:13 - 0045595 _____ () C:\ProgramData\HELP_DECRYPT.PNG
2015-01-23 14:13 - 2015-01-23 14:13 - 0001392 _____ () C:\ProgramData\HELP_DECRYPT.TXT.jytxdub
2015-01-23 14:13 - 2015-01-23 14:13 - 0000272 _____ () C:\ProgramData\HELP_DECRYPT.URL
2015-01-28 23:46 - 2015-01-29 18:00 - 01280140 _____ () C:\ProgramData\befecgj.html
2015-01-28 23:45 - 2015-01-28 23:45 - 03932214 _____ () C:\Users\Jay\Documents\Decrypt-All-Files-jytxdub.bmp
2015-01-28 23:45 - 2015-01-28 23:45 - 00001552 _____ () C:\Users\Jay\Documents\Decrypt-All-Files-jytxdub.txt
2015-01-30 10:08 - 2015-02-02 08:07 - 00000000 ____D () C:\ProgramData\{f71e25ed-8b90-5375-f71e-e25ed8b997b6}
2015-01-31 12:13 - 2015-01-31 12:13 - 00376184 _____ () C:\Users\Jay\Downloads\Unconfirmed 688426.crdownload
2015-01-31 08:42 - 2015-01-31 08:42 - 00568174 _____ () C:\Users\Jay\Downloads\Unconfirmed 8624.crdownload
2015-01-31 08:39 - 2015-01-31 08:39 - 00402574 _____ () C:\Users\Jay\Downloads\Unconfirmed 288907.crdownload
2015-01-31 08:10 - 2015-01-31 08:11 - 00449494 _____ () C:\Users\Jay\Downloads\Unconfirmed 603633.crdownload
2015-01-30 20:59 - 2015-01-30 20:59 - 00376184 _____ () C:\Users\Jay\Downloads\Unconfirmed 596293.crdownload
2015-01-30 20:11 - 2015-01-30 20:12 - 00376184 _____ () C:\Users\Jay\Downloads\Unconfirmed 157822.crdownload
2015-01-30 19:22 - 2015-01-30 19:22 - 00376184 _____ () C:\Users\Jay\Downloads\Unconfirmed 723395.crdownload
2015-01-30 19:21 - 2015-01-30 19:21 - 00376184 _____ () C:\Users\Jay\Downloads\Unconfirmed 722475.crdownload
2015-01-30 18:49 - 2015-01-30 18:49 - 00376184 _____ () C:\Users\Jay\Downloads\Unconfirmed 549094.crdownload
2015-01-30 18:30 - 2015-01-30 18:30 - 00009412 _____ () C:\Users\Jay\Downloads\Unconfirmed 320572.crdownload
2015-01-30 15:01 - 2015-01-30 15:01 - 00390512 _____ (INSTALLER_COMPANY_NAME) C:\Users\Jay\Downloads\Unconfirmed 941856.crdownload
2015-01-27 13:05 - 2015-01-27 13:05 - 00009380 _____ () C:\Users\Jay\Downloads\Unconfirmed 201807.crdownload
2015-01-25 21:38 - 2015-01-25 21:38 - 00375496 _____ () C:\Users\Jay\Downloads\Unconfirmed 399120.crdownload
2015-01-23 14:13 - 2015-01-23 14:13 - 00008542 _____ () C:\Users\Jay\AppData\Local\HELP_DECRYPT.HTML
2015-01-23 14:13 - 2015-01-23 14:13 - 00008542 _____ () C:\ProgramData\HELP_DECRYPT.HTML
2015-01-23 14:13 - 2015-01-23 14:13 - 00001392 _____ () C:\Users\Jay\AppData\Local\HELP_DECRYPT.TXT.jytxdub
2015-01-23 14:13 - 2015-01-23 14:13 - 00001392 _____ () C:\ProgramData\HELP_DECRYPT.TXT.jytxdub
2015-01-23 14:13 - 2015-01-23 14:13 - 00000272 _____ () C:\Users\Jay\AppData\Local\HELP_DECRYPT.URL
2015-01-23 14:13 - 2015-01-23 14:13 - 00000272 _____ () C:\ProgramData\HELP_DECRYPT.URL
2015-01-23 14:10 - 2015-02-02 08:07 - 00000000 ____D () C:\ProgramData\HirdOhhe
2015-01-22 13:24 - 2015-01-22 13:24 - 03389777 _____ (tuneuppro.com ) C:\Users\Jay\Downloads\6BCE.tmp
2015-01-19 22:33 - 2015-01-19 22:34 - 00035841 _____ () C:\Users\Jay\Downloads\F511.tmp
2015-01-07 18:45 - 2015-01-07 18:45 - 00117576 _____ (Swift Installer ) C:\Users\Jay\Downloads\5233.tmp
2015-02-01 16:03 - 2011-12-27 08:14 - 00013066 _____ () C:\Windows\123R5MM.INI
2015-02-01 16:03 - 2011-12-27 08:14 - 00000903 _____ () C:\Windows\lotus.ini
2015-02-01 08:49 - 2014-12-11 13:33 - 00000696 _____ () C:\ProgramData\@system.temp
2015-01-31 10:47 - 2014-12-30 12:01 - 00000000 ____D () C:\Users\Jay\AppData\Local\12055
2015-01-31 10:47 - 2014-12-30 11:36 - 00000000 ____D () C:\Users\Jay\AppData\Local\71E8F13C-AD18-834A-B53E-B1EBD1B50E7D
2015-01-28 23:41 - 2011-12-27 08:13 - 00000000 ____D () C:\123R5MM
2014-12-11 13:33 - 2014-12-11 13:33 - 0000480 ____H () C:\Users\Jay\AppData\Roaming\????
CustomCLSID: HKU\S-1-5-21-4268295745-387851499-3762584080-1000_Classes\CLSID\{117270FA-48AC-45BB-9171-B63D1B42A910}\localserver32 -> "C:\Users\Jay\AppData\Local\12055\Updater.exe" No File
CustomCLSID: HKU\S-1-5-21-4268295745-387851499-3762584080-1000_Classes\CLSID\{19041B6B-8F97-4669-BA21-C17572737ED2}\localserver32 -> "C:\Users\Jay\AppData\Local\CrossBrowser\Application\36.0.1985.137\delegate_execute.exe" No File
Task: {021A52D2-6EE5-48C7-8D09-F0C00758E8AF} - System32\Tasks\gtaUpt => C:\Program Files\shopperz\zaeed.bat
Task: {0FB80217-E2FD-49FF-91B6-E2CFA7DD0FE0} - System32\Tasks\PastaLeads => C:\Program Files\pastaleads\ScheduledTask.exe
Task: {12536B13-481D-42D0-8D17-DE93A29D3E5B} - \lzrfhmi No Task File <==== ATTENTION
Task: {22C8124C-EE23-41D6-93DA-C616ACAD1585} - \SMWPUpd No Task File <==== ATTENTION
Task: {25F6C242-1EB7-4454-BD2F-59EBB2929344} - \Runner IC No Task File <==== ATTENTION
Task: {4682809B-04D5-4965-903B-6FC7C869F3BB} - \SMW_UpdateTask_Time_323135323533383531372d5b4a4a416c34232a2a6c555a No Task File <==== ATTENTION
Task: {5B801F69-AE1D-4C7B-B28A-E4E3F392A754} - System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update2 <==== ATTENTION
Task: {9C6227E7-A198-42AB-B185-A73A8644E8B6} - System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update3 <==== ATTENTION
Task: {B327858D-BF20-43DA-9F30-77C3B280B848} - \Microsoft\Windows\Maintenance\Update IC No Task File <==== ATTENTION
C:\Program Files\shopperz
C:\Program Files\pastaleads
C:\PROGRA~1\COMMON~1\System\SysMenu.dll
*****************
 
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SDWinLogon" => Key deleted successfully.
"HKLM\SOFTWARE\Policies\Google" => Key deleted successfully.
"HKU\S-1-5-21-4268295745-387851499-3762584080-1000\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-21-4268295745-387851499-3762584080-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{21FA44EF-376D-4D53-9B0F-8A89D3229068} => value deleted successfully.
HKCR\CLSID\{21FA44EF-376D-4D53-9B0F-8A89D3229068} => Key not found. 
lmimirr => Service deleted successfully.
C:\Users\Jay\HELP_DECRYPT.HTML => Moved successfully.
C:\Users\Jay\Downloads\HELP_DECRYPT.HTML => Moved successfully.
C:\Users\Jay\Documents\HELP_DECRYPT.HTML => Moved successfully.
C:\Users\Jay\Desktop\HELP_DECRYPT.HTML => Moved successfully.
C:\Users\Jay\HELP_DECRYPT.TXT => Moved successfully.
C:\Users\Jay\Downloads\HELP_DECRYPT.TXT => Moved successfully.
C:\Users\Jay\Documents\HELP_DECRYPT.TXT => Moved successfully.
C:\Users\Jay\Desktop\HELP_DECRYPT.TXT => Moved successfully.
C:\Users\Jay\HELP_DECRYPT.URL => Moved successfully.
C:\Users\Jay\Downloads\HELP_DECRYPT.URL => Moved successfully.
C:\Users\Jay\Documents\HELP_DECRYPT.URL => Moved successfully.
C:\Users\Jay\Desktop\HELP_DECRYPT.URL => Moved successfully.
C:\Users\Jay\AppData\Roaming\HELP_DECRYPT.HTML => Moved successfully.
C:\Users\Jay\AppData\HELP_DECRYPT.HTML => Moved successfully.
C:\Users\Jay\AppData\Roaming\HELP_DECRYPT.TXT => Moved successfully.
C:\Users\Jay\AppData\HELP_DECRYPT.TXT => Moved successfully.
C:\Users\Jay\AppData\Roaming\HELP_DECRYPT.URL => Moved successfully.
C:\Users\Jay\AppData\HELP_DECRYPT.URL => Moved successfully.
C:\Users\Jay\AppData\Roaming\HELP_DECRYPT.PNG => Moved successfully.
C:\ProgramData\HELP_DECRYPT.HTML => Moved successfully.
C:\ProgramData\HELP_DECRYPT.PNG => Moved successfully.
C:\ProgramData\HELP_DECRYPT.TXT.jytxdub => Moved successfully.
C:\ProgramData\HELP_DECRYPT.URL => Moved successfully.
C:\ProgramData\befecgj.html => Moved successfully.
C:\Users\Jay\Documents\Decrypt-All-Files-jytxdub.bmp => Moved successfully.
C:\Users\Jay\Documents\Decrypt-All-Files-jytxdub.txt => Moved successfully.
C:\ProgramData\{f71e25ed-8b90-5375-f71e-e25ed8b997b6} => Moved successfully.
C:\Users\Jay\Downloads\Unconfirmed 688426.crdownload => Moved successfully.
C:\Users\Jay\Downloads\Unconfirmed 8624.crdownload => Moved successfully.
C:\Users\Jay\Downloads\Unconfirmed 288907.crdownload => Moved successfully.
C:\Users\Jay\Downloads\Unconfirmed 603633.crdownload => Moved successfully.
C:\Users\Jay\Downloads\Unconfirmed 596293.crdownload => Moved successfully.
C:\Users\Jay\Downloads\Unconfirmed 157822.crdownload => Moved successfully.
C:\Users\Jay\Downloads\Unconfirmed 723395.crdownload => Moved successfully.
C:\Users\Jay\Downloads\Unconfirmed 722475.crdownload => Moved successfully.
C:\Users\Jay\Downloads\Unconfirmed 549094.crdownload => Moved successfully.
C:\Users\Jay\Downloads\Unconfirmed 320572.crdownload => Moved successfully.
C:\Users\Jay\Downloads\Unconfirmed 941856.crdownload => Moved successfully.
C:\Users\Jay\Downloads\Unconfirmed 201807.crdownload => Moved successfully.
C:\Users\Jay\Downloads\Unconfirmed 399120.crdownload => Moved successfully.
C:\Users\Jay\AppData\Local\HELP_DECRYPT.HTML => Moved successfully.
"C:\ProgramData\HELP_DECRYPT.HTML" => File/Directory not found.
C:\Users\Jay\AppData\Local\HELP_DECRYPT.TXT.jytxdub => Moved successfully.
"C:\ProgramData\HELP_DECRYPT.TXT.jytxdub" => File/Directory not found.
C:\Users\Jay\AppData\Local\HELP_DECRYPT.URL => Moved successfully.
"C:\ProgramData\HELP_DECRYPT.URL" => File/Directory not found.
C:\ProgramData\HirdOhhe => Moved successfully.
C:\Users\Jay\Downloads\6BCE.tmp => Moved successfully.
C:\Users\Jay\Downloads\F511.tmp => Moved successfully.
C:\Users\Jay\Downloads\5233.tmp => Moved successfully.
C:\Windows\123R5MM.INI => Moved successfully.
C:\Windows\lotus.ini => Moved successfully.
C:\ProgramData\@system.temp => Moved successfully.
C:\Users\Jay\AppData\Local\12055 => Moved successfully.
C:\Users\Jay\AppData\Local\71E8F13C-AD18-834A-B53E-B1EBD1B50E7D => Moved successfully.
C:\123R5MM => Moved successfully.
 
"C:\Users\Jay\AppData\Roaming\????" directory move:
 
Could not move "C:\Users\Jay\AppData\Roaming\????" directory. => Scheduled to move on reboot.
 
"HKU\S-1-5-21-4268295745-387851499-3762584080-1000_Classes\CLSID\{117270FA-48AC-45BB-9171-B63D1B42A910}" => Key deleted successfully.
"HKU\S-1-5-21-4268295745-387851499-3762584080-1000_Classes\CLSID\{19041B6B-8F97-4669-BA21-C17572737ED2}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{021A52D2-6EE5-48C7-8D09-F0C00758E8AF}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{021A52D2-6EE5-48C7-8D09-F0C00758E8AF}" => Key deleted successfully.
C:\Windows\System32\Tasks\gtaUpt => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\gtaUpt" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0FB80217-E2FD-49FF-91B6-E2CFA7DD0FE0}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0FB80217-E2FD-49FF-91B6-E2CFA7DD0FE0}" => Key deleted successfully.
C:\Windows\System32\Tasks\PastaLeads => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\PastaLeads" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{12536B13-481D-42D0-8D17-DE93A29D3E5B}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{12536B13-481D-42D0-8D17-DE93A29D3E5B}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\lzrfhmi" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{22C8124C-EE23-41D6-93DA-C616ACAD1585}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{22C8124C-EE23-41D6-93DA-C616ACAD1585}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SMWPUpd" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{25F6C242-1EB7-4454-BD2F-59EBB2929344}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{25F6C242-1EB7-4454-BD2F-59EBB2929344}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Runner IC" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{4682809B-04D5-4965-903B-6FC7C869F3BB}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4682809B-04D5-4965-903B-6FC7C869F3BB}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SMW_UpdateTask_Time_323135323533383531372d5b4a4a416c34232a2a6c555a" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{5B801F69-AE1D-4C7B-B28A-E4E3F392A754}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5B801F69-AE1D-4C7B-B28A-E4E3F392A754}" => Key deleted successfully.
C:\Windows\System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2 => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Maintenance\SMupdate2" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{9C6227E7-A198-42AB-B185-A73A8644E8B6}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9C6227E7-A198-42AB-B185-A73A8644E8B6}" => Key deleted successfully.
C:\Windows\System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Multimedia\SMupdate3" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B327858D-BF20-43DA-9F30-77C3B280B848}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B327858D-BF20-43DA-9F30-77C3B280B848}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Maintenance\Update IC" => Key deleted successfully.
"C:\Program Files\shopperz" => File/Directory not found.
"C:\Program Files\pastaleads" => File/Directory not found.
"C:\PROGRA~1\COMMON~1\System\SysMenu.dll" => File/Directory not found.
 
=> Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2015-02-03 22:15:27)<=
 
"C:\Users\Jay\AppData\Roaming\????" => Directory could not move.
 
==== End of Fixlog 22:15:27 ====
 
 

SystemLook 30.07.11 by jpshortstuff
Log created at 22:33 on 03/02/2015 by Jay
Administrator - Elevation successful
 
========== filefind ==========
 
Searching for "*decrypt*"
C:\RakhniDecryptor.1.5.16.6_02.02.2015_07.14.44_log.txt --a---- 2364 bytes [14:14 02/02/2015] [14:16 02/02/2015] 804B0C5D6268680CFB193419EF9D4755
C:\RectorDecryptor.2.6.33.0_02.02.2015_07.16.36_log.txt --a---- 8140456 bytes [14:16 02/02/2015] [14:44 02/02/2015] 3227D8327FF52E187A550A9576EB38EB
C:\RectorDecryptor.2.6.33.0_02.02.2015_10.18.42_log.txt --a---- 5207360 bytes [17:18 02/02/2015] [17:26 02/02/2015] E5A34B16D115F67A4FC07B1A109BD32F
C:\RectorDecryptor.2.6.33.0_02.02.2015_22.57.09_log.txt --a---- 1946 bytes [05:57 03/02/2015] [05:57 03/02/2015] C2D1B8DA6DF7F13930EEE94A4747F9E3
C:\FRST\Quarantine\C\ProgramData\HELP_DECRYPT.HTML.xBAD --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\FRST\Quarantine\C\ProgramData\HELP_DECRYPT.PNG.xBAD --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\FRST\Quarantine\C\ProgramData\HELP_DECRYPT.TXT.jytxdub.xBAD --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 81609226A0C2E4832AC79146252B85F0
C:\FRST\Quarantine\C\ProgramData\HELP_DECRYPT.URL.xBAD --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\FRST\Quarantine\C\Users\Jay\HELP_DECRYPT.HTML.xBAD --a---- 8554 bytes [10:06 01/02/2015] [10:06 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\FRST\Quarantine\C\Users\Jay\HELP_DECRYPT.TXT.xBAD --a---- 4220 bytes [10:06 01/02/2015] [10:06 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\FRST\Quarantine\C\Users\Jay\HELP_DECRYPT.URL.xBAD --a---- 276 bytes [10:06 01/02/2015] [10:06 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\FRST\Quarantine\C\Users\Jay\AppData\HELP_DECRYPT.HTML.xBAD --a---- 8554 bytes [10:05 01/02/2015] [10:05 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\FRST\Quarantine\C\Users\Jay\AppData\HELP_DECRYPT.TXT.xBAD --a---- 4220 bytes [10:05 01/02/2015] [10:05 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\FRST\Quarantine\C\Users\Jay\AppData\HELP_DECRYPT.URL.xBAD --a---- 276 bytes [10:05 01/02/2015] [10:05 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\FRST\Quarantine\C\Users\Jay\AppData\Local\HELP_DECRYPT.HTML.xBAD --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\FRST\Quarantine\C\Users\Jay\AppData\Local\HELP_DECRYPT.TXT.jytxdub.xBAD --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 556937CFDADE79E0A91EDBA5D069EC1E
C:\FRST\Quarantine\C\Users\Jay\AppData\Local\HELP_DECRYPT.URL.xBAD --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\FRST\Quarantine\C\Users\Jay\AppData\Roaming\HELP_DECRYPT.HTML.xBAD --a---- 8554 bytes [10:05 01/02/2015] [10:05 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\FRST\Quarantine\C\Users\Jay\AppData\Roaming\HELP_DECRYPT.PNG.xBAD --a---- 45593 bytes [10:05 01/02/2015] [10:05 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\FRST\Quarantine\C\Users\Jay\AppData\Roaming\HELP_DECRYPT.TXT.xBAD --a---- 4220 bytes [10:05 01/02/2015] [10:05 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\FRST\Quarantine\C\Users\Jay\AppData\Roaming\HELP_DECRYPT.URL.xBAD --a---- 276 bytes [10:05 01/02/2015] [10:05 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\FRST\Quarantine\C\Users\Jay\Desktop\HELP_DECRYPT.HTML.xBAD --a---- 8554 bytes [10:06 01/02/2015] [10:06 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\FRST\Quarantine\C\Users\Jay\Desktop\HELP_DECRYPT.TXT.xBAD --a---- 4220 bytes [10:06 01/02/2015] [10:06 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\FRST\Quarantine\C\Users\Jay\Desktop\HELP_DECRYPT.URL.xBAD --a---- 276 bytes [10:06 01/02/2015] [10:06 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\FRST\Quarantine\C\Users\Jay\Documents\Decrypt-All-Files-jytxdub.bmp.xBAD --a---- 3932214 bytes [06:45 29/01/2015] [06:45 29/01/2015] 2F78C1305E0B4FD7EAB6E728FA4F7934
C:\FRST\Quarantine\C\Users\Jay\Documents\Decrypt-All-Files-jytxdub.txt.xBAD --a---- 1552 bytes [06:45 29/01/2015] [06:45 29/01/2015] 793821B2283D9407920E78DFC92757B8
C:\FRST\Quarantine\C\Users\Jay\Documents\HELP_DECRYPT.HTML.xBAD --a---- 8554 bytes [10:06 01/02/2015] [10:06 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\FRST\Quarantine\C\Users\Jay\Documents\HELP_DECRYPT.TXT.xBAD --a---- 4220 bytes [10:06 01/02/2015] [10:06 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\FRST\Quarantine\C\Users\Jay\Documents\HELP_DECRYPT.URL.xBAD --a---- 276 bytes [10:06 01/02/2015] [10:06 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\FRST\Quarantine\C\Users\Jay\Downloads\HELP_DECRYPT.HTML.xBAD --a---- 8554 bytes [10:06 01/02/2015] [10:06 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\FRST\Quarantine\C\Users\Jay\Downloads\HELP_DECRYPT.TXT.xBAD --a---- 4220 bytes [10:06 01/02/2015] [10:06 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\FRST\Quarantine\C\Users\Jay\Downloads\HELP_DECRYPT.URL.xBAD --a---- 276 bytes [10:06 01/02/2015] [10:06 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\ProgramData\Norton\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\ProgramData\Norton\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\ProgramData\Norton\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [16:10 12/01/2011] [21:13 23/01/2015] 4B560FBA5194C0EA7D167527DCEADEC7
C:\ProgramData\Norton\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\ProgramData\Spybot - Search & Destroy\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\ProgramData\Spybot - Search & Destroy\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\ProgramData\Spybot - Search & Destroy\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 5F420DD49BA292CE070653BB30281C00
C:\ProgramData\Spybot - Search & Destroy\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\ProgramData\Spybot - Search & Destroy\Logs\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\ProgramData\Spybot - Search & Destroy\Logs\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\ProgramData\Spybot - Search & Destroy\Logs\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 21FB125A866727C2427A22711D52A8E8
C:\ProgramData\Spybot - Search & Destroy\Logs\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\ProgramData\Spybot - Search & Destroy\Quarantine\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\ProgramData\Spybot - Search & Destroy\Quarantine\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\ProgramData\Spybot - Search & Destroy\Quarantine\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2884E442A1F50EAC833165BB6D837057
C:\ProgramData\Spybot - Search & Destroy\Quarantine\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\ProgramData\SUPERAntiSpyware.com\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\ProgramData\SUPERAntiSpyware.com\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\ProgramData\SUPERAntiSpyware.com\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 79EA6C0EA912871FD0A0BF645A3BC62C
C:\ProgramData\SUPERAntiSpyware.com\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\ProgramData\SUPERAntiSpyware.com\SUPERAntiSpyware\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\ProgramData\SUPERAntiSpyware.com\SUPERAntiSpyware\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\ProgramData\SUPERAntiSpyware.com\SUPERAntiSpyware\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] EA691D0B8DCEC662C45AE6DB85B87843
C:\ProgramData\SUPERAntiSpyware.com\SUPERAntiSpyware\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\All Users\Norton\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\All Users\Norton\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\All Users\Norton\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [16:10 12/01/2011] [21:13 23/01/2015] 4B560FBA5194C0EA7D167527DCEADEC7
C:\Users\All Users\Norton\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\All Users\Spybot - Search & Destroy\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\All Users\Spybot - Search & Destroy\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\All Users\Spybot - Search & Destroy\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 5F420DD49BA292CE070653BB30281C00
C:\Users\All Users\Spybot - Search & Destroy\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\All Users\Spybot - Search & Destroy\Logs\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\All Users\Spybot - Search & Destroy\Logs\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\All Users\Spybot - Search & Destroy\Logs\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 21FB125A866727C2427A22711D52A8E8
C:\Users\All Users\Spybot - Search & Destroy\Logs\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\All Users\Spybot - Search & Destroy\Quarantine\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\All Users\Spybot - Search & Destroy\Quarantine\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\All Users\Spybot - Search & Destroy\Quarantine\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2884E442A1F50EAC833165BB6D837057
C:\Users\All Users\Spybot - Search & Destroy\Quarantine\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\All Users\SUPERAntiSpyware.com\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\All Users\SUPERAntiSpyware.com\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\All Users\SUPERAntiSpyware.com\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 79EA6C0EA912871FD0A0BF645A3BC62C
C:\Users\All Users\SUPERAntiSpyware.com\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\All Users\SUPERAntiSpyware.com\SUPERAntiSpyware\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\All Users\SUPERAntiSpyware.com\SUPERAntiSpyware\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\All Users\SUPERAntiSpyware.com\SUPERAntiSpyware\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] EA691D0B8DCEC662C45AE6DB85B87843
C:\Users\All Users\SUPERAntiSpyware.com\SUPERAntiSpyware\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\HELP_DECRYPT.PNG --a---- 45593 bytes [10:06 01/02/2015] [10:06 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\AppData\HELP_DECRYPT.PNG --a---- 45593 bytes [10:05 01/02/2015] [10:05 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\AppData\Local\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Local\Autodesk\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Local\Autodesk\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Local\Autodesk\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 049DB76F42B914239A488D2B6870EBA1
C:\Users\Jay\AppData\Local\Autodesk\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Local\Autodesk\AutoCAD Map 3D 2010\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Local\Autodesk\AutoCAD Map 3D 2010\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Local\Autodesk\AutoCAD Map 3D 2010\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 1ABC97D541D6761B04731DEC61DC3E4F
C:\Users\Jay\AppData\Local\Autodesk\AutoCAD Map 3D 2010\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Local\Autodesk\AutoCAD Map 3D 2010\R18.0\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Local\Autodesk\AutoCAD Map 3D 2010\R18.0\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Local\Autodesk\AutoCAD Map 3D 2010\R18.0\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 0CAE9EB8306E33754EE61C001959C0F0
C:\Users\Jay\AppData\Local\Autodesk\AutoCAD Map 3D 2010\R18.0\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Local\Autodesk\AutoCAD Map 3D 2010\R18.0\enu\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Local\Autodesk\AutoCAD Map 3D 2010\R18.0\enu\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Local\Autodesk\AutoCAD Map 3D 2010\R18.0\enu\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] DB0BBA9BB441AB44255FABAC793E3051
C:\Users\Jay\AppData\Local\Autodesk\AutoCAD Map 3D 2010\R18.0\enu\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Local\Autodesk\AutoCAD Map 3D 2010\R18.0\enu\Template\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Local\Autodesk\AutoCAD Map 3D 2010\R18.0\enu\Template\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Local\Autodesk\AutoCAD Map 3D 2010\R18.0\enu\Template\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] E89454C96D44889351BB16912B07A456
C:\Users\Jay\AppData\Local\Autodesk\AutoCAD Map 3D 2010\R18.0\enu\Template\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Local\Google\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Local\Google\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Local\Google\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 6B54A280D86308AA0BCD9B6E90BACB61
C:\Users\Jay\AppData\Local\Google\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Local\Google\Chrome\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Local\Google\Chrome\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Local\Google\Chrome\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] F06CE39FDDF85207D11C9C0F6ED50CD1
C:\Users\Jay\AppData\Local\Google\Chrome\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] B29B835E0E043D94B006427955A243AF
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 07AAD8EE3293C9061B27F94E4A102D08
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\databases\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\databases\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\databases\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 83453F867B3DE9A1DBB5E8D39FFE75A8
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\databases\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\Storage\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\Storage\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\Storage\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] BCD6F8C4D0D4A86CC231A72B8765F730
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\Storage\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] EDAAC31E2F12826026CC31DF9CAB37C1
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 1B16386098E1BB8E6A2055947B7FDE8A
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\def\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\def\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\def\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 0492B315E84EB55504B83A3705DFADB9
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\def\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\def\databases\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\def\databases\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\def\databases\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 20309E882FFA004251AE53569DDC901B
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\def\databases\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Local\Microsoft\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Local\Microsoft\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Local\Microsoft\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC461AF2AF9333DFBD525272DE7A49A8
C:\Users\Jay\AppData\Local\Microsoft\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Local\Microsoft\ehome\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Local\Microsoft\ehome\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Local\Microsoft\ehome\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 36CF344A713E07FF6CD2BA29E57ED21E
C:\Users\Jay\AppData\Local\Microsoft\ehome\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Local\Microsoft\Internet Explorer\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Local\Microsoft\Internet Explorer\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Local\Microsoft\Internet Explorer\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 626544344CC6FA9D712EB386DCF14272
C:\Users\Jay\AppData\Local\Microsoft\Internet Explorer\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Local\Microsoft\Media Player\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Local\Microsoft\Media Player\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Local\Microsoft\Media Player\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 8DA55B893166D8F31E226E1538A31025
C:\Users\Jay\AppData\Local\Microsoft\Media Player\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Local\Microsoft\Media Player\Art Cache\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Local\Microsoft\Media Player\Art Cache\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Local\Microsoft\Media Player\Art Cache\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 6097774EB7760F5CFA61F4530B638A1F
C:\Users\Jay\AppData\Local\Microsoft\Media Player\Art Cache\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Local\Microsoft\Media Player\Art Cache\LocalMLS\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Local\Microsoft\Media Player\Art Cache\LocalMLS\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Local\Microsoft\Media Player\Art Cache\LocalMLS\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 6481846013242CAA8E0C5253C1156D3A
C:\Users\Jay\AppData\Local\Microsoft\Media Player\Art Cache\LocalMLS\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Local\Microsoft\Outlook\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Local\Microsoft\Outlook\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Local\Microsoft\Outlook\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 9EA7A68E139A07D7E8182FBAF89AAD48
C:\Users\Jay\AppData\Local\Microsoft\Outlook\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Local\Microsoft\Windows Mail\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Local\Microsoft\Windows Mail\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Local\Microsoft\Windows Mail\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] F4EAD4F3427351A65B30B91FB9FD3449
C:\Users\Jay\AppData\Local\Microsoft\Windows Mail\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Local\Microsoft\Windows Mail\Backup\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Local\Microsoft\Windows Mail\Backup\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Local\Microsoft\Windows Mail\Backup\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] C90B265CA5246B0227AB60C4C0C6F928
C:\Users\Jay\AppData\Local\Microsoft\Windows Mail\Backup\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Local\Microsoft\Windows Mail\Backup\new\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Local\Microsoft\Windows Mail\Backup\new\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Local\Microsoft\Windows Mail\Backup\new\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 82380CAA6C1CBB0D8A1A9BD7253FD9D2
C:\Users\Jay\AppData\Local\Microsoft\Windows Mail\Backup\new\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Local\Microsoft\Windows Mail\Local Folders\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Local\Microsoft\Windows Mail\Local Folders\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Local\Microsoft\Windows Mail\Local Folders\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 8CDC5FD825D842B8982C765C21EBE08E
C:\Users\Jay\AppData\Local\Microsoft\Windows Mail\Local Folders\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Local\Microsoft\Windows Mail\Local Folders\Inbox\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Local\Microsoft\Windows Mail\Local Folders\Inbox\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Local\Microsoft\Windows Mail\Local Folders\Inbox\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 7AC65629D71D5C127FCAAC20E2C10572
C:\Users\Jay\AppData\Local\Microsoft\Windows Mail\Local Folders\Inbox\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Local\Microsoft\Windows Mail\Stationery\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Local\Microsoft\Windows Mail\Stationery\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Local\Microsoft\Windows Mail\Stationery\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [14:29 23/09/2010] [21:13 23/01/2015] 744AB4D232D7185663D3B079E0F9FA95
C:\Users\Jay\AppData\Local\Microsoft\Windows Mail\Stationery\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Local\Microsoft\Windows Media\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Local\Microsoft\Windows Media\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Local\Microsoft\Windows Media\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 82C27DDE67C15CA20B3E7C99C05222B1
C:\Users\Jay\AppData\Local\Microsoft\Windows Media\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Local\Microsoft\Windows Media\12.0\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Local\Microsoft\Windows Media\12.0\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Local\Microsoft\Windows Media\12.0\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 7BC6472973974EB8F84672D9655F810C
C:\Users\Jay\AppData\Local\Microsoft\Windows Media\12.0\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Local\Mozilla\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Local\Mozilla\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Local\Mozilla\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] C5E55F27B5D44C3DF328679C4D47FAD5
C:\Users\Jay\AppData\Local\Mozilla\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Local\Mozilla\Firefox\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Local\Mozilla\Firefox\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Local\Mozilla\Firefox\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 33F23A8F569F5D6BB1AF47285AB0EBD0
C:\Users\Jay\AppData\Local\Mozilla\Firefox\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Local\Mozilla\Firefox\Profiles\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Local\Mozilla\Firefox\Profiles\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Local\Mozilla\Firefox\Profiles\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 1618D7DBF70286AE2917150BE54CCEAE
C:\Users\Jay\AppData\Local\Mozilla\Firefox\Profiles\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Local\Mozilla\Firefox\Profiles\k1dnlkd3.default\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Local\Mozilla\Firefox\Profiles\k1dnlkd3.default\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Local\Mozilla\Firefox\Profiles\k1dnlkd3.default\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] AEC50843BD77173C35C7E2267DD592B8
C:\Users\Jay\AppData\Local\Mozilla\Firefox\Profiles\k1dnlkd3.default\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Local\Mozilla\Firefox\Profiles\k1dnlkd3.default\OfflineCache\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Local\Mozilla\Firefox\Profiles\k1dnlkd3.default\OfflineCache\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Local\Mozilla\Firefox\Profiles\k1dnlkd3.default\OfflineCache\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] B4ED42DE8780C2E3307E33C56CE445D1
C:\Users\Jay\AppData\Local\Mozilla\Firefox\Profiles\k1dnlkd3.default\OfflineCache\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Local\Symantec\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Local\Symantec\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Local\Symantec\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 8F2256B4F327D219CF12B7E203224A63
C:\Users\Jay\AppData\Local\Symantec\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\LocalLow\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\LocalLow\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\LocalLow\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2A2837812734E9D2ED323FAFE3445D7F
C:\Users\Jay\AppData\LocalLow\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\LocalLow\Adobe\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\LocalLow\Adobe\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\LocalLow\Adobe\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] B563C101E70309B76909D4FECFBEE909
C:\Users\Jay\AppData\LocalLow\Adobe\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\LocalLow\Adobe\Acrobat\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\LocalLow\Adobe\Acrobat\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\LocalLow\Adobe\Acrobat\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 833878D0F883243A235497FB7480E383
C:\Users\Jay\AppData\LocalLow\Adobe\Acrobat\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\LocalLow\Adobe\Acrobat\9.0\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\LocalLow\Adobe\Acrobat\9.0\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\LocalLow\Adobe\Acrobat\9.0\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] A9F4A30EAE50CE8989A7743EBCE3C679
C:\Users\Jay\AppData\LocalLow\Adobe\Acrobat\9.0\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\LocalLow\Adobe\Acrobat\9.0\Search\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\LocalLow\Adobe\Acrobat\9.0\Search\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\LocalLow\Adobe\Acrobat\9.0\Search\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 5983A528C06216787845CD40A1E075D4
C:\Users\Jay\AppData\LocalLow\Adobe\Acrobat\9.0\Search\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\LocalLow\Company\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\LocalLow\Company\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\LocalLow\Company\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] DD62A7D2854A9F810E840FEBBF631448
C:\Users\Jay\AppData\LocalLow\Company\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\LocalLow\Company\Product\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\LocalLow\Company\Product\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\LocalLow\Company\Product\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] C188AA086D1F3C34474E8B9E4FB2BCE8
C:\Users\Jay\AppData\LocalLow\Company\Product\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\LocalLow\Company\Product\1.0\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\LocalLow\Company\Product\1.0\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\LocalLow\Company\Product\1.0\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 75EA8FDFD82AA63B816FA67E048CA6F8
C:\Users\Jay\AppData\LocalLow\Company\Product\1.0\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\LocalLow\Google\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\LocalLow\Google\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\LocalLow\Google\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] BEE108AA5A555E2BD1F0800CF9EC4DCE
C:\Users\Jay\AppData\LocalLow\Google\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\LocalLow\Google\GoogleEarth\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\LocalLow\Google\GoogleEarth\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\LocalLow\Google\GoogleEarth\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 4F57BA97E762B101D075248D31159E75
C:\Users\Jay\AppData\LocalLow\Google\GoogleEarth\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\LocalLow\Google\GoogleEarth\unified_cache_leveldb_leveldb2\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\LocalLow\Google\GoogleEarth\unified_cache_leveldb_leveldb2\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\LocalLow\Google\GoogleEarth\unified_cache_leveldb_leveldb2\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 790D3441E3C9E07F403209AFF77DE4F9
C:\Users\Jay\AppData\LocalLow\Google\GoogleEarth\unified_cache_leveldb_leveldb2\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\LocalLow\Microsoft\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\LocalLow\Microsoft\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\LocalLow\Microsoft\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 8DA628C19025B41B0E42E57AF39E7C6E
C:\Users\Jay\AppData\LocalLow\Microsoft\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\LocalLow\Microsoft\MuCatalog\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\LocalLow\Microsoft\MuCatalog\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\LocalLow\Microsoft\MuCatalog\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 9E432728596D96A0A06F22A55492B328
C:\Users\Jay\AppData\LocalLow\Microsoft\MuCatalog\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\LocalLow\Sun\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\LocalLow\Sun\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\LocalLow\Sun\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] BBEEF35B3C4E868DA84640A1676D67B6
C:\Users\Jay\AppData\LocalLow\Sun\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\LocalLow\Sun\Java\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\LocalLow\Sun\Java\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\LocalLow\Sun\Java\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] FCA28790BD5DF68216F0A4EFA1507D72
C:\Users\Jay\AppData\LocalLow\Sun\Java\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] F61FF6D0A623FC3E0B8824AAB0DB5F5D
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 7CEA4E4ECC91D15BCC37A69BB58F3959
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] D29E8A55D9C5165BE019932D243A3840
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\11\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\11\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\11\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] B2CB2ED4479E04C0D804F10DA20BDCCF
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\11\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\26\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\26\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\26\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] E288E82C3A8A383F9E8222B0545BEDF6
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\26\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\3\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\3\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\3\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] F5F1EF16F645FA2DCC287ACEC2C042C3
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\3\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\32\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\32\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\32\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] AA3AA7220A64BC186829F26B907591E4
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\32\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\4\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\4\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\4\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 1F49ECF4B8AAD9F4EDC152E332C63D46
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\4\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\42\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\42\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\42\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 9E16AA3EB4FB1F365D6CBE560B9C87E6
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\42\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Roaming\Adobe\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Roaming\Adobe\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Roaming\Adobe\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 961827A971C4C8CA52C50C23F6F2A8D3
C:\Users\Jay\AppData\Roaming\Adobe\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Roaming\Adobe\Flash Player\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Roaming\Adobe\Flash Player\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Roaming\Adobe\Flash Player\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 255C012717696342CBAE4091049BFD70
C:\Users\Jay\AppData\Roaming\Adobe\Flash Player\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Roaming\Adobe\Flash Player\AssetCache\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Roaming\Adobe\Flash Player\AssetCache\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Roaming\Adobe\Flash Player\AssetCache\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] FB1F5EF188763F97383B3B149A527B80
C:\Users\Jay\AppData\Roaming\Adobe\Flash Player\AssetCache\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Roaming\Adobe\Flash Player\AssetCache\UUTT3RFK\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Roaming\Adobe\Flash Player\AssetCache\UUTT3RFK\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Roaming\Adobe\Flash Player\AssetCache\UUTT3RFK\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [18:48 15/10/2012] [21:13 23/01/2015] AFA3608D5520931925AA9D56D2248514
C:\Users\Jay\AppData\Roaming\Adobe\Flash Player\AssetCache\UUTT3RFK\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Roaming\Autodesk\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Roaming\Autodesk\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Roaming\Autodesk\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 9EE7762879AB9BF50FB134A0A0F711C3
C:\Users\Jay\AppData\Roaming\Autodesk\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Roaming\Autodesk\AutoCAD Map 3D 2010\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Roaming\Autodesk\AutoCAD Map 3D 2010\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Roaming\Autodesk\AutoCAD Map 3D 2010\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 7CB677DF69F489CF7ED94E9C947AE2ED
C:\Users\Jay\AppData\Roaming\Autodesk\AutoCAD Map 3D 2010\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Roaming\Autodesk\AutoCAD Map 3D 2010\R18.0\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Roaming\Autodesk\AutoCAD Map 3D 2010\R18.0\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Roaming\Autodesk\AutoCAD Map 3D 2010\R18.0\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 3FB7E3097EB5F944D8885838BF16AC90
C:\Users\Jay\AppData\Roaming\Autodesk\AutoCAD Map 3D 2010\R18.0\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Roaming\Autodesk\AutoCAD Map 3D 2010\R18.0\enu\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Roaming\Autodesk\AutoCAD Map 3D 2010\R18.0\enu\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Roaming\Autodesk\AutoCAD Map 3D 2010\R18.0\enu\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] DDFD58B8B2DDCA5CC27E96218C0FAB98
C:\Users\Jay\AppData\Roaming\Autodesk\AutoCAD Map 3D 2010\R18.0\enu\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Roaming\Autodesk\AutoCAD Map 3D 2010\R18.0\enu\Support\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Roaming\Autodesk\AutoCAD Map 3D 2010\R18.0\enu\Support\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Roaming\Autodesk\AutoCAD Map 3D 2010\R18.0\enu\Support\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2929DA4096EAF304DC4EDFEBA02913D5
C:\Users\Jay\AppData\Roaming\Autodesk\AutoCAD Map 3D 2010\R18.0\enu\Support\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Roaming\MapInfo\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Roaming\MapInfo\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Roaming\MapInfo\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 6903524589B1BFEDE534DD504D9B4584
C:\Users\Jay\AppData\Roaming\MapInfo\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Roaming\MapInfo\MapInfo\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Roaming\MapInfo\MapInfo\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Roaming\MapInfo\MapInfo\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2F1CF4938DF6257EC4D685F16E838D75
C:\Users\Jay\AppData\Roaming\MapInfo\MapInfo\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Roaming\MapInfo\MapInfo\Professional\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Roaming\MapInfo\MapInfo\Professional\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Roaming\MapInfo\MapInfo\Professional\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 58D2276536691987AF6BDFA60D154758
C:\Users\Jay\AppData\Roaming\MapInfo\MapInfo\Professional\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Roaming\MapInfo\MapInfo\Professional\1150\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Roaming\MapInfo\MapInfo\Professional\1150\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Roaming\MapInfo\MapInfo\Professional\1150\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 9B210F1813C984924B788B06EB74ED79
C:\Users\Jay\AppData\Roaming\MapInfo\MapInfo\Professional\1150\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Roaming\MapInfo\MapInfo\Professional\1150\ThmTmplt\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Roaming\MapInfo\MapInfo\Professional\1150\ThmTmplt\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Roaming\MapInfo\MapInfo\Professional\1150\ThmTmplt\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 0FB4072816A6FDEB55BA3B6952ECB495
C:\Users\Jay\AppData\Roaming\MapInfo\MapInfo\Professional\1150\ThmTmplt\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Roaming\Microsoft\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Roaming\Microsoft\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Roaming\Microsoft\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] AFE58F0AE6BCE55F63F143390DC8635D
C:\Users\Jay\AppData\Roaming\Microsoft\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Roaming\Microsoft\Document Building Blocks\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Roaming\Microsoft\Document Building Blocks\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Roaming\Microsoft\Document Building Blocks\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 63A9945F304F939F843BF6AB5B566237
C:\Users\Jay\AppData\Roaming\Microsoft\Document Building Blocks\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Roaming\Microsoft\Document Building Blocks\1033\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Roaming\Microsoft\Document Building Blocks\1033\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Roaming\Microsoft\Document Building Blocks\1033\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 821E469D40115472A0B8372690A5CFB3
C:\Users\Jay\AppData\Roaming\Microsoft\Document Building Blocks\1033\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Roaming\Microsoft\Excel\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Roaming\Microsoft\Excel\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Roaming\Microsoft\Excel\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [14:25 11/05/2011] [21:13 23/01/2015] E37B9C0CD07406B64E486C81162AF384
C:\Users\Jay\AppData\Roaming\Microsoft\Excel\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Roaming\Microsoft\Outlook\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Roaming\Microsoft\Outlook\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Roaming\Microsoft\Outlook\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 6C7F86D95FA48B285395D72EB220AB1F
C:\Users\Jay\AppData\Roaming\Microsoft\Outlook\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Roaming\Microsoft\Templates\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Roaming\Microsoft\Templates\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Roaming\Microsoft\Templates\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 225CAE6E283DD8213E9357F28F6088D0
C:\Users\Jay\AppData\Roaming\Microsoft\Templates\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Roaming\Microsoft\Windows\Recent\HELP_DECRYPT.lnk --a---- 534 bytes [03:56 02/02/2015] [03:56 02/02/2015] 67B74C05DC43116A77CB2B140974595F
C:\Users\Jay\AppData\Roaming\Microsoft\{344A1750037086D52DA8E71AB15C0BEE}\cookie.ie\Low\Decrypt-All-Files-jytxdub.bmp --a---- 3932214 bytes [06:44 29/01/2015] [06:44 29/01/2015] 7F2B1F59CA0CB2E3C1EB63A1CF856049
C:\Users\Jay\AppData\Roaming\Microsoft\{344A1750037086D52DA8E71AB15C0BEE}\cookie.ie\Low\Decrypt-All-Files-jytxdub.txt --a---- 1266 bytes [06:44 29/01/2015] [06:44 29/01/2015] 66080506920C432EC8DC9A4E3D9755DF
C:\Users\Jay\AppData\Roaming\Mozilla\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Roaming\Mozilla\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Roaming\Mozilla\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] F5A80E885F08E778FB93908DB09DB00F
C:\Users\Jay\AppData\Roaming\Mozilla\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] A3DA0AB43A200DE8CFE148C9F3710099
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Crash Reports\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Crash Reports\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Crash Reports\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 9476F5FC4CD995FFF21B296AF6A3E5CC
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Crash Reports\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Crash Reports\submitted\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Crash Reports\submitted\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Crash Reports\submitted\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] DD350019AF3776ACD14D611E670BB3BE
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Crash Reports\submitted\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 11CF9C8172316003F920E7F9F35E3B96
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] B762EC581EF4D0758E0BE2DE94968057
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\sessionstore-backups\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\sessionstore-backups\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\sessionstore-backups\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] BE4FC0AF73716E1BE9A64448CCF3255D
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\sessionstore-backups\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\storage\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\storage\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\storage\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] F2EABE2C6B993594FC7F267073734ADA
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\storage\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\storage\persistent\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\storage\persistent\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\storage\persistent\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] E82FEF75161BB16093A6ACAD9E9DD3AB
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\storage\persistent\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\storage\persistent\chrome\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\storage\persistent\chrome\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\storage\persistent\chrome\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] 030BDD8E03428C2962812069C336B4DF
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\storage\persistent\chrome\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\storage\persistent\chrome\idb\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\storage\persistent\chrome\idb\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\storage\persistent\chrome\idb\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] C227D5144AF2C4F1449AE6FFA209880C
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\storage\persistent\chrome\idb\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\storage\persistent\moz-safe-about+home\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\storage\persistent\moz-safe-about+home\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\storage\persistent\moz-safe-about+home\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] E2D4C074F0ACB6EFDA85FDEABB78D4CF
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\storage\persistent\moz-safe-about+home\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\storage\persistent\moz-safe-about+home\idb\HELP_DECRYPT.HTML --a---- 8542 bytes [21:13 23/01/2015] [21:13 23/01/2015] DC432C99EC57DE7D92EC06BD36BCD674
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\storage\persistent\moz-safe-about+home\idb\HELP_DECRYPT.PNG --a---- 45595 bytes [21:13 23/01/2015] [21:13 23/01/2015] 86C5C056BA2D3F4BAF154682C9925B4C
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\storage\persistent\moz-safe-about+home\idb\HELP_DECRYPT.TXT.jytxdub --a---- 1392 bytes [21:13 23/01/2015] [21:13 23/01/2015] D60D90C73ED570BC0F3A6E25BB0107B9
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\storage\persistent\moz-safe-about+home\idb\HELP_DECRYPT.URL --a---- 272 bytes [21:13 23/01/2015] [21:13 23/01/2015] 2B12E0B804499891BAAA72E0101AA977
C:\Users\Jay\AppData\Roaming\Qualcomm\HELP_DECRYPT.HTML --a---- 8554 bytes [10:05 01/02/2015] [10:05 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\Users\Jay\AppData\Roaming\Qualcomm\HELP_DECRYPT.PNG --a---- 45593 bytes [10:05 01/02/2015] [10:05 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\AppData\Roaming\Qualcomm\HELP_DECRYPT.TXT --a---- 4220 bytes [10:05 01/02/2015] [10:05 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\Users\Jay\AppData\Roaming\Qualcomm\HELP_DECRYPT.URL --a---- 276 bytes [10:05 01/02/2015] [10:05 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\Users\Jay\AppData\Roaming\Qualcomm\Eudora\HELP_DECRYPT.HTML --a---- 8554 bytes [10:05 01/02/2015] [10:05 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\Users\Jay\AppData\Roaming\Qualcomm\Eudora\HELP_DECRYPT.PNG --a---- 45593 bytes [10:05 01/02/2015] [10:05 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\AppData\Roaming\Qualcomm\Eudora\HELP_DECRYPT.TXT --a---- 4220 bytes [10:05 01/02/2015] [10:05 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\Users\Jay\AppData\Roaming\Qualcomm\Eudora\HELP_DECRYPT.URL --a---- 276 bytes [10:05 01/02/2015] [10:05 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\Users\Jay\AppData\Roaming\Qualcomm\Eudora\attach\Decrypt-All-Files-jytxdub.bmp --a---- 3932214 bytes [06:44 29/01/2015] [17:03 30/01/2015] 8ED6DC98FFC77025AE380C903A27CE9A
C:\Users\Jay\AppData\Roaming\Qualcomm\Eudora\attach\Decrypt-All-Files-jytxdub.txt --a---- 1552 bytes [06:44 29/01/2015] [17:03 30/01/2015] DD53915504CDFF04AA7A505A9F47BF57
C:\Users\Jay\AppData\Roaming\Qualcomm\Eudora\attach\HELP_DECRYPT.HTML --a---- 8554 bytes [04:13 29/01/2015] [10:04 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\Users\Jay\AppData\Roaming\Qualcomm\Eudora\attach\HELP_DECRYPT.PNG --a---- 45593 bytes [04:13 29/01/2015] [10:04 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\AppData\Roaming\Qualcomm\Eudora\attach\HELP_DECRYPT.TXT --a---- 4220 bytes [10:04 01/02/2015] [10:04 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\Users\Jay\AppData\Roaming\Qualcomm\Eudora\attach\HELP_DECRYPT.TXT.jytxdub --a---- 1376 bytes [22:46 17/09/2014] [04:13 29/01/2015] B7F55115849A212B8C7191ABAE01964C
C:\Users\Jay\AppData\Roaming\Qualcomm\Eudora\attach\HELP_DECRYPT.URL --a---- 276 bytes [04:13 29/01/2015] [10:04 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\Users\Jay\AppData\Roaming\Qualcomm\Eudora\Embedded\Decrypt-All-Files-jytxdub.bmp --a---- 3932214 bytes [06:44 29/01/2015] [06:44 29/01/2015] 67F7510CCC82753E3BD6793D674EE015
C:\Users\Jay\AppData\Roaming\Qualcomm\Eudora\Embedded\Decrypt-All-Files-jytxdub.txt --a---- 1552 bytes [06:44 29/01/2015] [06:44 29/01/2015] 6B27F45C801C3A345F83D82D747B738B
C:\Users\Jay\AppData\Roaming\Qualcomm\Eudora\Embedded\HELP_DECRYPT.HTML --a---- 8554 bytes [10:05 01/02/2015] [10:05 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\Users\Jay\AppData\Roaming\Qualcomm\Eudora\Embedded\HELP_DECRYPT.PNG --a---- 45593 bytes [10:05 01/02/2015] [10:05 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\AppData\Roaming\Qualcomm\Eudora\Embedded\HELP_DECRYPT.TXT --a---- 4220 bytes [10:05 01/02/2015] [10:05 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\Users\Jay\AppData\Roaming\Qualcomm\Eudora\Embedded\HELP_DECRYPT.URL --a---- 276 bytes [10:05 01/02/2015] [10:05 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\Users\Jay\AppData\Roaming\SUPERAntiSpyware.com\HELP_DECRYPT.HTML --a---- 8554 bytes [10:05 01/02/2015] [10:05 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\Users\Jay\AppData\Roaming\SUPERAntiSpyware.com\HELP_DECRYPT.PNG --a---- 45593 bytes [10:05 01/02/2015] [10:05 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\AppData\Roaming\SUPERAntiSpyware.com\HELP_DECRYPT.TXT --a---- 4220 bytes [10:05 01/02/2015] [10:05 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\Users\Jay\AppData\Roaming\SUPERAntiSpyware.com\HELP_DECRYPT.URL --a---- 276 bytes [10:05 01/02/2015] [10:05 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\Users\Jay\AppData\Roaming\SUPERAntiSpyware.com\SUPERAntiSpyware\HELP_DECRYPT.HTML --a---- 8554 bytes [10:05 01/02/2015] [10:05 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\Users\Jay\AppData\Roaming\SUPERAntiSpyware.com\SUPERAntiSpyware\HELP_DECRYPT.PNG --a---- 45593 bytes [10:05 01/02/2015] [10:05 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\AppData\Roaming\SUPERAntiSpyware.com\SUPERAntiSpyware\HELP_DECRYPT.TXT --a---- 4220 bytes [10:05 01/02/2015] [10:05 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\Users\Jay\AppData\Roaming\SUPERAntiSpyware.com\SUPERAntiSpyware\HELP_DECRYPT.URL --a---- 276 bytes [10:05 01/02/2015] [10:05 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\Users\Jay\AppData\Roaming\SUPERAntiSpyware.com\SUPERAntiSpyware\Quarantine\HELP_DECRYPT.HTML --a---- 8554 bytes [10:05 01/02/2015] [10:05 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\Users\Jay\AppData\Roaming\SUPERAntiSpyware.com\SUPERAntiSpyware\Quarantine\HELP_DECRYPT.PNG --a---- 45593 bytes [10:05 01/02/2015] [10:05 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\AppData\Roaming\SUPERAntiSpyware.com\SUPERAntiSpyware\Quarantine\HELP_DECRYPT.TXT --a---- 4220 bytes [10:05 01/02/2015] [10:05 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\Users\Jay\AppData\Roaming\SUPERAntiSpyware.com\SUPERAntiSpyware\Quarantine\HELP_DECRYPT.URL --a---- 276 bytes [10:05 01/02/2015] [10:05 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\Users\Jay\Desktop\HELP_DECRYPT.PNG --a---- 45593 bytes [10:07 01/02/2015] [10:07 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\Desktop\Clean tools\Additionno decrypt.txt --a---- 25059 bytes [05:49 03/02/2015] [05:50 03/02/2015] ADFC6F621AFFFE6EE60369F5863EC600
C:\Users\Jay\Desktop\Clean tools\rakhnidecryptor.exe --a---- 1416088 bytes [14:14 02/02/2015] [14:10 02/02/2015] 564243C3350CEE5B70F15CA86415FE59
C:\Users\Jay\Desktop\Clean tools\rectordecryptor.exe --a---- 785592 bytes [14:14 02/02/2015] [14:08 02/02/2015] B99595C5C83762907FE90DAF34F97C44
C:\Users\Jay\Desktop\OLD Desktop\HELP_DECRYPT.HTML --a---- 8554 bytes [10:06 01/02/2015] [10:06 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\Users\Jay\Desktop\OLD Desktop\HELP_DECRYPT.PNG --a---- 45593 bytes [10:06 01/02/2015] [10:06 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\Desktop\OLD Desktop\HELP_DECRYPT.TXT --a---- 4220 bytes [10:06 01/02/2015] [10:06 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\Users\Jay\Desktop\OLD Desktop\HELP_DECRYPT.URL --a---- 276 bytes [10:06 01/02/2015] [10:06 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\Users\Jay\Desktop\OLD Desktop\Browning\HELP_DECRYPT.HTML --a---- 8554 bytes [10:05 01/02/2015] [10:05 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\Users\Jay\Desktop\OLD Desktop\Browning\HELP_DECRYPT.PNG --a---- 45593 bytes [10:05 01/02/2015] [10:05 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\Desktop\OLD Desktop\Browning\HELP_DECRYPT.TXT --a---- 4220 bytes [10:05 01/02/2015] [10:05 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\Users\Jay\Desktop\OLD Desktop\Browning\HELP_DECRYPT.URL --a---- 276 bytes [10:05 01/02/2015] [10:05 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\Users\Jay\Desktop\OLD Desktop\Cut Bank\HELP_DECRYPT.HTML --a---- 8554 bytes [10:05 01/02/2015] [10:05 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\Users\Jay\Desktop\OLD Desktop\Cut Bank\HELP_DECRYPT.PNG --a---- 45593 bytes [10:05 01/02/2015] [10:05 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\Desktop\OLD Desktop\Cut Bank\HELP_DECRYPT.TXT --a---- 4220 bytes [10:05 01/02/2015] [10:05 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\Users\Jay\Desktop\OLD Desktop\Cut Bank\HELP_DECRYPT.URL --a---- 276 bytes [10:05 01/02/2015] [10:05 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\Users\Jay\Desktop\OLD Desktop\Cut Bank\Farther Out\HELP_DECRYPT.HTML --a---- 8554 bytes [10:05 01/02/2015] [10:05 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\Users\Jay\Desktop\OLD Desktop\Cut Bank\Farther Out\HELP_DECRYPT.PNG --a---- 45593 bytes [10:05 01/02/2015] [10:05 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\Desktop\OLD Desktop\Cut Bank\Farther Out\HELP_DECRYPT.TXT --a---- 4220 bytes [10:05 01/02/2015] [10:05 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\Users\Jay\Desktop\OLD Desktop\Cut Bank\Farther Out\HELP_DECRYPT.URL --a---- 276 bytes [10:05 01/02/2015] [10:05 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\Users\Jay\Desktop\OLD Desktop\Divide Peak Yagi\HELP_DECRYPT.HTML --a---- 8554 bytes [10:05 01/02/2015] [10:05 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\Users\Jay\Desktop\OLD Desktop\Divide Peak Yagi\HELP_DECRYPT.PNG --a---- 45593 bytes [10:05 01/02/2015] [10:05 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\Desktop\OLD Desktop\Divide Peak Yagi\HELP_DECRYPT.TXT --a---- 4220 bytes [10:05 01/02/2015] [10:05 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\Users\Jay\Desktop\OLD Desktop\Divide Peak Yagi\HELP_DECRYPT.URL --a---- 276 bytes [10:05 01/02/2015] [10:05 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\Users\Jay\Desktop\OLD Desktop\DividePK to Duck Lake\HELP_DECRYPT.HTML --a---- 8554 bytes [10:05 01/02/2015] [10:05 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\Users\Jay\Desktop\OLD Desktop\DividePK to Duck Lake\HELP_DECRYPT.PNG --a---- 45593 bytes [10:05 01/02/2015] [10:05 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\Desktop\OLD Desktop\DividePK to Duck Lake\HELP_DECRYPT.TXT --a---- 4220 bytes [10:05 01/02/2015] [10:05 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\Users\Jay\Desktop\OLD Desktop\DividePK to Duck Lake\HELP_DECRYPT.URL --a---- 276 bytes [10:05 01/02/2015] [10:05 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\Users\Jay\Desktop\OLD Desktop\Eagle Point\HELP_DECRYPT.HTML --a---- 8554 bytes [10:05 01/02/2015] [10:05 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\Users\Jay\Desktop\OLD Desktop\Eagle Point\HELP_DECRYPT.PNG --a---- 45593 bytes [10:05 01/02/2015] [10:05 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\Desktop\OLD Desktop\Eagle Point\HELP_DECRYPT.TXT --a---- 4220 bytes [10:05 01/02/2015] [10:05 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\Users\Jay\Desktop\OLD Desktop\Eagle Point\HELP_DECRYPT.URL --a---- 276 bytes [10:05 01/02/2015] [10:05 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\Users\Jay\Desktop\OLD Desktop\Heart Butte\HELP_DECRYPT.HTML --a---- 8554 bytes [10:05 01/02/2015] [10:05 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\Users\Jay\Desktop\OLD Desktop\Heart Butte\HELP_DECRYPT.PNG --a---- 45593 bytes [10:05 01/02/2015] [10:05 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\Desktop\OLD Desktop\Heart Butte\HELP_DECRYPT.TXT --a---- 4220 bytes [10:05 01/02/2015] [10:05 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\Users\Jay\Desktop\OLD Desktop\Heart Butte\HELP_DECRYPT.URL --a---- 276 bytes [10:05 01/02/2015] [10:05 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\Users\Jay\Desktop\OLD Desktop\Heart Butte\Tower Ridge Farther Out\HELP_DECRYPT.HTML --a---- 8554 bytes [10:05 01/02/2015] [10:05 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\Users\Jay\Desktop\OLD Desktop\Heart Butte\Tower Ridge Farther Out\HELP_DECRYPT.PNG --a---- 45593 bytes [10:05 01/02/2015] [10:05 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\Desktop\OLD Desktop\Heart Butte\Tower Ridge Farther Out\HELP_DECRYPT.TXT --a---- 4220 bytes [10:05 01/02/2015] [10:05 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\Users\Jay\Desktop\OLD Desktop\Heart Butte\Tower Ridge Farther Out\HELP_DECRYPT.URL --a---- 276 bytes [10:05 01/02/2015] [10:05 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\Users\Jay\Desktop\OLD Desktop\Horn Ridge\HELP_DECRYPT.HTML --a---- 8554 bytes [10:05 01/02/2015] [10:05 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\Users\Jay\Desktop\OLD Desktop\Horn Ridge\HELP_DECRYPT.PNG --a---- 45593 bytes [10:05 01/02/2015] [10:05 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\Desktop\OLD Desktop\Horn Ridge\HELP_DECRYPT.TXT --a---- 4220 bytes [10:05 01/02/2015] [10:05 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\Users\Jay\Desktop\OLD Desktop\Horn Ridge\HELP_DECRYPT.URL --a---- 276 bytes [10:05 01/02/2015] [10:05 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\Users\Jay\Desktop\OLD Desktop\Horn Ridge\Horn Ridge\HELP_DECRYPT.HTML --a---- 8554 bytes [10:05 01/02/2015] [10:05 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\Users\Jay\Desktop\OLD Desktop\Horn Ridge\Horn Ridge\HELP_DECRYPT.PNG --a---- 45593 bytes [10:05 01/02/2015] [10:05 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\Desktop\OLD Desktop\Horn Ridge\Horn Ridge\HELP_DECRYPT.TXT --a---- 4220 bytes [10:05 01/02/2015] [10:05 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\Users\Jay\Desktop\OLD Desktop\Horn Ridge\Horn Ridge\HELP_DECRYPT.URL --a---- 276 bytes [10:05 01/02/2015] [10:05 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\Users\Jay\Desktop\OLD Desktop\Horn Ridge\Horn Ridge\Close_in\HELP_DECRYPT.HTML --a---- 8554 bytes [10:05 01/02/2015] [10:05 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\Users\Jay\Desktop\OLD Desktop\Horn Ridge\Horn Ridge\Close_in\HELP_DECRYPT.PNG --a---- 45593 bytes [10:05 01/02/2015] [10:05 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\Desktop\OLD Desktop\Horn Ridge\Horn Ridge\Close_in\HELP_DECRYPT.TXT --a---- 4220 bytes [10:05 01/02/2015] [10:05 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\Users\Jay\Desktop\OLD Desktop\Horn Ridge\Horn Ridge\Close_in\HELP_DECRYPT.URL --a---- 276 bytes [10:05 01/02/2015] [10:05 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\Users\Jay\Desktop\OLD Desktop\Horn Ridge\Horn Ridge\Father Out\HELP_DECRYPT.HTML --a---- 8554 bytes [10:05 01/02/2015] [10:05 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\Users\Jay\Desktop\OLD Desktop\Horn Ridge\Horn Ridge\Father Out\HELP_DECRYPT.PNG --a---- 45593 bytes [10:05 01/02/2015] [10:05 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\Desktop\OLD Desktop\Horn Ridge\Horn Ridge\Father Out\HELP_DECRYPT.TXT --a---- 4220 bytes [10:05 01/02/2015] [10:05 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\Users\Jay\Desktop\OLD Desktop\Horn Ridge\Horn Ridge\Father Out\HELP_DECRYPT.URL --a---- 276 bytes [10:05 01/02/2015] [10:05 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\Users\Jay\Desktop\OLD Desktop\Landslide Butte\HELP_DECRYPT.HTML --a---- 8554 bytes [10:05 01/02/2015] [10:05 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\Users\Jay\Desktop\OLD Desktop\Landslide Butte\HELP_DECRYPT.PNG --a---- 45593 bytes [10:05 01/02/2015] [10:05 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\Desktop\OLD Desktop\Landslide Butte\HELP_DECRYPT.TXT --a---- 4220 bytes [10:05 01/02/2015] [10:05 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\Users\Jay\Desktop\OLD Desktop\Landslide Butte\HELP_DECRYPT.URL --a---- 276 bytes [10:05 01/02/2015] [10:05 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\Users\Jay\Desktop\OLD Desktop\LandslideButte\HELP_DECRYPT.HTML --a---- 8554 bytes [10:05 01/02/2015] [10:05 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\Users\Jay\Desktop\OLD Desktop\LandslideButte\HELP_DECRYPT.PNG --a---- 45593 bytes [10:05 01/02/2015] [10:05 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\Desktop\OLD Desktop\LandslideButte\HELP_DECRYPT.TXT --a---- 4220 bytes [10:05 01/02/2015] [10:05 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\Users\Jay\Desktop\OLD Desktop\LandslideButte\HELP_DECRYPT.URL --a---- 276 bytes [10:05 01/02/2015] [10:05 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\Users\Jay\Desktop\OLD Desktop\Merriwether\HELP_DECRYPT.HTML --a---- 8554 bytes [10:05 01/02/2015] [10:05 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\Users\Jay\Desktop\OLD Desktop\Merriwether\HELP_DECRYPT.PNG --a---- 45593 bytes [10:05 01/02/2015] [10:05 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\Desktop\OLD Desktop\Merriwether\HELP_DECRYPT.TXT --a---- 4220 bytes [10:05 01/02/2015] [10:05 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\Users\Jay\Desktop\OLD Desktop\Merriwether\HELP_DECRYPT.URL --a---- 276 bytes [10:05 01/02/2015] [10:05 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\Users\Jay\Desktop\OLD Desktop\Peterson Coulee\HELP_DECRYPT.HTML --a---- 8554 bytes [10:05 01/02/2015] [10:05 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\Users\Jay\Desktop\OLD Desktop\Peterson Coulee\HELP_DECRYPT.PNG --a---- 45593 bytes [10:05 01/02/2015] [10:05 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\Desktop\OLD Desktop\Peterson Coulee\HELP_DECRYPT.TXT --a---- 4220 bytes [10:05 01/02/2015] [10:05 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\Users\Jay\Desktop\OLD Desktop\Peterson Coulee\HELP_DECRYPT.URL --a---- 276 bytes [10:05 01/02/2015] [10:05 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\Users\Jay\Desktop\OLD Desktop\Rocky Ridge\HELP_DECRYPT.HTML --a---- 8554 bytes [10:05 01/02/2015] [10:05 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\Users\Jay\Desktop\OLD Desktop\Rocky Ridge\HELP_DECRYPT.PNG --a---- 45593 bytes [10:05 01/02/2015] [10:05 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\Desktop\OLD Desktop\Rocky Ridge\HELP_DECRYPT.TXT --a---- 4220 bytes [10:05 01/02/2015] [10:05 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\Users\Jay\Desktop\OLD Desktop\Rocky Ridge\HELP_DECRYPT.URL --a---- 276 bytes [10:05 01/02/2015] [10:05 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\Users\Jay\Desktop\OLD Desktop\StMaryPeak\HELP_DECRYPT.HTML --a---- 8554 bytes [10:05 01/02/2015] [10:05 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\Users\Jay\Desktop\OLD Desktop\StMaryPeak\HELP_DECRYPT.PNG --a---- 45593 bytes [10:05 01/02/2015] [10:05 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\Desktop\OLD Desktop\StMaryPeak\HELP_DECRYPT.TXT --a---- 4220 bytes [10:05 01/02/2015] [10:05 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\Users\Jay\Desktop\OLD Desktop\StMaryPeak\HELP_DECRYPT.URL --a---- 276 bytes [10:05 01/02/2015] [10:05 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\Users\Jay\Desktop\OLD Desktop\TowerRidge Babb\HELP_DECRYPT.HTML --a---- 8554 bytes [10:05 01/02/2015] [10:05 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\Users\Jay\Desktop\OLD Desktop\TowerRidge Babb\HELP_DECRYPT.PNG --a---- 45593 bytes [10:05 01/02/2015] [10:05 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\Desktop\OLD Desktop\TowerRidge Babb\HELP_DECRYPT.TXT --a---- 4220 bytes [10:05 01/02/2015] [10:05 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\Users\Jay\Desktop\OLD Desktop\TowerRidge Babb\HELP_DECRYPT.URL --a---- 276 bytes [10:05 01/02/2015] [10:05 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\Users\Jay\Documents\HELP_DECRYPT.PNG --a---- 45593 bytes [10:06 01/02/2015] [10:06 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\Documents\CCWin\HELP_DECRYPT.HTML --a---- 8554 bytes [10:06 01/02/2015] [10:06 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\Users\Jay\Documents\CCWin\HELP_DECRYPT.PNG --a---- 45593 bytes [10:06 01/02/2015] [10:06 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\Documents\CCWin\HELP_DECRYPT.TXT --a---- 4220 bytes [10:06 01/02/2015] [10:06 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\Users\Jay\Documents\CCWin\HELP_DECRYPT.URL --a---- 276 bytes [10:06 01/02/2015] [10:06 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\Users\Jay\Documents\CCWin\Address Book\HELP_DECRYPT.HTML --a---- 8554 bytes [10:06 01/02/2015] [10:06 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\Users\Jay\Documents\CCWin\Address Book\HELP_DECRYPT.PNG --a---- 45593 bytes [10:06 01/02/2015] [10:06 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\Documents\CCWin\Address Book\HELP_DECRYPT.TXT --a---- 4220 bytes [10:06 01/02/2015] [10:06 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\Users\Jay\Documents\CCWin\Address Book\HELP_DECRYPT.URL --a---- 276 bytes [10:06 01/02/2015] [10:06 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\Users\Jay\Documents\Montana West\HELP_DECRYPT.HTML --a---- 8554 bytes [10:06 01/02/2015] [10:06 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\Users\Jay\Documents\Montana West\HELP_DECRYPT.PNG --a---- 45593 bytes [10:06 01/02/2015] [10:06 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\Documents\Montana West\HELP_DECRYPT.TXT --a---- 4220 bytes [10:06 01/02/2015] [10:06 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\Users\Jay\Documents\Montana West\HELP_DECRYPT.URL --a---- 276 bytes [10:06 01/02/2015] [10:06 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\Users\Jay\Documents\Old My Doc\Decrypt-All-Files-jytxdub.bmp --a---- 3932214 bytes [06:45 29/01/2015] [06:45 29/01/2015] CF715D44DB4591ED170CEEC643E13D6F
C:\Users\Jay\Documents\Old My Doc\Decrypt-All-Files-jytxdub.txt --a---- 1552 bytes [06:45 29/01/2015] [06:45 29/01/2015] 45CB444CC559F2F24EC0C8BEBDD829E6
C:\Users\Jay\Documents\Old My Doc\HELP_DECRYPT.HTML --a---- 8554 bytes [10:06 01/02/2015] [10:06 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\Users\Jay\Documents\Old My Doc\HELP_DECRYPT.PNG --a---- 45593 bytes [10:06 01/02/2015] [10:06 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\Documents\Old My Doc\HELP_DECRYPT.TXT --a---- 4220 bytes [10:06 01/02/2015] [10:06 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\Users\Jay\Documents\Old My Doc\HELP_DECRYPT.URL --a---- 276 bytes [10:06 01/02/2015] [10:06 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\Users\Jay\Documents\Old My Doc\2007 WTA Panel\HELP_DECRYPT.HTML --a---- 8554 bytes [10:06 01/02/2015] [10:06 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\Users\Jay\Documents\Old My Doc\2007 WTA Panel\HELP_DECRYPT.PNG --a---- 45593 bytes [10:06 01/02/2015] [10:06 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\Documents\Old My Doc\2007 WTA Panel\HELP_DECRYPT.TXT --a---- 4220 bytes [10:06 01/02/2015] [10:06 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\Users\Jay\Documents\Old My Doc\2007 WTA Panel\HELP_DECRYPT.URL --a---- 276 bytes [10:06 01/02/2015] [10:06 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\Users\Jay\Documents\Old My Doc\Blackfeet Maps\HELP_DECRYPT.HTML --a---- 8554 bytes [10:06 01/02/2015] [10:06 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\Users\Jay\Documents\Old My Doc\Blackfeet Maps\HELP_DECRYPT.PNG --a---- 45593 bytes [10:06 01/02/2015] [10:06 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\Documents\Old My Doc\Blackfeet Maps\HELP_DECRYPT.TXT --a---- 4220 bytes [10:06 01/02/2015] [10:06 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\Users\Jay\Documents\Old My Doc\Blackfeet Maps\HELP_DECRYPT.URL --a---- 276 bytes [10:06 01/02/2015] [10:06 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\Users\Jay\Documents\Old My Doc\GettingStartedData\HELP_DECRYPT.HTML --a---- 8554 bytes [10:06 01/02/2015] [10:06 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\Users\Jay\Documents\Old My Doc\GettingStartedData\HELP_DECRYPT.PNG --a---- 45593 bytes [10:06 01/02/2015] [10:06 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\Documents\Old My Doc\GettingStartedData\HELP_DECRYPT.TXT --a---- 4220 bytes [10:06 01/02/2015] [10:06 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\Users\Jay\Documents\Old My Doc\GettingStartedData\HELP_DECRYPT.URL --a---- 276 bytes [10:06 01/02/2015] [10:06 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\Users\Jay\Documents\Old My Doc\MapTutData\HELP_DECRYPT.HTML --a---- 8554 bytes [10:06 01/02/2015] [10:06 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\Users\Jay\Documents\Old My Doc\MapTutData\HELP_DECRYPT.PNG --a---- 45593 bytes [10:06 01/02/2015] [10:06 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\Documents\Old My Doc\MapTutData\HELP_DECRYPT.TXT --a---- 4220 bytes [10:06 01/02/2015] [10:06 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\Users\Jay\Documents\Old My Doc\MapTutData\HELP_DECRYPT.URL --a---- 276 bytes [10:06 01/02/2015] [10:06 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\Users\Jay\Documents\Old My Doc\MapTutData\!DrawingSetUp\HELP_DECRYPT.HTML --a---- 8554 bytes [10:06 01/02/2015] [10:06 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\Users\Jay\Documents\Old My Doc\MapTutData\!DrawingSetUp\HELP_DECRYPT.PNG --a---- 45593 bytes [10:06 01/02/2015] [10:06 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\Documents\Old My Doc\MapTutData\!DrawingSetUp\HELP_DECRYPT.TXT --a---- 4220 bytes [10:06 01/02/2015] [10:06 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\Users\Jay\Documents\Old My Doc\MapTutData\!DrawingSetUp\HELP_DECRYPT.URL --a---- 276 bytes [10:06 01/02/2015] [10:06 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\Users\Jay\Documents\Old My Doc\MapTutData\Annotation\HELP_DECRYPT.HTML --a---- 8554 bytes [10:06 01/02/2015] [10:06 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\Users\Jay\Documents\Old My Doc\MapTutData\Annotation\HELP_DECRYPT.PNG --a---- 45593 bytes [10:06 01/02/2015] [10:06 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\Documents\Old My Doc\MapTutData\Annotation\HELP_DECRYPT.TXT --a---- 4220 bytes [10:06 01/02/2015] [10:06 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\Users\Jay\Documents\Old My Doc\MapTutData\Annotation\HELP_DECRYPT.URL --a---- 276 bytes [10:06 01/02/2015] [10:06 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\Users\Jay\Documents\Old My Doc\MapTutData\Classification\HELP_DECRYPT.HTML --a---- 8554 bytes [10:06 01/02/2015] [10:06 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\Users\Jay\Documents\Old My Doc\MapTutData\Classification\HELP_DECRYPT.PNG --a---- 45593 bytes [10:06 01/02/2015] [10:06 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\Documents\Old My Doc\MapTutData\Classification\HELP_DECRYPT.TXT --a---- 4220 bytes [10:06 01/02/2015] [10:06 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\Users\Jay\Documents\Old My Doc\MapTutData\Classification\HELP_DECRYPT.URL --a---- 276 bytes [10:06 01/02/2015] [10:06 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\Users\Jay\Documents\Old My Doc\MapTutData\CoordinateSystems\HELP_DECRYPT.HTML --a---- 8554 bytes [10:06 01/02/2015] [10:06 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\Users\Jay\Documents\Old My Doc\MapTutData\CoordinateSystems\HELP_DECRYPT.PNG --a---- 45593 bytes [10:06 01/02/2015] [10:06 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\Documents\Old My Doc\MapTutData\CoordinateSystems\HELP_DECRYPT.TXT --a---- 4220 bytes [10:06 01/02/2015] [10:06 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\Users\Jay\Documents\Old My Doc\MapTutData\CoordinateSystems\HELP_DECRYPT.URL --a---- 276 bytes [10:06 01/02/2015] [10:06 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\Users\Jay\Documents\Old My Doc\MapTutData\DisplayManager\HELP_DECRYPT.HTML --a---- 8554 bytes [10:06 01/02/2015] [10:06 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\Users\Jay\Documents\Old My Doc\MapTutData\DisplayManager\HELP_DECRYPT.PNG --a---- 45593 bytes [10:06 01/02/2015] [10:06 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\Documents\Old My Doc\MapTutData\DisplayManager\HELP_DECRYPT.TXT --a---- 4220 bytes [10:06 01/02/2015] [10:06 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\Users\Jay\Documents\Old My Doc\MapTutData\DisplayManager\HELP_DECRYPT.URL --a---- 276 bytes [10:06 01/02/2015] [10:06 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\Users\Jay\Documents\Old My Doc\MapTutData\DrawingCleanup\HELP_DECRYPT.HTML --a---- 8554 bytes [10:06 01/02/2015] [10:06 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\Users\Jay\Documents\Old My Doc\MapTutData\DrawingCleanup\HELP_DECRYPT.PNG --a---- 45593 bytes [10:06 01/02/2015] [10:06 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\Documents\Old My Doc\MapTutData\DrawingCleanup\HELP_DECRYPT.TXT --a---- 4220 bytes [10:06 01/02/2015] [10:06 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\Users\Jay\Documents\Old My Doc\MapTutData\DrawingCleanup\HELP_DECRYPT.URL --a---- 276 bytes [10:06 01/02/2015] [10:06 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\Users\Jay\Documents\Old My Doc\MapTutData\EditingMultipleMaps\HELP_DECRYPT.HTML --a---- 8554 bytes [10:06 01/02/2015] [10:06 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\Users\Jay\Documents\Old My Doc\MapTutData\EditingMultipleMaps\HELP_DECRYPT.PNG --a---- 45593 bytes [10:06 01/02/2015] [10:06 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\Documents\Old My Doc\MapTutData\EditingMultipleMaps\HELP_DECRYPT.TXT --a---- 4220 bytes [10:06 01/02/2015] [10:06 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\Users\Jay\Documents\Old My Doc\MapTutData\EditingMultipleMaps\HELP_DECRYPT.URL --a---- 276 bytes [10:06 01/02/2015] [10:06 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\Users\Jay\Documents\Old My Doc\MapTutData\ExternalDatabase\HELP_DECRYPT.HTML --a---- 8554 bytes [10:06 01/02/2015] [10:06 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\Users\Jay\Documents\Old My Doc\MapTutData\ExternalDatabase\HELP_DECRYPT.PNG --a---- 45593 bytes [10:06 01/02/2015] [10:06 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\Documents\Old My Doc\MapTutData\ExternalDatabase\HELP_DECRYPT.TXT --a---- 4220 bytes [10:06 01/02/2015] [10:06 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\Users\Jay\Documents\Old My Doc\MapTutData\ExternalDatabase\HELP_DECRYPT.URL --a---- 276 bytes [10:06 01/02/2015] [10:06 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\Users\Jay\Documents\Old My Doc\MapTutData\FeatureSources\HELP_DECRYPT.HTML --a---- 8554 bytes [10:06 01/02/2015] [10:06 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\Users\Jay\Documents\Old My Doc\MapTutData\FeatureSources\HELP_DECRYPT.PNG --a---- 45593 bytes [10:06 01/02/2015] [10:06 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\Documents\Old My Doc\MapTutData\FeatureSources\HELP_DECRYPT.TXT --a---- 4220 bytes [10:06 01/02/2015] [10:06 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\Users\Jay\Documents\Old My Doc\MapTutData\FeatureSources\HELP_DECRYPT.URL --a---- 276 bytes [10:06 01/02/2015] [10:06 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\Users\Jay\Documents\Old My Doc\MapTutData\ImportExport\HELP_DECRYPT.HTML --a---- 8554 bytes [10:06 01/02/2015] [10:06 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\Users\Jay\Documents\Old My Doc\MapTutData\ImportExport\HELP_DECRYPT.PNG --a---- 45593 bytes [10:06 01/02/2015] [10:06 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\Documents\Old My Doc\MapTutData\ImportExport\HELP_DECRYPT.TXT --a---- 4220 bytes [10:06 01/02/2015] [10:06 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\Users\Jay\Documents\Old My Doc\MapTutData\ImportExport\HELP_DECRYPT.URL --a---- 276 bytes [10:06 01/02/2015] [10:06 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\Users\Jay\Documents\Old My Doc\MapTutData\MapBooks\HELP_DECRYPT.HTML --a---- 8554 bytes [10:06 01/02/2015] [10:06 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\Users\Jay\Documents\Old My Doc\MapTutData\MapBooks\HELP_DECRYPT.PNG --a---- 45593 bytes [10:06 01/02/2015] [10:06 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\Documents\Old My Doc\MapTutData\MapBooks\HELP_DECRYPT.TXT --a---- 4220 bytes [10:06 01/02/2015] [10:06 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\Users\Jay\Documents\Old My Doc\MapTutData\MapBooks\HELP_DECRYPT.URL --a---- 276 bytes [10:06 01/02/2015] [10:06 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\Users\Jay\Documents\Old My Doc\MapTutData\ObjectData\HELP_DECRYPT.HTML --a---- 8554 bytes [10:06 01/02/2015] [10:06 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\Users\Jay\Documents\Old My Doc\MapTutData\ObjectData\HELP_DECRYPT.PNG --a---- 45593 bytes [10:06 01/02/2015] [10:06 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\Documents\Old My Doc\MapTutData\ObjectData\HELP_DECRYPT.TXT --a---- 4220 bytes [10:06 01/02/2015] [10:06 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\Users\Jay\Documents\Old My Doc\MapTutData\ObjectData\HELP_DECRYPT.URL --a---- 276 bytes [10:06 01/02/2015] [10:06 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\Users\Jay\Documents\Old My Doc\MapTutData\Queries\HELP_DECRYPT.HTML --a---- 8554 bytes [10:06 01/02/2015] [10:06 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\Users\Jay\Documents\Old My Doc\MapTutData\Queries\HELP_DECRYPT.PNG --a---- 45593 bytes [10:06 01/02/2015] [10:06 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\Documents\Old My Doc\MapTutData\Queries\HELP_DECRYPT.TXT --a---- 4220 bytes [10:06 01/02/2015] [10:06 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\Users\Jay\Documents\Old My Doc\MapTutData\Queries\HELP_DECRYPT.URL --a---- 276 bytes [10:06 01/02/2015] [10:06 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\Users\Jay\Documents\Old My Doc\MapTutData\RasterImages\HELP_DECRYPT.HTML --a---- 8554 bytes [10:06 01/02/2015] [10:06 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\Users\Jay\Documents\Old My Doc\MapTutData\RasterImages\HELP_DECRYPT.PNG --a---- 45593 bytes [10:06 01/02/2015] [10:06 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\Documents\Old My Doc\MapTutData\RasterImages\HELP_DECRYPT.TXT --a---- 4220 bytes [10:06 01/02/2015] [10:06 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\Users\Jay\Documents\Old My Doc\MapTutData\RasterImages\HELP_DECRYPT.URL --a---- 276 bytes [10:06 01/02/2015] [10:06 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\Users\Jay\Documents\Old My Doc\MapTutData\TrackingCoordinates\HELP_DECRYPT.HTML --a---- 8554 bytes [10:06 01/02/2015] [10:06 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\Users\Jay\Documents\Old My Doc\MapTutData\TrackingCoordinates\HELP_DECRYPT.PNG --a---- 45593 bytes [10:06 01/02/2015] [10:06 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\Documents\Old My Doc\MapTutData\TrackingCoordinates\HELP_DECRYPT.TXT --a---- 4220 bytes [10:06 01/02/2015] [10:06 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\Users\Jay\Documents\Old My Doc\MapTutData\TrackingCoordinates\HELP_DECRYPT.URL --a---- 276 bytes [10:06 01/02/2015] [10:06 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\Users\Jay\Documents\Old My Doc\My Music\HELP_DECRYPT.HTML --a---- 8554 bytes [10:06 01/02/2015] [10:06 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\Users\Jay\Documents\Old My Doc\My Music\HELP_DECRYPT.PNG --a---- 45593 bytes [10:06 01/02/2015] [10:06 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\Documents\Old My Doc\My Music\HELP_DECRYPT.TXT --a---- 4220 bytes [10:06 01/02/2015] [10:06 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\Users\Jay\Documents\Old My Doc\My Music\HELP_DECRYPT.URL --a---- 276 bytes [10:06 01/02/2015] [10:06 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\Users\Jay\Documents\Old My Doc\My Music\My Playlists\HELP_DECRYPT.HTML --a---- 8554 bytes [10:06 01/02/2015] [10:06 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\Users\Jay\Documents\Old My Doc\My Music\My Playlists\HELP_DECRYPT.PNG --a---- 45593 bytes [10:06 01/02/2015] [10:06 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\Documents\Old My Doc\My Music\My Playlists\HELP_DECRYPT.TXT --a---- 4220 bytes [10:06 01/02/2015] [10:06 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\Users\Jay\Documents\Old My Doc\My Music\My Playlists\HELP_DECRYPT.URL --a---- 276 bytes [10:06 01/02/2015] [10:06 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\Users\Jay\Documents\Personal AutoCAD\HELP_DECRYPT.HTML --a---- 8554 bytes [10:06 01/02/2015] [10:06 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\Users\Jay\Documents\Personal AutoCAD\HELP_DECRYPT.PNG --a---- 45593 bytes [10:06 01/02/2015] [10:06 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\Documents\Personal AutoCAD\HELP_DECRYPT.TXT --a---- 4220 bytes [10:06 01/02/2015] [10:06 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\Users\Jay\Documents\Personal AutoCAD\HELP_DECRYPT.URL --a---- 276 bytes [10:06 01/02/2015] [10:06 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\Users\Jay\Downloads\HELP_DECRYPT.PNG --a---- 45593 bytes [10:06 01/02/2015] [10:06 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\Downloads\oki 4350\HELP_DECRYPT.HTML --a---- 8554 bytes [10:06 01/02/2015] [10:06 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\Users\Jay\Downloads\oki 4350\HELP_DECRYPT.PNG --a---- 45593 bytes [10:06 01/02/2015] [10:06 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\Downloads\oki 4350\HELP_DECRYPT.TXT --a---- 4220 bytes [10:06 01/02/2015] [10:06 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\Users\Jay\Downloads\oki 4350\HELP_DECRYPT.URL --a---- 276 bytes [10:06 01/02/2015] [10:06 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\Users\Jay\Pictures\HELP_DECRYPT.HTML --a---- 8554 bytes [10:06 01/02/2015] [10:06 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\Users\Jay\Pictures\HELP_DECRYPT.PNG --a---- 45593 bytes [10:06 01/02/2015] [10:06 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Users\Jay\Pictures\HELP_DECRYPT.TXT --a---- 4220 bytes [10:06 01/02/2015] [10:06 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\Users\Jay\Pictures\HELP_DECRYPT.URL --a---- 276 bytes [10:06 01/02/2015] [10:06 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
C:\Windows\Prefetch\RECTORDECRYPTOR.EXE-21FDDF27.pf --a---- 26726 bytes [05:57 03/02/2015] [05:57 03/02/2015] 2C9C2AD0713601DE69333EFC8F4025B1
C:\Windows\Prefetch\RECTORDECRYPTOR.EXE-89F63237.pf --a---- 91552 bytes [17:18 02/02/2015] [17:18 02/02/2015] F00A0261C7C073F11EBC1A350B836FA9
C:\Windows\pss\HELP_DECRYPT.HTML.Startup --a---- 8554 bytes [03:44 02/02/2015] [10:07 01/02/2015] C39F5EE2994F565BE840FBAEACDEFBFF
C:\Windows\pss\HELP_DECRYPT.PNG.Startup --a---- 45593 bytes [03:44 02/02/2015] [10:07 01/02/2015] D0B9CA8D9070708482C6584F631CA017
C:\Windows\pss\HELP_DECRYPT.TXT.Startup --a---- 4220 bytes [03:44 02/02/2015] [10:07 01/02/2015] E8BD6F3319105AD1A9E50432C49787B6
C:\Windows\pss\HELP_DECRYPT.URL.Startup --a---- 276 bytes [03:44 02/02/2015] [10:07 01/02/2015] 4E86545C072E838BAC8C03E4FF5C9E80
 
========== regfind ==========
 
Searching for "*decrypt*"
No data found.
 
-= EOF =-

 

 

Attached Files



#4 wademon

wademon
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:04:33 PM

Posted 04 February 2015 - 01:26 AM

Sorry Gary it looks like the summary zip I sent was from my local machine. I will add the correct one here.

Thanks,

Wade



#5 Oh My!

Oh My!

    Adware and Spyware and Malware.....


  • Malware Response Instructor
  • 36,392 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:California
  • Local time:03:33 PM

Posted 04 February 2015 - 09:23 AM

Greetings Wade and thank you for the information. Please do this.

===================================================

Farbar's Recovery Scan Tool Search

--------------------
  • Launch FRST
  • Copy/paste the following in the Search Field
*decrypt*
  • Click Search File(s) button
  • When completed click OK and a Search.txt document will open on your desktop
  • Copy and paste the contents of that document your reply
===================================================

Things I would like to see in your next reply. Please be sure to copy and paste any requested log information unless you are asked to attach it. :thumbsup2:
  • Search.txt

Gary
 
If I do not reply within 24 hours please send me a Personal Message.

"Lord, to whom would we go? You have the words that give eternal life. We believe, and we know you are the Holy One of God."

#6 wademon

wademon
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:04:33 PM

Posted 04 February 2015 - 02:49 PM

Ok Gary here we go.

 

Farbar Recovery Scan Tool (x86) Version: 04-02-2015 01
Ran by Jay at 2015-02-04 12:41:43
Running from C:\Users\Jay\Desktop
Boot Mode: Normal
 
================== Search: "*decrypt*" ===================
 
C:\RakhniDecryptor.1.5.16.6_02.02.2015_07.14.44_log.txt
[2015-02-02 07:14][2015-02-02 07:16] 0002364 ____A () 804B0C5D6268680CFB193419EF9D4755
 
C:\RectorDecryptor.2.6.33.0_02.02.2015_07.16.36_log.txt
[2015-02-02 07:16][2015-02-02 07:44] 8140456 ____A () 3227D8327FF52E187A550A9576EB38EB
 
C:\RectorDecryptor.2.6.33.0_02.02.2015_10.18.42_log.txt
[2015-02-02 10:18][2015-02-02 10:26] 5207360 ____A () E5A34B16D115F67A4FC07B1A109BD32F
 
C:\RectorDecryptor.2.6.33.0_02.02.2015_22.57.09_log.txt
[2015-02-02 22:57][2015-02-02 22:57] 0001946 ____A () C2D1B8DA6DF7F13930EEE94A4747F9E3
 
C:\Windows\pss\HELP_DECRYPT.HTML.Startup
[2015-02-01 20:44][2015-02-01 03:07] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\Windows\pss\HELP_DECRYPT.PNG.Startup
[2015-02-01 20:44][2015-02-01 03:07] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Windows\pss\HELP_DECRYPT.TXT.Startup
[2015-02-01 20:44][2015-02-01 03:07] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\Windows\pss\HELP_DECRYPT.URL.Startup
[2015-02-01 20:44][2015-02-01 03:07] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\Users\Jay\HELP_DECRYPT.PNG
[2015-02-01 03:06][2015-02-01 03:06] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\Pictures\HELP_DECRYPT.HTML
[2015-02-01 03:06][2015-02-01 03:06] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\Users\Jay\Pictures\HELP_DECRYPT.PNG
[2015-02-01 03:06][2015-02-01 03:06] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\Pictures\HELP_DECRYPT.TXT
[2015-02-01 03:06][2015-02-01 03:06] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\Users\Jay\Pictures\HELP_DECRYPT.URL
[2015-02-01 03:06][2015-02-01 03:06] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\Users\Jay\Downloads\HELP_DECRYPT.PNG
[2015-02-01 03:06][2015-02-01 03:06] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\Downloads\oki 4350\HELP_DECRYPT.HTML
[2015-02-01 03:06][2015-02-01 03:06] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\Users\Jay\Downloads\oki 4350\HELP_DECRYPT.PNG
[2015-02-01 03:06][2015-02-01 03:06] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\Downloads\oki 4350\HELP_DECRYPT.TXT
[2015-02-01 03:06][2015-02-01 03:06] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\Users\Jay\Downloads\oki 4350\HELP_DECRYPT.URL
[2015-02-01 03:06][2015-02-01 03:06] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\Users\Jay\Documents\HELP_DECRYPT.PNG
[2015-02-01 03:06][2015-02-01 03:06] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\Documents\Personal AutoCAD\HELP_DECRYPT.HTML
[2015-02-01 03:06][2015-02-01 03:06] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\Users\Jay\Documents\Personal AutoCAD\HELP_DECRYPT.PNG
[2015-02-01 03:06][2015-02-01 03:06] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\Documents\Personal AutoCAD\HELP_DECRYPT.TXT
[2015-02-01 03:06][2015-02-01 03:06] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\Users\Jay\Documents\Personal AutoCAD\HELP_DECRYPT.URL
[2015-02-01 03:06][2015-02-01 03:06] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\Users\Jay\Documents\Old My Doc\Decrypt-All-Files-jytxdub.bmp
[2015-01-28 23:45][2015-01-28 23:45] 3932214 ____A () CF715D44DB4591ED170CEEC643E13D6F
 
C:\Users\Jay\Documents\Old My Doc\Decrypt-All-Files-jytxdub.txt
[2015-01-28 23:45][2015-01-28 23:45] 0001552 ____A () 45CB444CC559F2F24EC0C8BEBDD829E6
 
C:\Users\Jay\Documents\Old My Doc\HELP_DECRYPT.HTML
[2015-02-01 03:06][2015-02-01 03:06] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\Users\Jay\Documents\Old My Doc\HELP_DECRYPT.PNG
[2015-02-01 03:06][2015-02-01 03:06] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\Documents\Old My Doc\HELP_DECRYPT.TXT
[2015-02-01 03:06][2015-02-01 03:06] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\Users\Jay\Documents\Old My Doc\HELP_DECRYPT.URL
[2015-02-01 03:06][2015-02-01 03:06] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\Users\Jay\Documents\Old My Doc\My Music\HELP_DECRYPT.HTML
[2015-02-01 03:06][2015-02-01 03:06] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\Users\Jay\Documents\Old My Doc\My Music\HELP_DECRYPT.PNG
[2015-02-01 03:06][2015-02-01 03:06] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\Documents\Old My Doc\My Music\HELP_DECRYPT.TXT
[2015-02-01 03:06][2015-02-01 03:06] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\Users\Jay\Documents\Old My Doc\My Music\HELP_DECRYPT.URL
[2015-02-01 03:06][2015-02-01 03:06] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\Users\Jay\Documents\Old My Doc\My Music\My Playlists\HELP_DECRYPT.HTML
[2015-02-01 03:06][2015-02-01 03:06] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\Users\Jay\Documents\Old My Doc\My Music\My Playlists\HELP_DECRYPT.PNG
[2015-02-01 03:06][2015-02-01 03:06] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\Documents\Old My Doc\My Music\My Playlists\HELP_DECRYPT.TXT
[2015-02-01 03:06][2015-02-01 03:06] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\Users\Jay\Documents\Old My Doc\My Music\My Playlists\HELP_DECRYPT.URL
[2015-02-01 03:06][2015-02-01 03:06] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\HELP_DECRYPT.HTML
[2015-02-01 03:06][2015-02-01 03:06] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\HELP_DECRYPT.PNG
[2015-02-01 03:06][2015-02-01 03:06] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\HELP_DECRYPT.TXT
[2015-02-01 03:06][2015-02-01 03:06] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\HELP_DECRYPT.URL
[2015-02-01 03:06][2015-02-01 03:06] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\TrackingCoordinates\HELP_DECRYPT.HTML
[2015-02-01 03:06][2015-02-01 03:06] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\TrackingCoordinates\HELP_DECRYPT.PNG
[2015-02-01 03:06][2015-02-01 03:06] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\TrackingCoordinates\HELP_DECRYPT.TXT
[2015-02-01 03:06][2015-02-01 03:06] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\TrackingCoordinates\HELP_DECRYPT.URL
[2015-02-01 03:06][2015-02-01 03:06] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\RasterImages\HELP_DECRYPT.HTML
[2015-02-01 03:06][2015-02-01 03:06] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\RasterImages\HELP_DECRYPT.PNG
[2015-02-01 03:06][2015-02-01 03:06] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\RasterImages\HELP_DECRYPT.TXT
[2015-02-01 03:06][2015-02-01 03:06] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\RasterImages\HELP_DECRYPT.URL
[2015-02-01 03:06][2015-02-01 03:06] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\Queries\HELP_DECRYPT.HTML
[2015-02-01 03:06][2015-02-01 03:06] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\Queries\HELP_DECRYPT.PNG
[2015-02-01 03:06][2015-02-01 03:06] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\Queries\HELP_DECRYPT.TXT
[2015-02-01 03:06][2015-02-01 03:06] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\Queries\HELP_DECRYPT.URL
[2015-02-01 03:06][2015-02-01 03:06] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\ObjectData\HELP_DECRYPT.HTML
[2015-02-01 03:06][2015-02-01 03:06] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\ObjectData\HELP_DECRYPT.PNG
[2015-02-01 03:06][2015-02-01 03:06] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\ObjectData\HELP_DECRYPT.TXT
[2015-02-01 03:06][2015-02-01 03:06] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\ObjectData\HELP_DECRYPT.URL
[2015-02-01 03:06][2015-02-01 03:06] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\MapBooks\HELP_DECRYPT.HTML
[2015-02-01 03:06][2015-02-01 03:06] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\MapBooks\HELP_DECRYPT.PNG
[2015-02-01 03:06][2015-02-01 03:06] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\MapBooks\HELP_DECRYPT.TXT
[2015-02-01 03:06][2015-02-01 03:06] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\MapBooks\HELP_DECRYPT.URL
[2015-02-01 03:06][2015-02-01 03:06] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\ImportExport\HELP_DECRYPT.HTML
[2015-02-01 03:06][2015-02-01 03:06] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\ImportExport\HELP_DECRYPT.PNG
[2015-02-01 03:06][2015-02-01 03:06] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\ImportExport\HELP_DECRYPT.TXT
[2015-02-01 03:06][2015-02-01 03:06] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\ImportExport\HELP_DECRYPT.URL
[2015-02-01 03:06][2015-02-01 03:06] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\FeatureSources\HELP_DECRYPT.HTML
[2015-02-01 03:06][2015-02-01 03:06] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\FeatureSources\HELP_DECRYPT.PNG
[2015-02-01 03:06][2015-02-01 03:06] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\FeatureSources\HELP_DECRYPT.TXT
[2015-02-01 03:06][2015-02-01 03:06] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\FeatureSources\HELP_DECRYPT.URL
[2015-02-01 03:06][2015-02-01 03:06] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\ExternalDatabase\HELP_DECRYPT.HTML
[2015-02-01 03:06][2015-02-01 03:06] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\ExternalDatabase\HELP_DECRYPT.PNG
[2015-02-01 03:06][2015-02-01 03:06] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\ExternalDatabase\HELP_DECRYPT.TXT
[2015-02-01 03:06][2015-02-01 03:06] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\ExternalDatabase\HELP_DECRYPT.URL
[2015-02-01 03:06][2015-02-01 03:06] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\EditingMultipleMaps\HELP_DECRYPT.HTML
[2015-02-01 03:06][2015-02-01 03:06] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\EditingMultipleMaps\HELP_DECRYPT.PNG
[2015-02-01 03:06][2015-02-01 03:06] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\EditingMultipleMaps\HELP_DECRYPT.TXT
[2015-02-01 03:06][2015-02-01 03:06] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\EditingMultipleMaps\HELP_DECRYPT.URL
[2015-02-01 03:06][2015-02-01 03:06] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\DrawingCleanup\HELP_DECRYPT.HTML
[2015-02-01 03:06][2015-02-01 03:06] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\DrawingCleanup\HELP_DECRYPT.PNG
[2015-02-01 03:06][2015-02-01 03:06] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\DrawingCleanup\HELP_DECRYPT.TXT
[2015-02-01 03:06][2015-02-01 03:06] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\DrawingCleanup\HELP_DECRYPT.URL
[2015-02-01 03:06][2015-02-01 03:06] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\DisplayManager\HELP_DECRYPT.HTML
[2015-02-01 03:06][2015-02-01 03:06] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\DisplayManager\HELP_DECRYPT.PNG
[2015-02-01 03:06][2015-02-01 03:06] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\DisplayManager\HELP_DECRYPT.TXT
[2015-02-01 03:06][2015-02-01 03:06] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\DisplayManager\HELP_DECRYPT.URL
[2015-02-01 03:06][2015-02-01 03:06] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\CoordinateSystems\HELP_DECRYPT.HTML
[2015-02-01 03:06][2015-02-01 03:06] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\CoordinateSystems\HELP_DECRYPT.PNG
[2015-02-01 03:06][2015-02-01 03:06] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\CoordinateSystems\HELP_DECRYPT.TXT
[2015-02-01 03:06][2015-02-01 03:06] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\CoordinateSystems\HELP_DECRYPT.URL
[2015-02-01 03:06][2015-02-01 03:06] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\Classification\HELP_DECRYPT.HTML
[2015-02-01 03:06][2015-02-01 03:06] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\Classification\HELP_DECRYPT.PNG
[2015-02-01 03:06][2015-02-01 03:06] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\Classification\HELP_DECRYPT.TXT
[2015-02-01 03:06][2015-02-01 03:06] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\Classification\HELP_DECRYPT.URL
[2015-02-01 03:06][2015-02-01 03:06] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\Annotation\HELP_DECRYPT.HTML
[2015-02-01 03:06][2015-02-01 03:06] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\Annotation\HELP_DECRYPT.PNG
[2015-02-01 03:06][2015-02-01 03:06] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\Annotation\HELP_DECRYPT.TXT
[2015-02-01 03:06][2015-02-01 03:06] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\Annotation\HELP_DECRYPT.URL
[2015-02-01 03:06][2015-02-01 03:06] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\!DrawingSetUp\HELP_DECRYPT.HTML
[2015-02-01 03:06][2015-02-01 03:06] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\!DrawingSetUp\HELP_DECRYPT.PNG
[2015-02-01 03:06][2015-02-01 03:06] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\!DrawingSetUp\HELP_DECRYPT.TXT
[2015-02-01 03:06][2015-02-01 03:06] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\Users\Jay\Documents\Old My Doc\MapTutData\!DrawingSetUp\HELP_DECRYPT.URL
[2015-02-01 03:06][2015-02-01 03:06] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\Users\Jay\Documents\Old My Doc\GettingStartedData\HELP_DECRYPT.HTML
[2015-02-01 03:06][2015-02-01 03:06] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\Users\Jay\Documents\Old My Doc\GettingStartedData\HELP_DECRYPT.PNG
[2015-02-01 03:06][2015-02-01 03:06] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\Documents\Old My Doc\GettingStartedData\HELP_DECRYPT.TXT
[2015-02-01 03:06][2015-02-01 03:06] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\Users\Jay\Documents\Old My Doc\GettingStartedData\HELP_DECRYPT.URL
[2015-02-01 03:06][2015-02-01 03:06] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\Users\Jay\Documents\Old My Doc\Blackfeet Maps\HELP_DECRYPT.HTML
[2015-02-01 03:06][2015-02-01 03:06] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\Users\Jay\Documents\Old My Doc\Blackfeet Maps\HELP_DECRYPT.PNG
[2015-02-01 03:06][2015-02-01 03:06] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\Documents\Old My Doc\Blackfeet Maps\HELP_DECRYPT.TXT
[2015-02-01 03:06][2015-02-01 03:06] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\Users\Jay\Documents\Old My Doc\Blackfeet Maps\HELP_DECRYPT.URL
[2015-02-01 03:06][2015-02-01 03:06] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\Users\Jay\Documents\Old My Doc\2007 WTA Panel\HELP_DECRYPT.HTML
[2015-02-01 03:06][2015-02-01 03:06] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\Users\Jay\Documents\Old My Doc\2007 WTA Panel\HELP_DECRYPT.PNG
[2015-02-01 03:06][2015-02-01 03:06] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\Documents\Old My Doc\2007 WTA Panel\HELP_DECRYPT.TXT
[2015-02-01 03:06][2015-02-01 03:06] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\Users\Jay\Documents\Old My Doc\2007 WTA Panel\HELP_DECRYPT.URL
[2015-02-01 03:06][2015-02-01 03:06] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\Users\Jay\Documents\Montana West\HELP_DECRYPT.HTML
[2015-02-01 03:06][2015-02-01 03:06] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\Users\Jay\Documents\Montana West\HELP_DECRYPT.PNG
[2015-02-01 03:06][2015-02-01 03:06] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\Documents\Montana West\HELP_DECRYPT.TXT
[2015-02-01 03:06][2015-02-01 03:06] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\Users\Jay\Documents\Montana West\HELP_DECRYPT.URL
[2015-02-01 03:06][2015-02-01 03:06] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\Users\Jay\Documents\CCWin\HELP_DECRYPT.HTML
[2015-02-01 03:06][2015-02-01 03:06] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\Users\Jay\Documents\CCWin\HELP_DECRYPT.PNG
[2015-02-01 03:06][2015-02-01 03:06] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\Documents\CCWin\HELP_DECRYPT.TXT
[2015-02-01 03:06][2015-02-01 03:06] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\Users\Jay\Documents\CCWin\HELP_DECRYPT.URL
[2015-02-01 03:06][2015-02-01 03:06] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\Users\Jay\Documents\CCWin\Address Book\HELP_DECRYPT.HTML
[2015-02-01 03:06][2015-02-01 03:06] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\Users\Jay\Documents\CCWin\Address Book\HELP_DECRYPT.PNG
[2015-02-01 03:06][2015-02-01 03:06] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\Documents\CCWin\Address Book\HELP_DECRYPT.TXT
[2015-02-01 03:06][2015-02-01 03:06] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\Users\Jay\Documents\CCWin\Address Book\HELP_DECRYPT.URL
[2015-02-01 03:06][2015-02-01 03:06] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\Users\Jay\Desktop\HELP_DECRYPT.PNG
[2015-02-01 03:07][2015-02-01 03:07] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\Desktop\OLD Desktop\HELP_DECRYPT.HTML
[2015-02-01 03:06][2015-02-01 03:06] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\Users\Jay\Desktop\OLD Desktop\HELP_DECRYPT.PNG
[2015-02-01 03:06][2015-02-01 03:06] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\Desktop\OLD Desktop\HELP_DECRYPT.TXT
[2015-02-01 03:06][2015-02-01 03:06] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\Users\Jay\Desktop\OLD Desktop\HELP_DECRYPT.URL
[2015-02-01 03:06][2015-02-01 03:06] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\Users\Jay\Desktop\OLD Desktop\TowerRidge Babb\HELP_DECRYPT.HTML
[2015-02-01 03:05][2015-02-01 03:05] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\Users\Jay\Desktop\OLD Desktop\TowerRidge Babb\HELP_DECRYPT.PNG
[2015-02-01 03:05][2015-02-01 03:05] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\Desktop\OLD Desktop\TowerRidge Babb\HELP_DECRYPT.TXT
[2015-02-01 03:05][2015-02-01 03:05] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\Users\Jay\Desktop\OLD Desktop\TowerRidge Babb\HELP_DECRYPT.URL
[2015-02-01 03:05][2015-02-01 03:05] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\Users\Jay\Desktop\OLD Desktop\StMaryPeak\HELP_DECRYPT.HTML
[2015-02-01 03:05][2015-02-01 03:05] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\Users\Jay\Desktop\OLD Desktop\StMaryPeak\HELP_DECRYPT.PNG
[2015-02-01 03:05][2015-02-01 03:05] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\Desktop\OLD Desktop\StMaryPeak\HELP_DECRYPT.TXT
[2015-02-01 03:05][2015-02-01 03:05] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\Users\Jay\Desktop\OLD Desktop\StMaryPeak\HELP_DECRYPT.URL
[2015-02-01 03:05][2015-02-01 03:05] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\Users\Jay\Desktop\OLD Desktop\Rocky Ridge\HELP_DECRYPT.HTML
[2015-02-01 03:05][2015-02-01 03:05] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\Users\Jay\Desktop\OLD Desktop\Rocky Ridge\HELP_DECRYPT.PNG
[2015-02-01 03:05][2015-02-01 03:05] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\Desktop\OLD Desktop\Rocky Ridge\HELP_DECRYPT.TXT
[2015-02-01 03:05][2015-02-01 03:05] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\Users\Jay\Desktop\OLD Desktop\Rocky Ridge\HELP_DECRYPT.URL
[2015-02-01 03:05][2015-02-01 03:05] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\Users\Jay\Desktop\OLD Desktop\Peterson Coulee\HELP_DECRYPT.HTML
[2015-02-01 03:05][2015-02-01 03:05] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\Users\Jay\Desktop\OLD Desktop\Peterson Coulee\HELP_DECRYPT.PNG
[2015-02-01 03:05][2015-02-01 03:05] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\Desktop\OLD Desktop\Peterson Coulee\HELP_DECRYPT.TXT
[2015-02-01 03:05][2015-02-01 03:05] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\Users\Jay\Desktop\OLD Desktop\Peterson Coulee\HELP_DECRYPT.URL
[2015-02-01 03:05][2015-02-01 03:05] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\Users\Jay\Desktop\OLD Desktop\Merriwether\HELP_DECRYPT.HTML
[2015-02-01 03:05][2015-02-01 03:05] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\Users\Jay\Desktop\OLD Desktop\Merriwether\HELP_DECRYPT.PNG
[2015-02-01 03:05][2015-02-01 03:05] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\Desktop\OLD Desktop\Merriwether\HELP_DECRYPT.TXT
[2015-02-01 03:05][2015-02-01 03:05] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\Users\Jay\Desktop\OLD Desktop\Merriwether\HELP_DECRYPT.URL
[2015-02-01 03:05][2015-02-01 03:05] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\Users\Jay\Desktop\OLD Desktop\LandslideButte\HELP_DECRYPT.HTML
[2015-02-01 03:05][2015-02-01 03:05] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\Users\Jay\Desktop\OLD Desktop\LandslideButte\HELP_DECRYPT.PNG
[2015-02-01 03:05][2015-02-01 03:05] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\Desktop\OLD Desktop\LandslideButte\HELP_DECRYPT.TXT
[2015-02-01 03:05][2015-02-01 03:05] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\Users\Jay\Desktop\OLD Desktop\LandslideButte\HELP_DECRYPT.URL
[2015-02-01 03:05][2015-02-01 03:05] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\Users\Jay\Desktop\OLD Desktop\Landslide Butte\HELP_DECRYPT.HTML
[2015-02-01 03:05][2015-02-01 03:05] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\Users\Jay\Desktop\OLD Desktop\Landslide Butte\HELP_DECRYPT.PNG
[2015-02-01 03:05][2015-02-01 03:05] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\Desktop\OLD Desktop\Landslide Butte\HELP_DECRYPT.TXT
[2015-02-01 03:05][2015-02-01 03:05] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\Users\Jay\Desktop\OLD Desktop\Landslide Butte\HELP_DECRYPT.URL
[2015-02-01 03:05][2015-02-01 03:05] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\Users\Jay\Desktop\OLD Desktop\Horn Ridge\HELP_DECRYPT.HTML
[2015-02-01 03:05][2015-02-01 03:05] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\Users\Jay\Desktop\OLD Desktop\Horn Ridge\HELP_DECRYPT.PNG
[2015-02-01 03:05][2015-02-01 03:05] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\Desktop\OLD Desktop\Horn Ridge\HELP_DECRYPT.TXT
[2015-02-01 03:05][2015-02-01 03:05] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\Users\Jay\Desktop\OLD Desktop\Horn Ridge\HELP_DECRYPT.URL
[2015-02-01 03:05][2015-02-01 03:05] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\Users\Jay\Desktop\OLD Desktop\Horn Ridge\Horn Ridge\HELP_DECRYPT.HTML
[2015-02-01 03:05][2015-02-01 03:05] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\Users\Jay\Desktop\OLD Desktop\Horn Ridge\Horn Ridge\HELP_DECRYPT.PNG
[2015-02-01 03:05][2015-02-01 03:05] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\Desktop\OLD Desktop\Horn Ridge\Horn Ridge\HELP_DECRYPT.TXT
[2015-02-01 03:05][2015-02-01 03:05] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\Users\Jay\Desktop\OLD Desktop\Horn Ridge\Horn Ridge\HELP_DECRYPT.URL
[2015-02-01 03:05][2015-02-01 03:05] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\Users\Jay\Desktop\OLD Desktop\Horn Ridge\Horn Ridge\Father Out\HELP_DECRYPT.HTML
[2015-02-01 03:05][2015-02-01 03:05] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\Users\Jay\Desktop\OLD Desktop\Horn Ridge\Horn Ridge\Father Out\HELP_DECRYPT.PNG
[2015-02-01 03:05][2015-02-01 03:05] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\Desktop\OLD Desktop\Horn Ridge\Horn Ridge\Father Out\HELP_DECRYPT.TXT
[2015-02-01 03:05][2015-02-01 03:05] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\Users\Jay\Desktop\OLD Desktop\Horn Ridge\Horn Ridge\Father Out\HELP_DECRYPT.URL
[2015-02-01 03:05][2015-02-01 03:05] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\Users\Jay\Desktop\OLD Desktop\Horn Ridge\Horn Ridge\Close_in\HELP_DECRYPT.HTML
[2015-02-01 03:05][2015-02-01 03:05] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\Users\Jay\Desktop\OLD Desktop\Horn Ridge\Horn Ridge\Close_in\HELP_DECRYPT.PNG
[2015-02-01 03:05][2015-02-01 03:05] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\Desktop\OLD Desktop\Horn Ridge\Horn Ridge\Close_in\HELP_DECRYPT.TXT
[2015-02-01 03:05][2015-02-01 03:05] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\Users\Jay\Desktop\OLD Desktop\Horn Ridge\Horn Ridge\Close_in\HELP_DECRYPT.URL
[2015-02-01 03:05][2015-02-01 03:05] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\Users\Jay\Desktop\OLD Desktop\Heart Butte\HELP_DECRYPT.HTML
[2015-02-01 03:05][2015-02-01 03:05] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\Users\Jay\Desktop\OLD Desktop\Heart Butte\HELP_DECRYPT.PNG
[2015-02-01 03:05][2015-02-01 03:05] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\Desktop\OLD Desktop\Heart Butte\HELP_DECRYPT.TXT
[2015-02-01 03:05][2015-02-01 03:05] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\Users\Jay\Desktop\OLD Desktop\Heart Butte\HELP_DECRYPT.URL
[2015-02-01 03:05][2015-02-01 03:05] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\Users\Jay\Desktop\OLD Desktop\Heart Butte\Tower Ridge Farther Out\HELP_DECRYPT.HTML
[2015-02-01 03:05][2015-02-01 03:05] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\Users\Jay\Desktop\OLD Desktop\Heart Butte\Tower Ridge Farther Out\HELP_DECRYPT.PNG
[2015-02-01 03:05][2015-02-01 03:05] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\Desktop\OLD Desktop\Heart Butte\Tower Ridge Farther Out\HELP_DECRYPT.TXT
[2015-02-01 03:05][2015-02-01 03:05] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\Users\Jay\Desktop\OLD Desktop\Heart Butte\Tower Ridge Farther Out\HELP_DECRYPT.URL
[2015-02-01 03:05][2015-02-01 03:05] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\Users\Jay\Desktop\OLD Desktop\Eagle Point\HELP_DECRYPT.HTML
[2015-02-01 03:05][2015-02-01 03:05] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\Users\Jay\Desktop\OLD Desktop\Eagle Point\HELP_DECRYPT.PNG
[2015-02-01 03:05][2015-02-01 03:05] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\Desktop\OLD Desktop\Eagle Point\HELP_DECRYPT.TXT
[2015-02-01 03:05][2015-02-01 03:05] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\Users\Jay\Desktop\OLD Desktop\Eagle Point\HELP_DECRYPT.URL
[2015-02-01 03:05][2015-02-01 03:05] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\Users\Jay\Desktop\OLD Desktop\DividePK to Duck Lake\HELP_DECRYPT.HTML
[2015-02-01 03:05][2015-02-01 03:05] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\Users\Jay\Desktop\OLD Desktop\DividePK to Duck Lake\HELP_DECRYPT.PNG
[2015-02-01 03:05][2015-02-01 03:05] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\Desktop\OLD Desktop\DividePK to Duck Lake\HELP_DECRYPT.TXT
[2015-02-01 03:05][2015-02-01 03:05] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\Users\Jay\Desktop\OLD Desktop\DividePK to Duck Lake\HELP_DECRYPT.URL
[2015-02-01 03:05][2015-02-01 03:05] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\Users\Jay\Desktop\OLD Desktop\Divide Peak Yagi\HELP_DECRYPT.HTML
[2015-02-01 03:05][2015-02-01 03:05] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\Users\Jay\Desktop\OLD Desktop\Divide Peak Yagi\HELP_DECRYPT.PNG
[2015-02-01 03:05][2015-02-01 03:05] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\Desktop\OLD Desktop\Divide Peak Yagi\HELP_DECRYPT.TXT
[2015-02-01 03:05][2015-02-01 03:05] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\Users\Jay\Desktop\OLD Desktop\Divide Peak Yagi\HELP_DECRYPT.URL
[2015-02-01 03:05][2015-02-01 03:05] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\Users\Jay\Desktop\OLD Desktop\Cut Bank\HELP_DECRYPT.HTML
[2015-02-01 03:05][2015-02-01 03:05] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\Users\Jay\Desktop\OLD Desktop\Cut Bank\HELP_DECRYPT.PNG
[2015-02-01 03:05][2015-02-01 03:05] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\Desktop\OLD Desktop\Cut Bank\HELP_DECRYPT.TXT
[2015-02-01 03:05][2015-02-01 03:05] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\Users\Jay\Desktop\OLD Desktop\Cut Bank\HELP_DECRYPT.URL
[2015-02-01 03:05][2015-02-01 03:05] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\Users\Jay\Desktop\OLD Desktop\Cut Bank\Farther Out\HELP_DECRYPT.HTML
[2015-02-01 03:05][2015-02-01 03:05] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\Users\Jay\Desktop\OLD Desktop\Cut Bank\Farther Out\HELP_DECRYPT.PNG
[2015-02-01 03:05][2015-02-01 03:05] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\Desktop\OLD Desktop\Cut Bank\Farther Out\HELP_DECRYPT.TXT
[2015-02-01 03:05][2015-02-01 03:05] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\Users\Jay\Desktop\OLD Desktop\Cut Bank\Farther Out\HELP_DECRYPT.URL
[2015-02-01 03:05][2015-02-01 03:05] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\Users\Jay\Desktop\OLD Desktop\Browning\HELP_DECRYPT.HTML
[2015-02-01 03:05][2015-02-01 03:05] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\Users\Jay\Desktop\OLD Desktop\Browning\HELP_DECRYPT.PNG
[2015-02-01 03:05][2015-02-01 03:05] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\Desktop\OLD Desktop\Browning\HELP_DECRYPT.TXT
[2015-02-01 03:05][2015-02-01 03:05] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\Users\Jay\Desktop\OLD Desktop\Browning\HELP_DECRYPT.URL
[2015-02-01 03:05][2015-02-01 03:05] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\Users\Jay\Desktop\Clean tools\Additionno decrypt.txt
[2015-02-02 22:49][2015-02-02 22:50] 0025059 ____A () ADFC6F621AFFFE6EE60369F5863EC600
 
C:\Users\Jay\Desktop\Clean tools\rakhnidecryptor.exe
[2015-02-02 07:14][2015-02-02 07:10] 1416088 ____A (Kaspersky Lab ZAO) 564243C3350CEE5B70F15CA86415FE59 [File is signed]
 
C:\Users\Jay\Desktop\Clean tools\rectordecryptor.exe
[2015-02-02 07:14][2015-02-02 07:08] 0785592 ____A (Kaspersky Lab ZAO) B99595C5C83762907FE90DAF34F97C44 [File is signed]
 
C:\Users\Jay\AppData\HELP_DECRYPT.PNG
[2015-02-01 03:05][2015-02-01 03:05] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\AppData\Roaming\SUPERAntiSpyware.com\HELP_DECRYPT.HTML
[2015-02-01 03:05][2015-02-01 03:05] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\Users\Jay\AppData\Roaming\SUPERAntiSpyware.com\HELP_DECRYPT.PNG
[2015-02-01 03:05][2015-02-01 03:05] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\AppData\Roaming\SUPERAntiSpyware.com\HELP_DECRYPT.TXT
[2015-02-01 03:05][2015-02-01 03:05] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\Users\Jay\AppData\Roaming\SUPERAntiSpyware.com\HELP_DECRYPT.URL
[2015-02-01 03:05][2015-02-01 03:05] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\Users\Jay\AppData\Roaming\SUPERAntiSpyware.com\SUPERAntiSpyware\HELP_DECRYPT.HTML
[2015-02-01 03:05][2015-02-01 03:05] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\Users\Jay\AppData\Roaming\SUPERAntiSpyware.com\SUPERAntiSpyware\HELP_DECRYPT.PNG
[2015-02-01 03:05][2015-02-01 03:05] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\AppData\Roaming\SUPERAntiSpyware.com\SUPERAntiSpyware\HELP_DECRYPT.TXT
[2015-02-01 03:05][2015-02-01 03:05] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\Users\Jay\AppData\Roaming\SUPERAntiSpyware.com\SUPERAntiSpyware\HELP_DECRYPT.URL
[2015-02-01 03:05][2015-02-01 03:05] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\Users\Jay\AppData\Roaming\SUPERAntiSpyware.com\SUPERAntiSpyware\Quarantine\HELP_DECRYPT.HTML
[2015-02-01 03:05][2015-02-01 03:05] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\Users\Jay\AppData\Roaming\SUPERAntiSpyware.com\SUPERAntiSpyware\Quarantine\HELP_DECRYPT.PNG
[2015-02-01 03:05][2015-02-01 03:05] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\AppData\Roaming\SUPERAntiSpyware.com\SUPERAntiSpyware\Quarantine\HELP_DECRYPT.TXT
[2015-02-01 03:05][2015-02-01 03:05] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\Users\Jay\AppData\Roaming\SUPERAntiSpyware.com\SUPERAntiSpyware\Quarantine\HELP_DECRYPT.URL
[2015-02-01 03:05][2015-02-01 03:05] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\Users\Jay\AppData\Roaming\Qualcomm\HELP_DECRYPT.HTML
[2015-02-01 03:05][2015-02-01 03:05] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\Users\Jay\AppData\Roaming\Qualcomm\HELP_DECRYPT.PNG
[2015-02-01 03:05][2015-02-01 03:05] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\AppData\Roaming\Qualcomm\HELP_DECRYPT.TXT
[2015-02-01 03:05][2015-02-01 03:05] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\Users\Jay\AppData\Roaming\Qualcomm\HELP_DECRYPT.URL
[2015-02-01 03:05][2015-02-01 03:05] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\Users\Jay\AppData\Roaming\Qualcomm\Eudora\HELP_DECRYPT.HTML
[2015-02-01 03:05][2015-02-01 03:05] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\Users\Jay\AppData\Roaming\Qualcomm\Eudora\HELP_DECRYPT.PNG
[2015-02-01 03:05][2015-02-01 03:05] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\AppData\Roaming\Qualcomm\Eudora\HELP_DECRYPT.TXT
[2015-02-01 03:05][2015-02-01 03:05] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\Users\Jay\AppData\Roaming\Qualcomm\Eudora\HELP_DECRYPT.URL
[2015-02-01 03:05][2015-02-01 03:05] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\Users\Jay\AppData\Roaming\Qualcomm\Eudora\Embedded\Decrypt-All-Files-jytxdub.bmp
[2015-01-28 23:44][2015-01-28 23:44] 3932214 ____A () 67F7510CCC82753E3BD6793D674EE015
 
C:\Users\Jay\AppData\Roaming\Qualcomm\Eudora\Embedded\Decrypt-All-Files-jytxdub.txt
[2015-01-28 23:44][2015-01-28 23:44] 0001552 ____A () 6B27F45C801C3A345F83D82D747B738B
 
C:\Users\Jay\AppData\Roaming\Qualcomm\Eudora\Embedded\HELP_DECRYPT.HTML
[2015-02-01 03:05][2015-02-01 03:05] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\Users\Jay\AppData\Roaming\Qualcomm\Eudora\Embedded\HELP_DECRYPT.PNG
[2015-02-01 03:05][2015-02-01 03:05] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\AppData\Roaming\Qualcomm\Eudora\Embedded\HELP_DECRYPT.TXT
[2015-02-01 03:05][2015-02-01 03:05] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\Users\Jay\AppData\Roaming\Qualcomm\Eudora\Embedded\HELP_DECRYPT.URL
[2015-02-01 03:05][2015-02-01 03:05] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\Users\Jay\AppData\Roaming\Qualcomm\Eudora\attach\Decrypt-All-Files-jytxdub.bmp
[2015-01-28 23:44][2015-01-30 10:03] 3932214 ____A () 8ED6DC98FFC77025AE380C903A27CE9A
 
C:\Users\Jay\AppData\Roaming\Qualcomm\Eudora\attach\Decrypt-All-Files-jytxdub.txt
[2015-01-28 23:44][2015-01-30 10:03] 0001552 ____A () DD53915504CDFF04AA7A505A9F47BF57
 
C:\Users\Jay\AppData\Roaming\Qualcomm\Eudora\attach\HELP_DECRYPT.HTML
[2015-01-28 21:13][2015-02-01 03:04] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\Users\Jay\AppData\Roaming\Qualcomm\Eudora\attach\HELP_DECRYPT.PNG
[2015-01-28 21:13][2015-02-01 03:04] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\Users\Jay\AppData\Roaming\Qualcomm\Eudora\attach\HELP_DECRYPT.TXT
[2015-02-01 03:04][2015-02-01 03:04] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\Users\Jay\AppData\Roaming\Qualcomm\Eudora\attach\HELP_DECRYPT.TXT.jytxdub
[2014-09-17 15:46][2015-01-28 21:13] 0001376 ____A () B7F55115849A212B8C7191ABAE01964C
 
C:\Users\Jay\AppData\Roaming\Qualcomm\Eudora\attach\HELP_DECRYPT.URL
[2015-01-28 21:13][2015-02-01 03:04] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\Users\Jay\AppData\Roaming\Mozilla\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Roaming\Mozilla\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Roaming\Mozilla\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () F5A80E885F08E778FB93908DB09DB00F
 
C:\Users\Jay\AppData\Roaming\Mozilla\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () A3DA0AB43A200DE8CFE148C9F3710099
 
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 11CF9C8172316003F920E7F9F35E3B96
 
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () B762EC581EF4D0758E0BE2DE94968057
 
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\storage\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\storage\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\storage\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () F2EABE2C6B993594FC7F267073734ADA
 
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\storage\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\storage\persistent\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\storage\persistent\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\storage\persistent\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () E82FEF75161BB16093A6ACAD9E9DD3AB
 
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\storage\persistent\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\storage\persistent\moz-safe-about+home\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\storage\persistent\moz-safe-about+home\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\storage\persistent\moz-safe-about+home\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () E2D4C074F0ACB6EFDA85FDEABB78D4CF
 
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\storage\persistent\moz-safe-about+home\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\storage\persistent\moz-safe-about+home\idb\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\storage\persistent\moz-safe-about+home\idb\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\storage\persistent\moz-safe-about+home\idb\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () D60D90C73ED570BC0F3A6E25BB0107B9
 
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\storage\persistent\moz-safe-about+home\idb\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\storage\persistent\chrome\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\storage\persistent\chrome\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\storage\persistent\chrome\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 030BDD8E03428C2962812069C336B4DF
 
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\storage\persistent\chrome\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\storage\persistent\chrome\idb\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\storage\persistent\chrome\idb\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\storage\persistent\chrome\idb\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () C227D5144AF2C4F1449AE6FFA209880C
 
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\storage\persistent\chrome\idb\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\sessionstore-backups\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\sessionstore-backups\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\sessionstore-backups\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () BE4FC0AF73716E1BE9A64448CCF3255D
 
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Profiles\k1dnlkd3.default\sessionstore-backups\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Crash Reports\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Crash Reports\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Crash Reports\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 9476F5FC4CD995FFF21B296AF6A3E5CC
 
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Crash Reports\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Crash Reports\submitted\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Crash Reports\submitted\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Crash Reports\submitted\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () DD350019AF3776ACD14D611E670BB3BE
 
C:\Users\Jay\AppData\Roaming\Mozilla\Firefox\Crash Reports\submitted\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Roaming\Microsoft\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Roaming\Microsoft\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Roaming\Microsoft\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () AFE58F0AE6BCE55F63F143390DC8635D
 
C:\Users\Jay\AppData\Roaming\Microsoft\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Roaming\Microsoft\{344A1750037086D52DA8E71AB15C0BEE}\cookie.ie\Low\Decrypt-All-Files-jytxdub.bmp
[2015-01-28 23:44][2015-01-28 23:44] 3932214 ____A () 7F2B1F59CA0CB2E3C1EB63A1CF856049
 
C:\Users\Jay\AppData\Roaming\Microsoft\{344A1750037086D52DA8E71AB15C0BEE}\cookie.ie\Low\Decrypt-All-Files-jytxdub.txt
[2015-01-28 23:44][2015-01-28 23:44] 0001266 ____A () 66080506920C432EC8DC9A4E3D9755DF
 
C:\Users\Jay\AppData\Roaming\Microsoft\Windows\Recent\HELP_DECRYPT.lnk
[2015-02-01 20:56][2015-02-01 20:56] 0000534 ____A () 67B74C05DC43116A77CB2B140974595F
 
C:\Users\Jay\AppData\Roaming\Microsoft\Templates\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Roaming\Microsoft\Templates\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Roaming\Microsoft\Templates\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 225CAE6E283DD8213E9357F28F6088D0
 
C:\Users\Jay\AppData\Roaming\Microsoft\Templates\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Roaming\Microsoft\Outlook\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Roaming\Microsoft\Outlook\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Roaming\Microsoft\Outlook\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 6C7F86D95FA48B285395D72EB220AB1F
 
C:\Users\Jay\AppData\Roaming\Microsoft\Outlook\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Roaming\Microsoft\Excel\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Roaming\Microsoft\Excel\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Roaming\Microsoft\Excel\HELP_DECRYPT.TXT.jytxdub
[2011-05-11 07:25][2015-01-23 14:13] 0001392 ____A () E37B9C0CD07406B64E486C81162AF384
 
C:\Users\Jay\AppData\Roaming\Microsoft\Excel\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Roaming\Microsoft\Document Building Blocks\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Roaming\Microsoft\Document Building Blocks\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Roaming\Microsoft\Document Building Blocks\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 63A9945F304F939F843BF6AB5B566237
 
C:\Users\Jay\AppData\Roaming\Microsoft\Document Building Blocks\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Roaming\Microsoft\Document Building Blocks\1033\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Roaming\Microsoft\Document Building Blocks\1033\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Roaming\Microsoft\Document Building Blocks\1033\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 821E469D40115472A0B8372690A5CFB3
 
C:\Users\Jay\AppData\Roaming\Microsoft\Document Building Blocks\1033\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Roaming\MapInfo\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Roaming\MapInfo\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Roaming\MapInfo\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 6903524589B1BFEDE534DD504D9B4584
 
C:\Users\Jay\AppData\Roaming\MapInfo\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Roaming\MapInfo\MapInfo\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Roaming\MapInfo\MapInfo\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Roaming\MapInfo\MapInfo\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 2F1CF4938DF6257EC4D685F16E838D75
 
C:\Users\Jay\AppData\Roaming\MapInfo\MapInfo\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Roaming\MapInfo\MapInfo\Professional\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Roaming\MapInfo\MapInfo\Professional\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Roaming\MapInfo\MapInfo\Professional\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 58D2276536691987AF6BDFA60D154758
 
C:\Users\Jay\AppData\Roaming\MapInfo\MapInfo\Professional\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Roaming\MapInfo\MapInfo\Professional\1150\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Roaming\MapInfo\MapInfo\Professional\1150\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Roaming\MapInfo\MapInfo\Professional\1150\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 9B210F1813C984924B788B06EB74ED79
 
C:\Users\Jay\AppData\Roaming\MapInfo\MapInfo\Professional\1150\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Roaming\MapInfo\MapInfo\Professional\1150\ThmTmplt\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Roaming\MapInfo\MapInfo\Professional\1150\ThmTmplt\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Roaming\MapInfo\MapInfo\Professional\1150\ThmTmplt\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 0FB4072816A6FDEB55BA3B6952ECB495
 
C:\Users\Jay\AppData\Roaming\MapInfo\MapInfo\Professional\1150\ThmTmplt\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Roaming\Autodesk\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Roaming\Autodesk\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Roaming\Autodesk\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 9EE7762879AB9BF50FB134A0A0F711C3
 
C:\Users\Jay\AppData\Roaming\Autodesk\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Roaming\Autodesk\AutoCAD Map 3D 2010\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Roaming\Autodesk\AutoCAD Map 3D 2010\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Roaming\Autodesk\AutoCAD Map 3D 2010\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 7CB677DF69F489CF7ED94E9C947AE2ED
 
C:\Users\Jay\AppData\Roaming\Autodesk\AutoCAD Map 3D 2010\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Roaming\Autodesk\AutoCAD Map 3D 2010\R18.0\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Roaming\Autodesk\AutoCAD Map 3D 2010\R18.0\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Roaming\Autodesk\AutoCAD Map 3D 2010\R18.0\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 3FB7E3097EB5F944D8885838BF16AC90
 
C:\Users\Jay\AppData\Roaming\Autodesk\AutoCAD Map 3D 2010\R18.0\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Roaming\Autodesk\AutoCAD Map 3D 2010\R18.0\enu\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Roaming\Autodesk\AutoCAD Map 3D 2010\R18.0\enu\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Roaming\Autodesk\AutoCAD Map 3D 2010\R18.0\enu\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () DDFD58B8B2DDCA5CC27E96218C0FAB98
 
C:\Users\Jay\AppData\Roaming\Autodesk\AutoCAD Map 3D 2010\R18.0\enu\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Roaming\Autodesk\AutoCAD Map 3D 2010\R18.0\enu\Support\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Roaming\Autodesk\AutoCAD Map 3D 2010\R18.0\enu\Support\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Roaming\Autodesk\AutoCAD Map 3D 2010\R18.0\enu\Support\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 2929DA4096EAF304DC4EDFEBA02913D5
 
C:\Users\Jay\AppData\Roaming\Autodesk\AutoCAD Map 3D 2010\R18.0\enu\Support\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Roaming\Adobe\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Roaming\Adobe\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Roaming\Adobe\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 961827A971C4C8CA52C50C23F6F2A8D3
 
C:\Users\Jay\AppData\Roaming\Adobe\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Roaming\Adobe\Flash Player\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Roaming\Adobe\Flash Player\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Roaming\Adobe\Flash Player\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 255C012717696342CBAE4091049BFD70
 
C:\Users\Jay\AppData\Roaming\Adobe\Flash Player\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Roaming\Adobe\Flash Player\AssetCache\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Roaming\Adobe\Flash Player\AssetCache\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Roaming\Adobe\Flash Player\AssetCache\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () FB1F5EF188763F97383B3B149A527B80
 
C:\Users\Jay\AppData\Roaming\Adobe\Flash Player\AssetCache\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Roaming\Adobe\Flash Player\AssetCache\UUTT3RFK\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Roaming\Adobe\Flash Player\AssetCache\UUTT3RFK\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Roaming\Adobe\Flash Player\AssetCache\UUTT3RFK\HELP_DECRYPT.TXT.jytxdub
[2012-10-15 11:48][2015-01-23 14:13] 0001392 ____A () AFA3608D5520931925AA9D56D2248514
 
C:\Users\Jay\AppData\Roaming\Adobe\Flash Player\AssetCache\UUTT3RFK\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\LocalLow\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\LocalLow\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\LocalLow\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 2A2837812734E9D2ED323FAFE3445D7F
 
C:\Users\Jay\AppData\LocalLow\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\LocalLow\Sun\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\LocalLow\Sun\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\LocalLow\Sun\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () BBEEF35B3C4E868DA84640A1676D67B6
 
C:\Users\Jay\AppData\LocalLow\Sun\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\LocalLow\Sun\Java\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\LocalLow\Sun\Java\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\LocalLow\Sun\Java\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () FCA28790BD5DF68216F0A4EFA1507D72
 
C:\Users\Jay\AppData\LocalLow\Sun\Java\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () F61FF6D0A623FC3E0B8824AAB0DB5F5D
 
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 7CEA4E4ECC91D15BCC37A69BB58F3959
 
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () D29E8A55D9C5165BE019932D243A3840
 
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\42\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\42\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\42\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 9E16AA3EB4FB1F365D6CBE560B9C87E6
 
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\42\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\4\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\4\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\4\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 1F49ECF4B8AAD9F4EDC152E332C63D46
 
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\4\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\32\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\32\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\32\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () AA3AA7220A64BC186829F26B907591E4
 
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\32\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\3\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\3\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\3\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () F5F1EF16F645FA2DCC287ACEC2C042C3
 
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\3\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\26\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\26\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\26\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () E288E82C3A8A383F9E8222B0545BEDF6
 
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\26\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\11\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\11\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\11\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () B2CB2ED4479E04C0D804F10DA20BDCCF
 
C:\Users\Jay\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\11\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\LocalLow\Microsoft\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\LocalLow\Microsoft\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\LocalLow\Microsoft\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 8DA628C19025B41B0E42E57AF39E7C6E
 
C:\Users\Jay\AppData\LocalLow\Microsoft\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\LocalLow\Microsoft\MuCatalog\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\LocalLow\Microsoft\MuCatalog\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\LocalLow\Microsoft\MuCatalog\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 9E432728596D96A0A06F22A55492B328
 
C:\Users\Jay\AppData\LocalLow\Microsoft\MuCatalog\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\LocalLow\Google\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\LocalLow\Google\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\LocalLow\Google\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () BEE108AA5A555E2BD1F0800CF9EC4DCE
 
C:\Users\Jay\AppData\LocalLow\Google\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\LocalLow\Google\GoogleEarth\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\LocalLow\Google\GoogleEarth\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\LocalLow\Google\GoogleEarth\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 4F57BA97E762B101D075248D31159E75
 
C:\Users\Jay\AppData\LocalLow\Google\GoogleEarth\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\LocalLow\Google\GoogleEarth\unified_cache_leveldb_leveldb2\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\LocalLow\Google\GoogleEarth\unified_cache_leveldb_leveldb2\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\LocalLow\Google\GoogleEarth\unified_cache_leveldb_leveldb2\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 790D3441E3C9E07F403209AFF77DE4F9
 
C:\Users\Jay\AppData\LocalLow\Google\GoogleEarth\unified_cache_leveldb_leveldb2\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\LocalLow\Company\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\LocalLow\Company\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\LocalLow\Company\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () DD62A7D2854A9F810E840FEBBF631448
 
C:\Users\Jay\AppData\LocalLow\Company\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\LocalLow\Company\Product\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\LocalLow\Company\Product\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\LocalLow\Company\Product\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () C188AA086D1F3C34474E8B9E4FB2BCE8
 
C:\Users\Jay\AppData\LocalLow\Company\Product\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\LocalLow\Company\Product\1.0\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\LocalLow\Company\Product\1.0\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\LocalLow\Company\Product\1.0\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 75EA8FDFD82AA63B816FA67E048CA6F8
 
C:\Users\Jay\AppData\LocalLow\Company\Product\1.0\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\LocalLow\Adobe\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\LocalLow\Adobe\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\LocalLow\Adobe\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () B563C101E70309B76909D4FECFBEE909
 
C:\Users\Jay\AppData\LocalLow\Adobe\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\LocalLow\Adobe\Acrobat\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\LocalLow\Adobe\Acrobat\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\LocalLow\Adobe\Acrobat\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 833878D0F883243A235497FB7480E383
 
C:\Users\Jay\AppData\LocalLow\Adobe\Acrobat\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\LocalLow\Adobe\Acrobat\9.0\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\LocalLow\Adobe\Acrobat\9.0\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\LocalLow\Adobe\Acrobat\9.0\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () A9F4A30EAE50CE8989A7743EBCE3C679
 
C:\Users\Jay\AppData\LocalLow\Adobe\Acrobat\9.0\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\LocalLow\Adobe\Acrobat\9.0\Search\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\LocalLow\Adobe\Acrobat\9.0\Search\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\LocalLow\Adobe\Acrobat\9.0\Search\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 5983A528C06216787845CD40A1E075D4
 
C:\Users\Jay\AppData\LocalLow\Adobe\Acrobat\9.0\Search\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Local\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Local\Symantec\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Local\Symantec\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Local\Symantec\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 8F2256B4F327D219CF12B7E203224A63
 
C:\Users\Jay\AppData\Local\Symantec\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Local\Mozilla\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Local\Mozilla\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Local\Mozilla\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () C5E55F27B5D44C3DF328679C4D47FAD5
 
C:\Users\Jay\AppData\Local\Mozilla\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Local\Mozilla\Firefox\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Local\Mozilla\Firefox\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Local\Mozilla\Firefox\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 33F23A8F569F5D6BB1AF47285AB0EBD0
 
C:\Users\Jay\AppData\Local\Mozilla\Firefox\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Local\Mozilla\Firefox\Profiles\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Local\Mozilla\Firefox\Profiles\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Local\Mozilla\Firefox\Profiles\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 1618D7DBF70286AE2917150BE54CCEAE
 
C:\Users\Jay\AppData\Local\Mozilla\Firefox\Profiles\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Local\Mozilla\Firefox\Profiles\k1dnlkd3.default\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Local\Mozilla\Firefox\Profiles\k1dnlkd3.default\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Local\Mozilla\Firefox\Profiles\k1dnlkd3.default\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () AEC50843BD77173C35C7E2267DD592B8
 
C:\Users\Jay\AppData\Local\Mozilla\Firefox\Profiles\k1dnlkd3.default\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Local\Mozilla\Firefox\Profiles\k1dnlkd3.default\OfflineCache\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Local\Mozilla\Firefox\Profiles\k1dnlkd3.default\OfflineCache\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Local\Mozilla\Firefox\Profiles\k1dnlkd3.default\OfflineCache\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () B4ED42DE8780C2E3307E33C56CE445D1
 
C:\Users\Jay\AppData\Local\Mozilla\Firefox\Profiles\k1dnlkd3.default\OfflineCache\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Local\Microsoft\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Local\Microsoft\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Local\Microsoft\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () DC461AF2AF9333DFBD525272DE7A49A8
 
C:\Users\Jay\AppData\Local\Microsoft\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Local\Microsoft\Windows Media\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Local\Microsoft\Windows Media\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Local\Microsoft\Windows Media\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 82C27DDE67C15CA20B3E7C99C05222B1
 
C:\Users\Jay\AppData\Local\Microsoft\Windows Media\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Local\Microsoft\Windows Media\12.0\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Local\Microsoft\Windows Media\12.0\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Local\Microsoft\Windows Media\12.0\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 7BC6472973974EB8F84672D9655F810C
 
C:\Users\Jay\AppData\Local\Microsoft\Windows Media\12.0\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Local\Microsoft\Windows Mail\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Local\Microsoft\Windows Mail\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Local\Microsoft\Windows Mail\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () F4EAD4F3427351A65B30B91FB9FD3449
 
C:\Users\Jay\AppData\Local\Microsoft\Windows Mail\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Local\Microsoft\Windows Mail\Stationery\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Local\Microsoft\Windows Mail\Stationery\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Local\Microsoft\Windows Mail\Stationery\HELP_DECRYPT.TXT.jytxdub
[2010-09-23 07:29][2015-01-23 14:13] 0001392 ____A () 744AB4D232D7185663D3B079E0F9FA95
 
C:\Users\Jay\AppData\Local\Microsoft\Windows Mail\Stationery\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Local\Microsoft\Windows Mail\Local Folders\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Local\Microsoft\Windows Mail\Local Folders\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Local\Microsoft\Windows Mail\Local Folders\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 8CDC5FD825D842B8982C765C21EBE08E
 
C:\Users\Jay\AppData\Local\Microsoft\Windows Mail\Local Folders\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Local\Microsoft\Windows Mail\Local Folders\Inbox\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Local\Microsoft\Windows Mail\Local Folders\Inbox\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Local\Microsoft\Windows Mail\Local Folders\Inbox\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 7AC65629D71D5C127FCAAC20E2C10572
 
C:\Users\Jay\AppData\Local\Microsoft\Windows Mail\Local Folders\Inbox\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Local\Microsoft\Windows Mail\Backup\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Local\Microsoft\Windows Mail\Backup\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Local\Microsoft\Windows Mail\Backup\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () C90B265CA5246B0227AB60C4C0C6F928
 
C:\Users\Jay\AppData\Local\Microsoft\Windows Mail\Backup\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Local\Microsoft\Windows Mail\Backup\new\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Local\Microsoft\Windows Mail\Backup\new\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Local\Microsoft\Windows Mail\Backup\new\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 82380CAA6C1CBB0D8A1A9BD7253FD9D2
 
C:\Users\Jay\AppData\Local\Microsoft\Windows Mail\Backup\new\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Local\Microsoft\Outlook\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Local\Microsoft\Outlook\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Local\Microsoft\Outlook\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 9EA7A68E139A07D7E8182FBAF89AAD48
 
C:\Users\Jay\AppData\Local\Microsoft\Outlook\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Local\Microsoft\Media Player\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Local\Microsoft\Media Player\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Local\Microsoft\Media Player\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 8DA55B893166D8F31E226E1538A31025
 
C:\Users\Jay\AppData\Local\Microsoft\Media Player\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Local\Microsoft\Media Player\Art Cache\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Local\Microsoft\Media Player\Art Cache\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Local\Microsoft\Media Player\Art Cache\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 6097774EB7760F5CFA61F4530B638A1F
 
C:\Users\Jay\AppData\Local\Microsoft\Media Player\Art Cache\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Local\Microsoft\Media Player\Art Cache\LocalMLS\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Local\Microsoft\Media Player\Art Cache\LocalMLS\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Local\Microsoft\Media Player\Art Cache\LocalMLS\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 6481846013242CAA8E0C5253C1156D3A
 
C:\Users\Jay\AppData\Local\Microsoft\Media Player\Art Cache\LocalMLS\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Local\Microsoft\Internet Explorer\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Local\Microsoft\Internet Explorer\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Local\Microsoft\Internet Explorer\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 626544344CC6FA9D712EB386DCF14272
 
C:\Users\Jay\AppData\Local\Microsoft\Internet Explorer\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Local\Microsoft\ehome\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Local\Microsoft\ehome\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Local\Microsoft\ehome\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 36CF344A713E07FF6CD2BA29E57ED21E
 
C:\Users\Jay\AppData\Local\Microsoft\ehome\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Local\Google\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Local\Google\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Local\Google\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 6B54A280D86308AA0BCD9B6E90BACB61
 
C:\Users\Jay\AppData\Local\Google\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Local\Google\Chrome\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Local\Google\Chrome\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Local\Google\Chrome\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () F06CE39FDDF85207D11C9C0F6ED50CD1
 
C:\Users\Jay\AppData\Local\Google\Chrome\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () B29B835E0E043D94B006427955A243AF
 
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 07AAD8EE3293C9061B27F94E4A102D08
 
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\Storage\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\Storage\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\Storage\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () BCD6F8C4D0D4A86CC231A72B8765F730
 
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\Storage\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () EDAAC31E2F12826026CC31DF9CAB37C1
 
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 1B16386098E1BB8E6A2055947B7FDE8A
 
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\def\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\def\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\def\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 0492B315E84EB55504B83A3705DFADB9
 
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\def\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\def\databases\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\def\databases\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\def\databases\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 20309E882FFA004251AE53569DDC901B
 
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\def\databases\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\databases\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\databases\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\databases\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 83453F867B3DE9A1DBB5E8D39FFE75A8
 
C:\Users\Jay\AppData\Local\Google\Chrome\User Data\Default\databases\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Local\Autodesk\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Local\Autodesk\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Local\Autodesk\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 049DB76F42B914239A488D2B6870EBA1
 
C:\Users\Jay\AppData\Local\Autodesk\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Local\Autodesk\AutoCAD Map 3D 2010\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Local\Autodesk\AutoCAD Map 3D 2010\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Local\Autodesk\AutoCAD Map 3D 2010\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 1ABC97D541D6761B04731DEC61DC3E4F
 
C:\Users\Jay\AppData\Local\Autodesk\AutoCAD Map 3D 2010\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Local\Autodesk\AutoCAD Map 3D 2010\R18.0\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Local\Autodesk\AutoCAD Map 3D 2010\R18.0\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Local\Autodesk\AutoCAD Map 3D 2010\R18.0\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 0CAE9EB8306E33754EE61C001959C0F0
 
C:\Users\Jay\AppData\Local\Autodesk\AutoCAD Map 3D 2010\R18.0\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Local\Autodesk\AutoCAD Map 3D 2010\R18.0\enu\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Local\Autodesk\AutoCAD Map 3D 2010\R18.0\enu\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Local\Autodesk\AutoCAD Map 3D 2010\R18.0\enu\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () DB0BBA9BB441AB44255FABAC793E3051
 
C:\Users\Jay\AppData\Local\Autodesk\AutoCAD Map 3D 2010\R18.0\enu\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\Jay\AppData\Local\Autodesk\AutoCAD Map 3D 2010\R18.0\enu\Template\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\Jay\AppData\Local\Autodesk\AutoCAD Map 3D 2010\R18.0\enu\Template\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\Jay\AppData\Local\Autodesk\AutoCAD Map 3D 2010\R18.0\enu\Template\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () E89454C96D44889351BB16912B07A456
 
C:\Users\Jay\AppData\Local\Autodesk\AutoCAD Map 3D 2010\R18.0\enu\Template\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\All Users\SUPERAntiSpyware.com\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\All Users\SUPERAntiSpyware.com\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\All Users\SUPERAntiSpyware.com\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 79EA6C0EA912871FD0A0BF645A3BC62C
 
C:\Users\All Users\SUPERAntiSpyware.com\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\All Users\SUPERAntiSpyware.com\SUPERAntiSpyware\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\All Users\SUPERAntiSpyware.com\SUPERAntiSpyware\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\All Users\SUPERAntiSpyware.com\SUPERAntiSpyware\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () EA691D0B8DCEC662C45AE6DB85B87843
 
C:\Users\All Users\SUPERAntiSpyware.com\SUPERAntiSpyware\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\All Users\Spybot - Search & Destroy\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\All Users\Spybot - Search & Destroy\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\All Users\Spybot - Search & Destroy\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 5F420DD49BA292CE070653BB30281C00
 
C:\Users\All Users\Spybot - Search & Destroy\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\All Users\Spybot - Search & Destroy\Quarantine\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\All Users\Spybot - Search & Destroy\Quarantine\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\All Users\Spybot - Search & Destroy\Quarantine\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 2884E442A1F50EAC833165BB6D837057
 
C:\Users\All Users\Spybot - Search & Destroy\Quarantine\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\All Users\Spybot - Search & Destroy\Logs\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\All Users\Spybot - Search & Destroy\Logs\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\All Users\Spybot - Search & Destroy\Logs\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 21FB125A866727C2427A22711D52A8E8
 
C:\Users\All Users\Spybot - Search & Destroy\Logs\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\Users\All Users\Norton\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\Users\All Users\Norton\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\Users\All Users\Norton\HELP_DECRYPT.TXT.jytxdub
[2011-01-12 09:10][2015-01-23 14:13] 0001392 ____A () 4B560FBA5194C0EA7D167527DCEADEC7
 
C:\Users\All Users\Norton\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\ProgramData\SUPERAntiSpyware.com\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\ProgramData\SUPERAntiSpyware.com\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\ProgramData\SUPERAntiSpyware.com\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 79EA6C0EA912871FD0A0BF645A3BC62C
 
C:\ProgramData\SUPERAntiSpyware.com\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\ProgramData\SUPERAntiSpyware.com\SUPERAntiSpyware\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\ProgramData\SUPERAntiSpyware.com\SUPERAntiSpyware\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\ProgramData\SUPERAntiSpyware.com\SUPERAntiSpyware\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () EA691D0B8DCEC662C45AE6DB85B87843
 
C:\ProgramData\SUPERAntiSpyware.com\SUPERAntiSpyware\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\ProgramData\Spybot - Search & Destroy\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\ProgramData\Spybot - Search & Destroy\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\ProgramData\Spybot - Search & Destroy\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 5F420DD49BA292CE070653BB30281C00
 
C:\ProgramData\Spybot - Search & Destroy\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\ProgramData\Spybot - Search & Destroy\Quarantine\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\ProgramData\Spybot - Search & Destroy\Quarantine\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\ProgramData\Spybot - Search & Destroy\Quarantine\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 2884E442A1F50EAC833165BB6D837057
 
C:\ProgramData\Spybot - Search & Destroy\Quarantine\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\ProgramData\Spybot - Search & Destroy\Logs\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\ProgramData\Spybot - Search & Destroy\Logs\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\ProgramData\Spybot - Search & Destroy\Logs\HELP_DECRYPT.TXT.jytxdub
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 21FB125A866727C2427A22711D52A8E8
 
C:\ProgramData\Spybot - Search & Destroy\Logs\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\ProgramData\Norton\HELP_DECRYPT.HTML
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\ProgramData\Norton\HELP_DECRYPT.PNG
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\ProgramData\Norton\HELP_DECRYPT.TXT.jytxdub
[2011-01-12 09:10][2015-01-23 14:13] 0001392 ____A () 4B560FBA5194C0EA7D167527DCEADEC7
 
C:\ProgramData\Norton\HELP_DECRYPT.URL
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\FRST\Quarantine\C\Users\Jay\HELP_DECRYPT.HTML.xBAD
[2015-02-01 03:06][2015-02-01 03:06] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\FRST\Quarantine\C\Users\Jay\HELP_DECRYPT.TXT.xBAD
[2015-02-01 03:06][2015-02-01 03:06] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\FRST\Quarantine\C\Users\Jay\HELP_DECRYPT.URL.xBAD
[2015-02-01 03:06][2015-02-01 03:06] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\FRST\Quarantine\C\Users\Jay\Downloads\HELP_DECRYPT.HTML.xBAD
[2015-02-01 03:06][2015-02-01 03:06] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\FRST\Quarantine\C\Users\Jay\Downloads\HELP_DECRYPT.TXT.xBAD
[2015-02-01 03:06][2015-02-01 03:06] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\FRST\Quarantine\C\Users\Jay\Downloads\HELP_DECRYPT.URL.xBAD
[2015-02-01 03:06][2015-02-01 03:06] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\FRST\Quarantine\C\Users\Jay\Documents\Decrypt-All-Files-jytxdub.bmp.xBAD
[2015-01-28 23:45][2015-01-28 23:45] 3932214 ____A () 2F78C1305E0B4FD7EAB6E728FA4F7934
 
C:\FRST\Quarantine\C\Users\Jay\Documents\Decrypt-All-Files-jytxdub.txt.xBAD
[2015-01-28 23:45][2015-01-28 23:45] 0001552 ____A () 793821B2283D9407920E78DFC92757B8
 
C:\FRST\Quarantine\C\Users\Jay\Documents\HELP_DECRYPT.HTML.xBAD
[2015-02-01 03:06][2015-02-01 03:06] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\FRST\Quarantine\C\Users\Jay\Documents\HELP_DECRYPT.TXT.xBAD
[2015-02-01 03:06][2015-02-01 03:06] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\FRST\Quarantine\C\Users\Jay\Documents\HELP_DECRYPT.URL.xBAD
[2015-02-01 03:06][2015-02-01 03:06] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\FRST\Quarantine\C\Users\Jay\Desktop\HELP_DECRYPT.HTML.xBAD
[2015-02-01 03:06][2015-02-01 03:06] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\FRST\Quarantine\C\Users\Jay\Desktop\HELP_DECRYPT.TXT.xBAD
[2015-02-01 03:06][2015-02-01 03:06] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\FRST\Quarantine\C\Users\Jay\Desktop\HELP_DECRYPT.URL.xBAD
[2015-02-01 03:06][2015-02-01 03:06] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\FRST\Quarantine\C\Users\Jay\AppData\HELP_DECRYPT.HTML.xBAD
[2015-02-01 03:05][2015-02-01 03:05] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\FRST\Quarantine\C\Users\Jay\AppData\HELP_DECRYPT.TXT.xBAD
[2015-02-01 03:05][2015-02-01 03:05] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\FRST\Quarantine\C\Users\Jay\AppData\HELP_DECRYPT.URL.xBAD
[2015-02-01 03:05][2015-02-01 03:05] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\FRST\Quarantine\C\Users\Jay\AppData\Roaming\HELP_DECRYPT.HTML.xBAD
[2015-02-01 03:05][2015-02-01 03:05] 0008554 ____A () C39F5EE2994F565BE840FBAEACDEFBFF
 
C:\FRST\Quarantine\C\Users\Jay\AppData\Roaming\HELP_DECRYPT.PNG.xBAD
[2015-02-01 03:05][2015-02-01 03:05] 0045593 ____A () D0B9CA8D9070708482C6584F631CA017
 
C:\FRST\Quarantine\C\Users\Jay\AppData\Roaming\HELP_DECRYPT.TXT.xBAD
[2015-02-01 03:05][2015-02-01 03:05] 0004220 ____A () E8BD6F3319105AD1A9E50432C49787B6
 
C:\FRST\Quarantine\C\Users\Jay\AppData\Roaming\HELP_DECRYPT.URL.xBAD
[2015-02-01 03:05][2015-02-01 03:05] 0000276 ____A () 4E86545C072E838BAC8C03E4FF5C9E80
 
C:\FRST\Quarantine\C\Users\Jay\AppData\Local\HELP_DECRYPT.HTML.xBAD
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\FRST\Quarantine\C\Users\Jay\AppData\Local\HELP_DECRYPT.TXT.jytxdub.xBAD
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 556937CFDADE79E0A91EDBA5D069EC1E
 
C:\FRST\Quarantine\C\Users\Jay\AppData\Local\HELP_DECRYPT.URL.xBAD
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
C:\FRST\Quarantine\C\ProgramData\HELP_DECRYPT.HTML.xBAD
[2015-01-23 14:13][2015-01-23 14:13] 0008542 ____A () DC432C99EC57DE7D92EC06BD36BCD674
 
C:\FRST\Quarantine\C\ProgramData\HELP_DECRYPT.PNG.xBAD
[2015-01-23 14:13][2015-01-23 14:13] 0045595 ____A () 86C5C056BA2D3F4BAF154682C9925B4C
 
C:\FRST\Quarantine\C\ProgramData\HELP_DECRYPT.TXT.jytxdub.xBAD
[2015-01-23 14:13][2015-01-23 14:13] 0001392 ____A () 81609226A0C2E4832AC79146252B85F0
 
C:\FRST\Quarantine\C\ProgramData\HELP_DECRYPT.URL.xBAD
[2015-01-23 14:13][2015-01-23 14:13] 0000272 ____A () 2B12E0B804499891BAAA72E0101AA977
 
=== End Of Search ===


#7 Oh My!

Oh My!

    Adware and Spyware and Malware.....


  • Malware Response Instructor
  • 36,392 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:California
  • Local time:03:33 PM

Posted 04 February 2015 - 04:06 PM

Thank you for the report.

Please resave the report as a Notepad document and save it as fixlist.txt. With that document on your Desktop launch FRST then click Fix. Copy and paste the fixlog.txt report that will appear on your screen after the program has completed the fix.
Gary
 
If I do not reply within 24 hours please send me a Personal Message.

"Lord, to whom would we go? You have the words that give eternal life. We believe, and we know you are the Holy One of God."

#8 wademon

wademon
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:04:33 PM

Posted 04 February 2015 - 09:36 PM

I must be missing something I get "Warning Looks like you don't know what to do. To prevent damage to the system the tool will exit."



#9 Oh My!

Oh My!

    Adware and Spyware and Malware.....


  • Malware Response Instructor
  • 36,392 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:California
  • Local time:03:33 PM

Posted 04 February 2015 - 10:07 PM

Open the Search.txt document. Click File, Save As... and save the document as fixlist.txt. The file must be saved on your desktop where FRST.exe is located. Launch FRST and click Fix.

 

Let me know if that worked.


Gary
 
If I do not reply within 24 hours please send me a Personal Message.

"Lord, to whom would we go? You have the words that give eternal life. We believe, and we know you are the Holy One of God."

#10 wademon

wademon
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:04:33 PM

Posted 04 February 2015 - 10:14 PM

So when I opend search on my desktop and click file then save as name it fixlist.txt and save to desktop where FRST is it says already exist do you want to replace it? I say yes then open FRST as admin then click fix I get say result "Warning Looks like you don't know what to do. To prevent damage to the system the tool will exit." I did try to rerun the search file *decrype* and search file just in case, and still same result??



#11 wademon

wademon
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:04:33 PM

Posted 04 February 2015 - 10:15 PM

Sorry *decrypt*



#12 Oh My!

Oh My!

    Adware and Spyware and Malware.....


  • Malware Response Instructor
  • 36,392 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:California
  • Local time:03:33 PM

Posted 04 February 2015 - 10:17 PM

Open the document and delete the first and last lines:

================== Search: "*decrypt*" ===================

=== End Of Search ===

Resave and attempt it again.

Edited by Oh My!, 04 February 2015 - 10:17 PM.

Gary
 
If I do not reply within 24 hours please send me a Personal Message.

"Lord, to whom would we go? You have the words that give eternal life. We believe, and we know you are the Holy One of God."

#13 wademon

wademon
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:04:33 PM

Posted 04 February 2015 - 10:51 PM

Gary that was it  :thumbup2:  But my post must be too large? As I can't seem to post results. I have tried 3 different times no and it only says saving post.

Thanks,

Wade



#14 Oh My!

Oh My!

    Adware and Spyware and Malware.....


  • Malware Response Instructor
  • 36,392 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:California
  • Local time:03:33 PM

Posted 04 February 2015 - 10:54 PM

Yeah, it is a very large file. Either zip the file and attach it, or zip and upload the file here.
Gary
 
If I do not reply within 24 hours please send me a Personal Message.

"Lord, to whom would we go? You have the words that give eternal life. We believe, and we know you are the Holy One of God."

#15 wademon

wademon
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:04:33 PM

Posted 04 February 2015 - 10:56 PM

Ok Here it is.






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users