Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Remove CryptoWall 3.0 Virus


  • This topic is locked This topic is locked
20 replies to this topic

#1 ysn_chy

ysn_chy

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:09:07 PM

Posted 05 February 2015 - 10:04 AM

Hello!

 

My PC is infected by a virus named CryptoWall 3.0.

This virus lunches its message files every time I start my PC or open my web browser.

It encrypts my local files and ask me to pay to decrypt them !!!

-In attachment you can see a picture of the message file I get.

I tryed to scan my computer with different Anti-Malware softwares, but ir didn't help to remove it.

Please help me to remove this virus from my PC without the need for formatting

 

Attached Files



BC AdBot (Login to Remove)

 


#2 fireman4it

fireman4it

    Bleepin' Fireman


  • Malware Response Team
  • 13,505 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Greenup, Ill USA
  • Local time:04:07 PM

Posted 05 February 2015 - 04:49 PM

For x32 (x86) bit systems download Farbar Recovery Scan Tool and save it to a flash drive.
For x64 bit systems download Farbar Recovery Scan Tool x64 and save it to a flash drive.

Plug the flashdrive into the infected PC.

Enter System Recovery Options.

To enter System Recovery Options from the Advanced Boot Options:

  • Restart the computer.
  • As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
  • Use the arrow keys to select the Repair your computer menu item.
  • Select US as the keyboard language settings, and then click Next.
  • Select the operating system you want to repair, and then click Next.
  • Select your user account an click Next.


To enter System Recovery Options by using Windows installation disc:
  • Insert the installation disc.
  • Restart your computer.
  • If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings.
  • Click Repair your computer.
  • Select US as the keyboard language settings, and then click Next.
  • Select the operating system you want to repair, and then click Next.
  • Select your user account and click Next.


On the System Recovery Options menu you will get the following options:Startup Repair
System Restore
Windows Complete PC Restore
Windows Memory Diagnostic Tool
Command Prompt
  • Select Command Prompt
  • In the command window type in notepad and press Enter.
  • The notepad opens. Under File menu select Open.
  • Select "Computer" and find your flash drive letter and close the notepad.
  • In the command window type e:\frst.exe (for x64 bit version type e:\frst64)  and press Enter
    Note: Replace letter e with the drive letter of your flash drive.
  • The tool will start to run.
  • When the tool opens click Yes to disclaimer.
  • Press Scan button.
  • It will make a log (FRST.txt) on the flash drive. Please copy and paste it to your reply.


 


" Extinguishing Malware from the world"

The Virus, Trojan, Spyware, and Malware Removal forum is very busy. If I'm helping you and I've not posted back within 24 hrs., send a PM with your topic link. Thank you.

ALL OTHER HELP REQUESTS VIA THE PM SYSTEM WILL BE IGNORED. The Forums are there for a reason!
Thanks-


  userbar_eis_500.gif

If I have helped you, consider making a donation to help me continue the fight against Malware! Just click btn_donate_LG.gif


#3 ysn_chy

ysn_chy
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:09:07 PM

Posted 06 February 2015 - 04:46 AM

Thank you FireMan4It for your assistance!

 

I couldn't lunch the command prompt from  "Repair your computer menu item" Because it doesn't show my Administrative account, instead it shows me a "User" account that I can't log into it using my own Password.

 

But I could run the command prompt from "Safe Mode with command prompt menu item "  ! So here is the the content of FRST.txt :

 

***************************************************************************************************************************************************

 

 

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 05-02-2015
Ran by User (administrator) on USER-PC on 06-02-2015 09:34:29
Running from f:\
Loaded Profiles: User (Available profiles: User)
Platform: Windows 7 Ultimate (X64) OS Language: English (United States)
Internet Explorer Version 8 (Default browser: Chrome)
Boot Mode: Safe Mode (minimal)
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(Microsoft Corporation) C:\Windows\System32\cmd.exe
 
 
==================== Registry (Whitelisted) ==================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-3253091791-2452062266-442295166-1000\...\Run: [GoogleChromeAutoLaunch_BCEA24321E5E4F1401136BBEDFB545FE] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [843592 2015-02-04] (Google Inc.)
HKU\S-1-5-21-3253091791-2452062266-442295166-1000\...\Run: [IDMan] => C:\Program Files (x86)\Internet Download Manager\IDMan.exe [3886672 2015-01-13] (Tonec Inc.)
HKU\S-1-5-21-3253091791-2452062266-442295166-1000\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-21-3253091791-2452062266-442295166-1000\...\Run: [DellSystemDetect] => C:\Users\User\AppData\Local\Apps\2.0\P7KCPDL6.08W\PCVT2PAM.XAE\dell..tion_e30b47f5d4a30e9e_0005.000d_4ab2a66cfade09be\DellSystemDetect.exe [276776 2014-12-30] (Dell)
Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HELP_DECRYPT.HTML ()
Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HELP_DECRYPT.PNG ()
Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HELP_DECRYPT.TXT ()
InternetURL: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HELP_DECRYPT.URL -> hxxp://paytoc4gtpn5czl2.torpaysolutions.com/1Q6mjop
ShellIconOverlayIdentifiers: [IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll (Tonec Inc.)
 
==================== Internet (Whitelisted) ====================
 
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 
HKU\S-1-5-21-3253091791-2452062266-442295166-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/en-sa/?ocid=iehp
BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll (Internet Download Manager, Tonec Inc.)
BHO-x32: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll (Internet Download Manager, Tonec Inc.)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 8.8.8.8 8.8.8.8
 
FireFox:
========
FF Plugin-x32: @asustor.com/ASTStream,version=1.0.0 -> C:\Program Files (x86)\ASUSTOR Surveillance Center Viewer\npASTStream.dll (ASUSTOR)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: ChromeWebPlugin -> C:\Program Files (x86)\WebControl\npGS_ChromePlugins.dll ( )
FF Plugin-x32: FireFoxWebPlugin -> C:\Program Files (x86)\WebControl\npGS_Plugins.dll ( )
FF HKU\S-1-5-21-3253091791-2452062266-442295166-1000\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\User\AppData\Roaming\IDM\idmmzcc5
FF Extension: IDM CC - C:\Users\User\AppData\Roaming\IDM\idmmzcc5 [2015-01-23]
 
Chrome: 
=======
CHR HomePage: Default -> hxxp://websearch.searchmania.info/?pid=377&r=2014/12/05&hid=14949644431051172708&lg=EN&cc=MA&unqvl=70
CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-01-05]
CHR Extension: (Google Docs) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-01-05]
CHR Extension: (Google Drive) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-01-05]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2015-01-06]
CHR Extension: (YouTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-01-05]
CHR Extension: (Adblock Plus) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-01-05]
CHR Extension: (Google Search) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-01-05]
CHR Extension: (Block site) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\eiimnmioipafcokbfikbljfdeojpcgbh [2015-02-05]
CHR Extension: (Google Sheets) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-01-05]
CHR Extension: (IDM Integration Module) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\jeaohhlajejodfjadcponpnjgkiikocn [2015-01-26]
CHR Extension: (Save to Pocket) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj [2015-01-15]
CHR Extension: (Google Wallet) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-01-05]
CHR Extension: (Gmail) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-01-05]
CHR HKLM\...\Chrome\Extension: [jeaohhlajejodfjadcponpnjgkiikocn] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2015-01-13]
CHR HKLM-x32\...\Chrome\Extension: [jeaohhlajejodfjadcponpnjgkiikocn] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2015-01-13]
 
==================== Services (Whitelisted) =================
 
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)
S2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5426448 2014-12-15] (TeamViewer GmbH)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)
 
==================== Drivers (Whitelisted) ====================
 
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2015-02-04] (Malwarebytes Corporation)
S2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.)
U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [37624 2015-02-04] ()
 
==================== NetSvcs (Whitelisted) ===================
 
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 
==================== One Month Created Files and Folders ========
 
(If an entry is included in the fixlist, the file\folder will be moved.)
 
2015-02-06 09:34 - 2015-02-06 09:34 - 00000000 ____D () C:\FRST
2015-02-05 17:12 - 2015-02-05 17:12 - 00100352 _____ () C:\Users\User\Documents\EMEA Weekly Report 2015.xls
2015-02-04 17:43 - 2015-02-04 18:16 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-02-04 17:43 - 2015-02-04 17:43 - 00001102 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-02-04 17:43 - 2015-02-04 17:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-02-04 17:43 - 2015-02-04 17:43 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-02-04 17:43 - 2015-02-04 17:43 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-02-04 17:43 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-02-04 17:43 - 2014-11-21 06:14 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-02-04 17:43 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-02-04 17:42 - 2015-02-04 17:42 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\User\Downloads\mbam-setup-2.0.4.1028.exe
2015-02-04 17:35 - 2015-02-04 17:35 - 18570328 _____ () C:\Users\User\Downloads\RogueKillerX64.exe
2015-02-04 17:35 - 2015-02-04 17:35 - 00037624 _____ () C:\Windows\system32\Drivers\TrueSight.sys
2015-02-04 17:35 - 2015-02-04 17:35 - 00000000 ____D () C:\ProgramData\RogueKiller
2015-02-04 09:17 - 2015-02-04 09:17 - 00000000 _____ () C:\autoexec.bat
2015-02-04 09:16 - 2015-02-04 09:16 - 00000000 ____D () C:\Program Files\Enigma Software Group
2015-02-03 09:05 - 2015-02-03 09:05 - 00000000 ____D () C:\Users\User\AppData\Roaming\Macromedia
2015-02-02 14:44 - 2015-02-02 14:44 - 00008658 _____ () C:\Users\User\HELP_DECRYPT.HTML
2015-02-02 14:44 - 2015-02-02 14:44 - 00008658 _____ () C:\Users\User\Desktop\HELP_DECRYPT.HTML
2015-02-02 14:44 - 2015-02-02 14:44 - 00008658 _____ () C:\Users\HELP_DECRYPT.HTML
2015-02-02 14:44 - 2015-02-02 14:44 - 00008658 _____ () C:\HELP_DECRYPT.HTML
2015-02-02 14:44 - 2015-02-02 14:44 - 00004272 _____ () C:\Users\User\HELP_DECRYPT.TXT
2015-02-02 14:44 - 2015-02-02 14:44 - 00004272 _____ () C:\Users\HELP_DECRYPT.TXT
2015-02-02 14:44 - 2015-02-02 14:44 - 00004272 _____ () C:\HELP_DECRYPT.TXT
2015-02-02 14:44 - 2015-02-02 14:44 - 00000304 _____ () C:\Users\User\HELP_DECRYPT.URL
2015-02-02 14:44 - 2015-02-02 14:44 - 00000304 _____ () C:\Users\User\Desktop\HELP_DECRYPT.URL
2015-02-02 14:44 - 2015-02-02 14:44 - 00000304 _____ () C:\Users\HELP_DECRYPT.URL
2015-02-02 14:44 - 2015-02-02 14:44 - 00000304 _____ () C:\HELP_DECRYPT.URL
2015-02-02 14:30 - 2015-02-04 09:13 - 00000000 ____D () C:\Users\User\AppData\Roaming\Local Store
2015-02-02 14:27 - 2015-02-02 14:27 - 00008658 _____ () C:\Users\User\AppData\Roaming\HELP_DECRYPT.HTML
2015-02-02 14:27 - 2015-02-02 14:27 - 00008658 _____ () C:\Users\User\AppData\Local\HELP_DECRYPT.HTML
2015-02-02 14:27 - 2015-02-02 14:27 - 00008658 _____ () C:\Users\User\AppData\HELP_DECRYPT.HTML
2015-02-02 14:27 - 2015-02-02 14:27 - 00008658 _____ () C:\ProgramData\HELP_DECRYPT.HTML
2015-02-02 14:27 - 2015-02-02 14:27 - 00004272 _____ () C:\Users\User\AppData\Roaming\HELP_DECRYPT.TXT
2015-02-02 14:27 - 2015-02-02 14:27 - 00004272 _____ () C:\Users\User\AppData\Local\HELP_DECRYPT.TXT
2015-02-02 14:27 - 2015-02-02 14:27 - 00004272 _____ () C:\Users\User\AppData\HELP_DECRYPT.TXT
2015-02-02 14:27 - 2015-02-02 14:27 - 00004272 _____ () C:\ProgramData\HELP_DECRYPT.TXT
2015-02-02 14:27 - 2015-02-02 14:27 - 00000304 _____ () C:\Users\User\AppData\Roaming\HELP_DECRYPT.URL
2015-02-02 14:27 - 2015-02-02 14:27 - 00000304 _____ () C:\Users\User\AppData\Local\HELP_DECRYPT.URL
2015-02-02 14:27 - 2015-02-02 14:27 - 00000304 _____ () C:\Users\User\AppData\HELP_DECRYPT.URL
2015-02-02 14:27 - 2015-02-02 14:27 - 00000304 _____ () C:\ProgramData\HELP_DECRYPT.URL
2015-02-02 14:25 - 2015-02-04 18:14 - 00000000 ____D () C:\ProgramData\SazmiMzofo
2015-02-02 14:25 - 2015-02-04 09:13 - 00000017 _____ () C:\ProgramData\systemskey.ini
2015-02-02 14:13 - 2015-02-02 14:27 - 00000000 ____D () C:\Users\User\AppData\Local\UZmedia
2015-02-02 14:12 - 2015-02-04 09:13 - 00000000 ____D () C:\Users\User\AppData\Local\YnqPack
2015-01-29 15:19 - 2015-01-29 15:19 - 00000000 ____D () C:\Program Files (x86)\ASUSTOR Surveillance Center Viewer
2015-01-29 15:17 - 2015-01-29 15:17 - 18283752 _____ (ASUSTOR) C:\Users\User\Downloads\ASTCompInstaller.exe
2015-01-26 16:43 - 2015-01-26 16:43 - 00002962 _____ () C:\Windows\System32\Tasks\iSCSIAgentAutoStartup
2015-01-26 16:43 - 2015-01-26 16:43 - 00001090 _____ () C:\Users\Public\Desktop\Qfinder.lnk
2015-01-26 16:43 - 2015-01-26 16:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QNAP
2015-01-26 16:43 - 2015-01-26 16:43 - 00000000 ____D () C:\Program Files (x86)\QNAP
2015-01-26 10:44 - 2015-02-02 14:27 - 00000000 ____D () C:\Users\User\Documents\(192.168.65.223_554)_1_2014_12_22_14_48_525
2015-01-26 10:37 - 2015-02-02 14:28 - 00000000 ____D () C:\Users\User\Documents\GXV3674_FHD_V2
2015-01-23 14:09 - 2015-02-02 14:27 - 00000000 ____D () C:\Users\User\Desktop\New folder
2015-01-23 13:28 - 2015-02-06 09:26 - 00000000 ____D () C:\Users\User\AppData\Roaming\DMCache
2015-01-23 13:28 - 2015-02-05 09:16 - 00000000 ____D () C:\Users\User\Downloads\Compressed
2015-01-23 13:28 - 2015-02-04 09:13 - 00000000 ____D () C:\Users\User\AppData\Roaming\IDM
2015-01-23 13:28 - 2015-01-23 13:28 - 06355128 _____ (Tonec Inc.) C:\Users\User\Downloads\idman621build18.exe
2015-01-23 13:28 - 2015-01-23 13:28 - 00000000 ____D () C:\Users\User\Downloads\Video
2015-01-23 13:28 - 2015-01-23 13:28 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
2015-01-23 13:28 - 2015-01-23 13:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
2015-01-23 13:28 - 2015-01-23 13:28 - 00000000 ____D () C:\ProgramData\IDM
2015-01-23 13:28 - 2015-01-23 13:28 - 00000000 ____D () C:\Program Files (x86)\Internet Download Manager
2015-01-23 13:24 - 2015-01-23 13:24 - 00002815 _____ () C:\Users\Public\Desktop\PortForward Network Utilities.lnk
2015-01-23 13:24 - 2015-01-23 13:24 - 00000000 ____D () C:\Users\User\AppData\Roaming\PortForward.com
2015-01-23 13:24 - 2015-01-23 13:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PortForward.com
2015-01-23 13:24 - 2015-01-23 13:24 - 00000000 ____D () C:\Program Files (x86)\Portforward
2015-01-23 13:23 - 2015-01-23 13:23 - 03618904 _____ (Portforward, LLC) C:\Users\User\Downloads\setup-network-utilities.exe
2015-01-23 13:23 - 2015-01-23 13:23 - 00000000 ____D () C:\Users\User\AppData\Local\Downloaded Installations
2015-01-23 09:54 - 2015-01-23 09:55 - 00000000 ____D () C:\Program Files\Wireshark
2015-01-23 09:54 - 2015-01-23 09:54 - 00001541 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wireshark.lnk
2015-01-22 16:56 - 2015-01-22 16:57 - 00282008 _____ () C:\Windows\Minidump\012215-15147-01.dmp
2015-01-22 16:53 - 2015-01-22 18:03 - 00000000 ____D () C:\Users\User\AppData\Roaming\TeamViewer
2015-01-22 16:53 - 2015-01-22 16:54 - 00000000 ____D () C:\Program Files (x86)\TeamViewer
2015-01-22 16:53 - 2015-01-22 16:53 - 00001043 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 10.lnk
2015-01-22 16:53 - 2015-01-22 16:53 - 00001031 _____ () C:\Users\Public\Desktop\TeamViewer 10.lnk
2015-01-22 16:52 - 2015-01-22 16:52 - 07720016 _____ (TeamViewer GmbH) C:\Users\User\Downloads\TeamViewer_Setup_fr-iod.exe
2015-01-22 13:54 - 2015-02-02 14:27 - 00000000 ____D () C:\Capture
2015-01-22 11:01 - 2015-01-22 11:01 - 21950464 _____ () C:\Users\User\Downloads\odm-v2.2.250.msi
2015-01-21 14:21 - 2015-01-21 14:21 - 00000000 ____D () C:\Record
2015-01-21 14:18 - 2015-02-02 14:27 - 00000000 ____D () C:\Snapshot
2015-01-21 10:33 - 2011-04-11 16:17 - 01478414 _____ () C:\Users\User\Downloads\ActiveX control manual install_3.1.0.32.exe
2015-01-21 10:30 - 2015-01-21 10:30 - 02471165 _____ () C:\Users\User\Downloads\VideoPlugine.exe
2015-01-21 10:00 - 2015-01-21 10:00 - 00002118 _____ () C:\Users\User\Desktop\TransServer.lnk
2015-01-21 10:00 - 2015-01-21 10:00 - 00002081 _____ () C:\Users\User\Desktop\Search.lnk
2015-01-21 10:00 - 2015-01-21 10:00 - 00002081 _____ () C:\Users\User\Desktop\GSurf_Pro V2.lnk
2015-01-21 10:00 - 2015-01-21 10:00 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GSurf_Pro_V2
2015-01-21 10:00 - 2015-01-21 10:00 - 00000000 ____D () C:\Program Files (x86)\Grandstream
2015-01-19 10:59 - 2015-02-02 14:28 - 00000000 ____D () C:\Users\User\Documents\Brochures
2015-01-16 09:59 - 2015-01-16 10:36 - 00000672 _____ () C:\Users\User\Desktop\Troubleshoutting.txt
2015-01-13 16:29 - 2015-01-13 16:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-01-13 16:29 - 2015-01-13 16:29 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2015-01-13 12:36 - 2014-11-29 00:37 - 00180648 _____ (Tonec Inc.) C:\Windows\system32\Drivers\idmwfp.sys
2015-01-08 11:55 - 2015-01-21 10:34 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OCX
2015-01-08 09:02 - 2015-01-08 09:02 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2015-01-07 15:28 - 2015-01-07 15:31 - 00000000 ____D () C:\Program Files (x86)\WebControl
2015-01-07 15:28 - 2015-01-07 15:28 - 00000000 ____D () C:\Windows\WebControl
2015-01-07 15:28 - 2015-01-07 15:28 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WebControl
2015-01-07 14:31 - 2015-01-07 14:31 - 00000000 ____D () C:\Windows\system32\appmgmt
2015-01-07 14:29 - 2015-02-04 09:13 - 00000000 ____D () C:\Users\User\AppData\Local\Skype
2015-01-07 14:29 - 2015-01-07 14:31 - 00000000 ____D () C:\Users\User\AppData\Roaming\Skype
2015-01-07 14:29 - 2015-01-07 14:31 - 00000000 ____D () C:\ProgramData\Skype
2015-01-07 14:28 - 2015-02-02 14:42 - 00000000 ____D () C:\Users\User\Downloads\12 Pims-German-LadyFae
2015-01-07 14:27 - 2015-02-04 09:13 - 00000000 ____D () C:\Users\User\AppData\Roaming\uTorrent
2015-01-07 14:27 - 2015-01-07 14:27 - 00000792 _____ () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2015-01-07 14:27 - 2015-01-07 14:27 - 00000000 ____D () C:\Users\User\AppData\Roaming\RHEng
2015-01-07 14:27 - 2015-01-07 14:27 - 00000000 ____D () C:\ProgramData\APN
2015-01-07 12:37 - 2015-02-04 09:13 - 00000000 ____D () C:\Users\User\AppData\Roaming\vlc
2015-01-07 12:31 - 2015-01-07 12:31 - 00001066 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2015-01-07 12:31 - 2015-01-07 12:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2015-01-07 12:31 - 2015-01-07 12:31 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
 
==================== One Month Modified Files and Folders =======
 
(If an entry is included in the fixlist, the file\folder will be moved.)
 
2015-02-06 09:28 - 2009-07-14 05:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-06 09:28 - 2009-07-14 04:51 - 00022484 _____ () C:\Windows\setupact.log
2015-02-06 09:28 - 2009-07-14 04:45 - 00010208 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-02-06 09:28 - 2009-07-14 04:45 - 00010208 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-02-06 09:27 - 2014-12-30 13:54 - 00149873 _____ () C:\Windows\WindowsUpdate.log
2015-02-06 09:26 - 2009-07-14 05:13 - 00713888 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-02-06 09:21 - 2015-01-05 14:40 - 00000000 ____D () C:\Program Files (x86)\SMADAV
2015-02-06 09:21 - 2015-01-05 10:11 - 00000890 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-06 09:17 - 2015-01-05 10:12 - 00002183 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-02-06 09:17 - 2015-01-05 10:11 - 00000894 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-02-05 17:12 - 2015-01-05 10:28 - 00000000 ____D () C:\Users\User\Documents\technicaldocumentstoread
2015-02-05 09:05 - 2015-01-05 13:18 - 00004038 _____ () C:\Windows\PFRO.log
2015-02-04 18:14 - 2009-07-14 03:20 - 00000000 ____D () C:\Windows\security
2015-02-04 09:13 - 2015-01-05 10:29 - 00000000 ____D () C:\Users\User\AppData\Roaming\Notepad++
2015-02-04 09:13 - 2015-01-05 10:28 - 00000000 ____D () C:\Users\User\Downloads\Softwares
2015-02-04 09:13 - 2009-07-14 03:20 - 00000000 ____D () C:\Windows\registration
2015-02-04 09:13 - 2009-07-14 03:20 - 00000000 ____D () C:\Windows\AppCompat
2015-02-04 09:12 - 2015-01-05 10:11 - 00000000 ____D () C:\Users\User\AppData\Local\Google
2015-02-02 14:27 - 2014-12-30 13:53 - 00000000 ____D () C:\ProgramData\Dell
2015-01-23 13:24 - 2014-12-30 18:57 - 00108840 _____ () C:\Users\User\AppData\Local\GDIPFONTCACHEV1.DAT
2015-01-23 09:55 - 2014-12-30 18:59 - 00000000 ____D () C:\Program Files (x86)\WinPcap
2015-01-22 16:57 - 2009-07-14 04:45 - 00419000 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-01-22 16:56 - 2015-01-05 13:18 - 385578161 _____ () C:\Windows\MEMORY.DMP
2015-01-22 16:56 - 2015-01-05 13:18 - 00000000 ____D () C:\Windows\Minidump
2015-01-21 10:01 - 2014-12-30 13:52 - 00000000 ____D () C:\Users\User\AppData\Local\VirtualStore
 
==================== Files in the root of some directories =======
 
2015-02-02 14:27 - 2015-02-02 14:27 - 0008658 _____ () C:\Users\User\AppData\Roaming\HELP_DECRYPT.HTML
2015-02-02 14:27 - 2015-02-02 14:27 - 0045842 _____ () C:\Users\User\AppData\Roaming\HELP_DECRYPT.PNG
2015-02-02 14:27 - 2015-02-02 14:27 - 0004272 _____ () C:\Users\User\AppData\Roaming\HELP_DECRYPT.TXT
2015-02-02 14:27 - 2015-02-02 14:27 - 0000304 _____ () C:\Users\User\AppData\Roaming\HELP_DECRYPT.URL
2015-02-02 14:27 - 2015-02-02 14:27 - 0008658 _____ () C:\Users\User\AppData\Local\HELP_DECRYPT.HTML
2015-02-02 14:27 - 2015-02-02 14:27 - 0045842 _____ () C:\Users\User\AppData\Local\HELP_DECRYPT.PNG
2015-02-02 14:27 - 2015-02-02 14:27 - 0004272 _____ () C:\Users\User\AppData\Local\HELP_DECRYPT.TXT
2015-02-02 14:27 - 2015-02-02 14:27 - 0000304 _____ () C:\Users\User\AppData\Local\HELP_DECRYPT.URL
2015-02-02 14:27 - 2015-02-02 14:27 - 0008658 _____ () C:\ProgramData\HELP_DECRYPT.HTML
2015-02-02 14:27 - 2015-02-02 14:27 - 0045842 _____ () C:\ProgramData\HELP_DECRYPT.PNG
2015-02-02 14:27 - 2015-02-02 14:27 - 0004272 _____ () C:\ProgramData\HELP_DECRYPT.TXT
2015-02-02 14:27 - 2015-02-02 14:27 - 0000304 _____ () C:\ProgramData\HELP_DECRYPT.URL
2015-02-02 14:25 - 2015-02-04 09:13 - 0000017 _____ () C:\ProgramData\systemskey.ini
 
Some content of TEMP:
====================
C:\Users\User\AppData\Local\Temp\dllnt_dump.dll
C:\Users\User\AppData\Local\Temp\npp.6.7.4.Installer.exe
C:\Users\User\AppData\Local\Temp\utt39ED.tmp.exe
C:\Users\User\AppData\Local\Temp\utt3F99.tmp.exe
C:\Users\User\AppData\Local\Temp\xmlUpdater.exe
 
 
==================== Bamital & volsnap Check =================
 
(There is no automatic fix for files that do not pass verification.)
 
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 
LastRegBack: 2015-02-03 10:10
 
==================== End Of Log ============================


#4 fireman4it

fireman4it

    Bleepin' Fireman


  • Malware Response Team
  • 13,505 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Greenup, Ill USA
  • Local time:04:07 PM

Posted 06 February 2015 - 02:22 PM

There was an Additonal.txt created when you ran FRST. Can you please post that log Along with a new FRST log after running the following fix.

 

Open notepad. Please copy the contents of the code box below. To do this highlight the contents of the box and right click on it. Paste this into the open notepad. Save it on the flashdrive as fixlist.txt

Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HELP_DECRYPT.HTML ()
Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HELP_DECRYPT.PNG ()
Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HELP_DECRYPT.TXT ()
InternetURL: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HELP_DECRYPT.URL -> hxxp://paytoc4gtpn5czl2.torpaysolutions.com/1Q6mjop
2015-02-02 14:44 - 2015-02-02 14:44 - 00008658 _____ () C:\Users\User\HELP_DECRYPT.HTML
2015-02-02 14:44 - 2015-02-02 14:44 - 00008658 _____ () C:\Users\User\Desktop\HELP_DECRYPT.HTML
2015-02-02 14:44 - 2015-02-02 14:44 - 00008658 _____ () C:\Users\HELP_DECRYPT.HTML
2015-02-02 14:44 - 2015-02-02 14:44 - 00008658 _____ () C:\HELP_DECRYPT.HTML
2015-02-02 14:44 - 2015-02-02 14:44 - 00004272 _____ () C:\Users\User\HELP_DECRYPT.TXT
2015-02-02 14:44 - 2015-02-02 14:44 - 00004272 _____ () C:\Users\HELP_DECRYPT.TXT
2015-02-02 14:44 - 2015-02-02 14:44 - 00004272 _____ () C:\HELP_DECRYPT.TXT
2015-02-02 14:44 - 2015-02-02 14:44 - 00000304 _____ () C:\Users\User\HELP_DECRYPT.URL
2015-02-02 14:44 - 2015-02-02 14:44 - 00000304 _____ () C:\Users\User\Desktop\HELP_DECRYPT.URL
2015-02-02 14:44 - 2015-02-02 14:44 - 00000304 _____ () C:\Users\HELP_DECRYPT.URL
2015-02-02 14:44 - 2015-02-02 14:44 - 00000304 _____ () C:\HELP_DECRYPT.URL
2015-02-02 14:27 - 2015-02-02 14:27 - 00008658 _____ () C:\Users\User\AppData\Roaming\HELP_DECRYPT.HTML
2015-02-02 14:27 - 2015-02-02 14:27 - 00008658 _____ () C:\Users\User\AppData\Local\HELP_DECRYPT.HTML
2015-02-02 14:27 - 2015-02-02 14:27 - 00008658 _____ () C:\Users\User\AppData\HELP_DECRYPT.HTML
2015-02-02 14:27 - 2015-02-02 14:27 - 00008658 _____ () C:\ProgramData\HELP_DECRYPT.HTML
2015-02-02 14:27 - 2015-02-02 14:27 - 00004272 _____ () C:\Users\User\AppData\Roaming\HELP_DECRYPT.TXT
2015-02-02 14:27 - 2015-02-02 14:27 - 00004272 _____ () C:\Users\User\AppData\Local\HELP_DECRYPT.TXT
2015-02-02 14:27 - 2015-02-02 14:27 - 00004272 _____ () C:\Users\User\AppData\HELP_DECRYPT.TXT
2015-02-02 14:27 - 2015-02-02 14:27 - 00004272 _____ () C:\ProgramData\HELP_DECRYPT.TXT
2015-02-02 14:27 - 2015-02-02 14:27 - 00000304 _____ () C:\Users\User\AppData\Roaming\HELP_DECRYPT.URL
2015-02-02 14:27 - 2015-02-02 14:27 - 00000304 _____ () C:\Users\User\AppData\Local\HELP_DECRYPT.URL
2015-02-02 14:27 - 2015-02-02 14:27 - 00000304 _____ () C:\Users\User\AppData\HELP_DECRYPT.URL
2015-02-02 14:27 - 2015-02-02 14:27 - 00000304 _____ () C:\ProgramData\HELP_DECRYPT.URL
2015-02-02 14:13 - 2015-02-02 14:27 - 00000000 ____D () C:\Users\User\AppData\Local\UZmedia
2015-02-02 14:25 - 2015-02-04 09:13 - 00000017 _____ () C:\ProgramData\systemskey.ini
2015-02-02 14:13 - 2015-02-02 14:27 - 00000000 ____D () C:\Users\User\AppData\Local\UZmedia
2015-02-02 14:12 - 2015-02-04 09:13 - 00000000 ____D () C:\Users\User\AppData\Local\YnqPack
2015-02-02 14:27 - 2015-02-02 14:27 - 0008658 _____ () C:\Users\User\AppData\Roaming\HELP_DECRYPT.HTML
2015-02-02 14:27 - 2015-02-02 14:27 - 0045842 _____ () C:\Users\User\AppData\Roaming\HELP_DECRYPT.PNG
2015-02-02 14:27 - 2015-02-02 14:27 - 0004272 _____ () C:\Users\User\AppData\Roaming\HELP_DECRYPT.TXT
2015-02-02 14:27 - 2015-02-02 14:27 - 0000304 _____ () C:\Users\User\AppData\Roaming\HELP_DECRYPT.URL
2015-02-02 14:27 - 2015-02-02 14:27 - 0008658 _____ () C:\Users\User\AppData\Local\HELP_DECRYPT.HTML
2015-02-02 14:27 - 2015-02-02 14:27 - 0045842 _____ () C:\Users\User\AppData\Local\HELP_DECRYPT.PNG
2015-02-02 14:27 - 2015-02-02 14:27 - 0004272 _____ () C:\Users\User\AppData\Local\HELP_DECRYPT.TXT
2015-02-02 14:27 - 2015-02-02 14:27 - 0000304 _____ () C:\Users\User\AppData\Local\HELP_DECRYPT.URL
2015-02-02 14:27 - 2015-02-02 14:27 - 0008658 _____ () C:\ProgramData\HELP_DECRYPT.HTML
2015-02-02 14:27 - 2015-02-02 14:27 - 0045842 _____ () C:\ProgramData\HELP_DECRYPT.PNG
2015-02-02 14:27 - 2015-02-02 14:27 - 0004272 _____ () C:\ProgramData\HELP_DECRYPT.TXT
2015-02-02 14:27 - 2015-02-02 14:27 - 0000304 _____ () C:\ProgramData\HELP_DECRYPT.URL
2015-02-02 14:25 - 2015-02-04 09:13 - 0000017 _____ () C:\ProgramData\systemskey.ini
emptytemp:

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

On Vista or Windows 7: Now please enter System Recovery Options.
On Windows XP: Now please boot into the BartPE CD.
Run FRST64 and press the Fix button just once and wait.
The tool will make a log on the flashdrive (Fixlog.txt) please post it to your reply.

 

 

Are you able to boot into normal mode now with out the Notice of encrypted files?


" Extinguishing Malware from the world"

The Virus, Trojan, Spyware, and Malware Removal forum is very busy. If I'm helping you and I've not posted back within 24 hrs., send a PM with your topic link. Thank you.

ALL OTHER HELP REQUESTS VIA THE PM SYSTEM WILL BE IGNORED. The Forums are there for a reason!
Thanks-


  userbar_eis_500.gif

If I have helped you, consider making a donation to help me continue the fight against Malware! Just click btn_donate_LG.gif


#5 fireman4it

fireman4it

    Bleepin' Fireman


  • Malware Response Team
  • 13,505 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Greenup, Ill USA
  • Local time:04:07 PM

Posted 08 February 2015 - 09:11 PM

Hello.

Are you still there?

If you are please follow the instructions in my previous post.

If you still need help, follow the instructions I have given in my response. If you have since had your problem solved, we would appreciate you letting us know so we can close the topic.

Please reply back telling us so. If you don't reply within 3-5 days the topic will need to be closed.

Thanks for understanding :)

With Regards,
fireman4it


" Extinguishing Malware from the world"

The Virus, Trojan, Spyware, and Malware Removal forum is very busy. If I'm helping you and I've not posted back within 24 hrs., send a PM with your topic link. Thank you.

ALL OTHER HELP REQUESTS VIA THE PM SYSTEM WILL BE IGNORED. The Forums are there for a reason!
Thanks-


  userbar_eis_500.gif

If I have helped you, consider making a donation to help me continue the fight against Malware! Just click btn_donate_LG.gif


#6 ysn_chy

ysn_chy
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:09:07 PM

Posted 09 February 2015 - 04:47 AM

Hello Fireman4it !

 

Sorry if I am late to response, I wasn't at the office this week end. I did what you instructed me.

 

Here is the content of Additon.txt :

 

************************************************************

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 05-02-2015
Ran by User at 2015-02-06 09:34:55
Running from f:\
Boot Mode: Safe Mode (minimal)
==========================================================
 
 
==================== Security Center ========================
 
(If an entry is included in the fixlist, it will be removed.)
 
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 
==================== Installed Programs ======================
 
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 
µTorrent (HKU\S-1-5-21-3253091791-2452062266-442295166-1000\...\uTorrent) (Version: 3.4.2.37754 - BitTorrent Inc.)
Adobe Reader XI (11.0.10) - Français (HKLM-x32\...\{AC76BA86-7AD7-1036-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
ASUSTOR Surveillance Center Viewer (HKLM-x32\...\ASUSTOR Surveillance Center Viewer) (Version: 1.0.3.3524 - ASUSTOR)
Dell System Detect (HKU\S-1-5-21-3253091791-2452062266-442295166-1000\...\73f463568823ebbe) (Version: 5.13.0.1 - Dell)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 40.0.2214.111 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
GSurf_Pro_V2 (HKLM-x32\...\GSurf_Pro_V2) (Version: 1.0.2.11 - Grandstream)
Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3412 - Intel Corporation)
Internet Download Manager (HKLM-x32\...\Internet Download Manager) (Version:  - Tonec Inc.)
Malwarebytes Anti-Malware version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7.4 - Notepad++ Team)
Port Forward Network Utilities (HKLM-x32\...\{88B1D36C-7B70-4C48-8D2F-AAB956ECF4C3}) (Version: 2.0.9 - Portforward, LLC)
QNAP Qfinder (HKLM-x32\...\QNAP_FINDER) (Version: 4.2.5.0108 - QNAP Systems, Inc.)
Realtek Ethernet Controller All-In-One Windows Driver (HKLM-x32\...\{F7E7F0CB-AA41-4D5A-B6F2-8E6738EB063F}) (Version: 7.71.327.2013 - Realtek)
SMADAV version 9.9.1 (HKLM-x32\...\{8B9FA5FF-3E61-4658-B0DA-E6DDB46D6BAD}_is1) (Version: 9.9.1 - SmadSoft)
TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.36897 - TeamViewer)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)
WebControl (HKLM-x32\...\WebControl1.0.0.7) (Version: 1.0.0.7 - Grandstream)
WinPcap 4.1.3 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2980 - Riverbed Technology, Inc.)
WinRAR 5.20 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.20.0 - win.rar GmbH)
Wireshark 1.12.3 (64-bit) (HKLM-x32\...\Wireshark) (Version: 1.12.3 - The Wireshark developer community, http://www.wireshark.org)
 
==================== Custom CLSID (selected items): ==========================
 
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 
 
==================== Restore Points  =========================
 
30-12-2014 13:53:12 Installed Realtek Ethernet Controller All-In-One Windows Driver
30-12-2014 19:00:01 Installed Microsoft Office Enterprise 2007
07-01-2015 11:52:15 Scheduled Checkpoint
07-01-2015 14:30:48 Removed Skype™ 7.0
15-01-2015 10:52:52 Scheduled Checkpoint
22-01-2015 13:13:00 Scheduled Checkpoint
30-01-2015 10:46:18 Scheduled Checkpoint
04-02-2015 09:12:15 Restore Operation
 
==================== Hosts content: ==========================
 
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 
2009-07-14 02:34 - 2009-06-10 21:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts
 
==================== Scheduled Tasks (whitelisted) =============
 
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 
Task: {087CDAE9-AA26-4C63-B003-7522778CB913} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {241CE793-8EF6-4DA1-B9DD-CD337D4C1F77} - System32\Tasks\smadav => C:\Program Files (x86)\Smadav\SMΔRTP.exe [2014-12-02] (Smadsoft)
Task: {6B0B253C-7DE5-4869-A762-299D58599A5E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-01-05] (Google Inc.)
Task: {AC7B8B1C-CB0A-4BA0-8567-9B09CD097DEE} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-01-05] (Google Inc.)
Task: {C1676982-8E5B-45FC-9877-5875D7802C0E} - System32\Tasks\iSCSIAgentAutoStartup => C:\Program Files (x86)\QNAP\Qfinder\iSCSIAgent.exe [2015-01-08] ()
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 
==================== Loaded Modules (whitelisted) ==============
 
 
==================== Alternate Data Streams (whitelisted) =========
 
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 
 
==================== Safe Mode (whitelisted) ===================
 
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "OptionValue"="1"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "UseAlternateShell"="1"
 
==================== EXE Association (whitelisted) ===============
 
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 
==================== Other Registry Areas =====================
 
(Currently there is no automatic fix for this section.)
 
HKU\S-1-5-21-3253091791-2452062266-442295166-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\User\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
 
==================== MSCONFIG/TASK MANAGER disabled items ==
 
(Currently there is no automatic fix for this section.)
 
 
==================== Accounts: =============================
 
Administrator (S-1-5-21-3253091791-2452062266-442295166-500 - Administrator - Disabled)
Guest (S-1-5-21-3253091791-2452062266-442295166-501 - Limited - Disabled)
User (S-1-5-21-3253091791-2452062266-442295166-1000 - Administrator - Enabled) => C:\Users\User
 
==================== Faulty Device Manager Devices =============
 
Name: Security Processor Loader Driver
Description: Security Processor Loader Driver
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: spldr
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
 
Name: Universal Serial Bus (USB) Controller
Description: Universal Serial Bus (USB) Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 
Name: PCI Simple Communications Controller
Description: PCI Simple Communications Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 
 
==================== Event log errors: =========================
 
Application errors:
==================
Error: (02/04/2015 09:06:24 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: regsvr32.exe, version: 6.1.7600.16385, time stamp: 0x4a5bca28
Faulting module name: zhzfosrsrir.dll, version: 0.0.0.0, time stamp: 0x5437e5d7
Exception code: 0xc0000005
Fault offset: 0x00001039
Faulting process id: 0x1058
Faulting application start time: 0xregsvr32.exe0
Faulting application path: regsvr32.exe1
Faulting module path: regsvr32.exe2
Report Id: regsvr32.exe3
 
Error: (02/04/2015 09:06:23 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: regsvr32.exe, version: 6.1.7600.16385, time stamp: 0x4a5bca28
Faulting module name: ssminidriver.dll, version: 0.0.0.0, time stamp: 0x543411bb
Exception code: 0xc0000005
Fault offset: 0x00001039
Faulting process id: 0x1100
Faulting application start time: 0xregsvr32.exe0
Faulting application path: regsvr32.exe1
Faulting module path: regsvr32.exe2
Report Id: regsvr32.exe3
 
Error: (02/03/2015 09:03:24 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: regsvr32.exe, version: 6.1.7600.16385, time stamp: 0x4a5bca28
Faulting module name: zhzfosrsrir.dll, version: 0.0.0.0, time stamp: 0x5437e5d7
Exception code: 0xc0000005
Fault offset: 0x00001039
Faulting process id: 0x10d8
Faulting application start time: 0xregsvr32.exe0
Faulting application path: regsvr32.exe1
Faulting module path: regsvr32.exe2
Report Id: regsvr32.exe3
 
Error: (02/03/2015 09:03:24 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: regsvr32.exe, version: 6.1.7600.16385, time stamp: 0x4a5bca28
Faulting module name: ssminidriver.dll, version: 0.0.0.0, time stamp: 0x543411bb
Exception code: 0xc0000005
Fault offset: 0x00001039
Faulting process id: 0x12a4
Faulting application start time: 0xregsvr32.exe0
Faulting application path: regsvr32.exe1
Faulting module path: regsvr32.exe2
Report Id: regsvr32.exe3
 
Error: (02/02/2015 02:25:28 PM) (Source: VSS) (EventID: 22) (User: )
Description: Volume Shadow Copy Service error: A critical component required by the Volume Shadow Copy service is not registered.
This might happened if an error occurred during Windows setup or during installation of a Shadow Copy provider.
The error returned from CoCreateInstance on class with CLSID {e579ab5f-1cc4-44b4-bed9-de0991ff0623} and Name Coordinator is [0x80040154, Class not registered
].
 
Error: (01/27/2015 10:05:59 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: chrome.exe, version: 40.0.2214.91, time stamp: 0x54bf0a96
Faulting module name: npGS_Plugins.dll, version: 1.0.0.23, time stamp: 0x51a31cd3
Exception code: 0xc0000409
Fault offset: 0x00002cbb
Faulting process id: 0xd3c
Faulting application start time: 0xchrome.exe0
Faulting application path: chrome.exe1
Faulting module path: chrome.exe2
Report Id: chrome.exe3
 
Error: (01/23/2015 11:45:05 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program Wireshark.exe version 1.12.3.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
 
Process ID: bcc
 
Start Time: 01d036f2be1316b5
 
Termination Time: 140
 
Application Path: C:\Program Files\Wireshark\Wireshark.exe
 
Report Id: 3e407a05-a2f5-11e4-bd29-b083fe59587f
 
Error: (01/23/2015 09:48:25 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: Client.exe, version: 1.0.2.11, time stamp: 0x537c5a12
Faulting module name: Client.exe, version: 1.0.2.11, time stamp: 0x537c5a12
Exception code: 0xc0000005
Fault offset: 0x00034a08
Faulting process id: 0xc54
Faulting application start time: 0xClient.exe0
Faulting application path: Client.exe1
Faulting module path: Client.exe2
Report Id: Client.exe3
 
Error: (01/21/2015 02:45:13 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: Client.exe, version: 1.0.2.11, time stamp: 0x537c5a12
Faulting module name: Client.exe, version: 1.0.2.11, time stamp: 0x537c5a12
Exception code: 0xc0000005
Fault offset: 0x00034a08
Faulting process id: 0xd3c
Faulting application start time: 0xClient.exe0
Faulting application path: Client.exe1
Faulting module path: Client.exe2
Report Id: Client.exe3
 
Error: (01/21/2015 00:00:13 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: Client.exe, version: 1.0.2.11, time stamp: 0x537c5a12
Faulting module name: Client.exe, version: 1.0.2.11, time stamp: 0x537c5a12
Exception code: 0xc0000005
Fault offset: 0x00034a08
Faulting process id: 0xb04
Faulting application start time: 0xClient.exe0
Faulting application path: Client.exe1
Faulting module path: Client.exe2
Report Id: Client.exe3
 
 
System errors:
=============
Error: (02/06/2015 09:32:32 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The PnP-X IP Bus Enumerator service depends on the Function Discovery Provider Host service which failed to start because of the following error: 
%%1068
 
Error: (02/06/2015 09:31:43 AM) (Source: DCOM) (EventID: 10005) (User: )
Description: 1084WSearch{7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
 
Error: (02/06/2015 09:30:32 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load: 
AFD
CSC
DfsC
discache
NetBIOS
NetBT
nsiproxy
Psched
rdbss
spldr
tdx
Wanarpv6
WfpLwf
 
Error: (02/06/2015 09:30:31 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Network Location Awareness service depends on the Network Store Interface Service service which failed to start because of the following error: 
%%1068
 
Error: (02/06/2015 09:30:31 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The SMB 2.0 MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: 
%%1068
 
Error: (02/06/2015 09:30:31 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The SMB 1.x MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: 
%%1068
 
Error: (02/06/2015 09:30:31 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The SMB MiniRedirector Wrapper and Engine service depends on the Redirected Buffering Sub Sysytem service which failed to start because of the following error: 
%%31
 
Error: (02/06/2015 09:30:31 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The IP Helper service depends on the Network Store Interface Service service which failed to start because of the following error: 
%%1068
 
Error: (02/06/2015 09:30:31 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Workstation service depends on the Network Store Interface Service service which failed to start because of the following error: 
%%1068
 
Error: (02/06/2015 09:30:31 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Network Store Interface Service service depends on the NSI proxy service driver. service which failed to start because of the following error: 
%%31
 
 
Microsoft Office Sessions:
=========================
 
==================== Memory info =========================== 
 
Processor: Intel® Core™ i3-4150 CPU @ 3.50GHz
Percentage of memory in use: 21%
Total physical RAM: 4014.77 MB
Available physical RAM: 3136.48 MB
Total Pagefile: 8027.68 MB
Available Pagefile: 7144.45 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB
 
==================== Drives ================================
 
Drive c: () (Fixed) (Total:201.99 GB) (Free:164.21 GB) NTFS
Drive d: () (Fixed) (Total:263.67 GB) (Free:263.58 GB) NTFS
Drive f: () (Removable) (Total:7.21 GB) (Free:7.21 GB) FAT32
 
==================== MBR & Partition Table ==================
 
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 653D69FF)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=202 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=263.7 GB) - (Type=07 NTFS)
 
========================================================
Disk: 1 (Size: 7.2 GB) (Disk ID: 00000000)
 
Partition: GPT Partition Type.
 
==================== End Of Log ============================
 
 
Here is the content of Fixlog.txt :
 
**********************************************************************************************
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 05-02-2015
Ran by User at 2015-02-09 09:28:43 Run:1
Running from f:\
Loaded Profiles: User (Available profiles: User)
Boot Mode: Safe Mode (minimal)
==============================================
 
Content of fixlist:
*****************
Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HELP_DECRYPT.HTML ()
Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HELP_DECRYPT.PNG ()
Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HELP_DECRYPT.TXT ()
InternetURL: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HELP_DECRYPT.URL -> hxxp://paytoc4gtpn5czl2.torpaysolutions.com/1Q6mjop
2015-02-02 14:44 - 2015-02-02 14:44 - 00008658 _____ () C:\Users\User\HELP_DECRYPT.HTML
2015-02-02 14:44 - 2015-02-02 14:44 - 00008658 _____ () C:\Users\User\Desktop\HELP_DECRYPT.HTML
2015-02-02 14:44 - 2015-02-02 14:44 - 00008658 _____ () C:\Users\HELP_DECRYPT.HTML
2015-02-02 14:44 - 2015-02-02 14:44 - 00008658 _____ () C:\HELP_DECRYPT.HTML
2015-02-02 14:44 - 2015-02-02 14:44 - 00004272 _____ () C:\Users\User\HELP_DECRYPT.TXT
2015-02-02 14:44 - 2015-02-02 14:44 - 00004272 _____ () C:\Users\HELP_DECRYPT.TXT
2015-02-02 14:44 - 2015-02-02 14:44 - 00004272 _____ () C:\HELP_DECRYPT.TXT
2015-02-02 14:44 - 2015-02-02 14:44 - 00000304 _____ () C:\Users\User\HELP_DECRYPT.URL
2015-02-02 14:44 - 2015-02-02 14:44 - 00000304 _____ () C:\Users\User\Desktop\HELP_DECRYPT.URL
2015-02-02 14:44 - 2015-02-02 14:44 - 00000304 _____ () C:\Users\HELP_DECRYPT.URL
2015-02-02 14:44 - 2015-02-02 14:44 - 00000304 _____ () C:\HELP_DECRYPT.URL
2015-02-02 14:27 - 2015-02-02 14:27 - 00008658 _____ () C:\Users\User\AppData\Roaming\HELP_DECRYPT.HTML
2015-02-02 14:27 - 2015-02-02 14:27 - 00008658 _____ () C:\Users\User\AppData\Local\HELP_DECRYPT.HTML
2015-02-02 14:27 - 2015-02-02 14:27 - 00008658 _____ () C:\Users\User\AppData\HELP_DECRYPT.HTML
2015-02-02 14:27 - 2015-02-02 14:27 - 00008658 _____ () C:\ProgramData\HELP_DECRYPT.HTML
2015-02-02 14:27 - 2015-02-02 14:27 - 00004272 _____ () C:\Users\User\AppData\Roaming\HELP_DECRYPT.TXT
2015-02-02 14:27 - 2015-02-02 14:27 - 00004272 _____ () C:\Users\User\AppData\Local\HELP_DECRYPT.TXT
2015-02-02 14:27 - 2015-02-02 14:27 - 00004272 _____ () C:\Users\User\AppData\HELP_DECRYPT.TXT
2015-02-02 14:27 - 2015-02-02 14:27 - 00004272 _____ () C:\ProgramData\HELP_DECRYPT.TXT
2015-02-02 14:27 - 2015-02-02 14:27 - 00000304 _____ () C:\Users\User\AppData\Roaming\HELP_DECRYPT.URL
2015-02-02 14:27 - 2015-02-02 14:27 - 00000304 _____ () C:\Users\User\AppData\Local\HELP_DECRYPT.URL
2015-02-02 14:27 - 2015-02-02 14:27 - 00000304 _____ () C:\Users\User\AppData\HELP_DECRYPT.URL
2015-02-02 14:27 - 2015-02-02 14:27 - 00000304 _____ () C:\ProgramData\HELP_DECRYPT.URL
2015-02-02 14:13 - 2015-02-02 14:27 - 00000000 ____D () C:\Users\User\AppData\Local\UZmedia
2015-02-02 14:25 - 2015-02-04 09:13 - 00000017 _____ () C:\ProgramData\systemskey.ini
2015-02-02 14:13 - 2015-02-02 14:27 - 00000000 ____D () C:\Users\User\AppData\Local\UZmedia
2015-02-02 14:12 - 2015-02-04 09:13 - 00000000 ____D () C:\Users\User\AppData\Local\YnqPack
2015-02-02 14:27 - 2015-02-02 14:27 - 0008658 _____ () C:\Users\User\AppData\Roaming\HELP_DECRYPT.HTML
2015-02-02 14:27 - 2015-02-02 14:27 - 0045842 _____ () C:\Users\User\AppData\Roaming\HELP_DECRYPT.PNG
2015-02-02 14:27 - 2015-02-02 14:27 - 0004272 _____ () C:\Users\User\AppData\Roaming\HELP_DECRYPT.TXT
2015-02-02 14:27 - 2015-02-02 14:27 - 0000304 _____ () C:\Users\User\AppData\Roaming\HELP_DECRYPT.URL
2015-02-02 14:27 - 2015-02-02 14:27 - 0008658 _____ () C:\Users\User\AppData\Local\HELP_DECRYPT.HTML
2015-02-02 14:27 - 2015-02-02 14:27 - 0045842 _____ () C:\Users\User\AppData\Local\HELP_DECRYPT.PNG
2015-02-02 14:27 - 2015-02-02 14:27 - 0004272 _____ () C:\Users\User\AppData\Local\HELP_DECRYPT.TXT
2015-02-02 14:27 - 2015-02-02 14:27 - 0000304 _____ () C:\Users\User\AppData\Local\HELP_DECRYPT.URL
2015-02-02 14:27 - 2015-02-02 14:27 - 0008658 _____ () C:\ProgramData\HELP_DECRYPT.HTML
2015-02-02 14:27 - 2015-02-02 14:27 - 0045842 _____ () C:\ProgramData\HELP_DECRYPT.PNG
2015-02-02 14:27 - 2015-02-02 14:27 - 0004272 _____ () C:\ProgramData\HELP_DECRYPT.TXT
2015-02-02 14:27 - 2015-02-02 14:27 - 0000304 _____ () C:\ProgramData\HELP_DECRYPT.URL
2015-02-02 14:25 - 2015-02-04 09:13 - 0000017 _____ () C:\ProgramData\systemskey.ini
emptytemp:
*****************
 
C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HELP_DECRYPT.HTML => Moved successfully.
C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HELP_DECRYPT.PNG => Moved successfully.
C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HELP_DECRYPT.TXT => Moved successfully.
C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HELP_DECRYPT.URL => Moved successfully.
C:\Users\User\HELP_DECRYPT.HTML => Moved successfully.
C:\Users\User\Desktop\HELP_DECRYPT.HTML => Moved successfully.
C:\Users\HELP_DECRYPT.HTML => Moved successfully.
"C:\HELP_DECRYPT.HTML" => File/Directory not found.
C:\Users\User\HELP_DECRYPT.TXT => Moved successfully.
C:\Users\HELP_DECRYPT.TXT => Moved successfully.
"C:\HELP_DECRYPT.TXT" => File/Directory not found.
C:\Users\User\HELP_DECRYPT.URL => Moved successfully.
C:\Users\User\Desktop\HELP_DECRYPT.URL => Moved successfully.
C:\Users\HELP_DECRYPT.URL => Moved successfully.
"C:\HELP_DECRYPT.URL" => File/Directory not found.
C:\Users\User\AppData\Roaming\HELP_DECRYPT.HTML => Moved successfully.
C:\Users\User\AppData\Local\HELP_DECRYPT.HTML => Moved successfully.
C:\Users\User\AppData\HELP_DECRYPT.HTML => Moved successfully.
C:\ProgramData\HELP_DECRYPT.HTML => Moved successfully.
C:\Users\User\AppData\Roaming\HELP_DECRYPT.TXT => Moved successfully.
C:\Users\User\AppData\Local\HELP_DECRYPT.TXT => Moved successfully.
C:\Users\User\AppData\HELP_DECRYPT.TXT => Moved successfully.
C:\ProgramData\HELP_DECRYPT.TXT => Moved successfully.
C:\Users\User\AppData\Roaming\HELP_DECRYPT.URL => Moved successfully.
C:\Users\User\AppData\Local\HELP_DECRYPT.URL => Moved successfully.
C:\Users\User\AppData\HELP_DECRYPT.URL => Moved successfully.
C:\ProgramData\HELP_DECRYPT.URL => Moved successfully.
C:\Users\User\AppData\Local\UZmedia => Moved successfully.
C:\ProgramData\systemskey.ini => Moved successfully.
"C:\Users\User\AppData\Local\UZmedia" => File/Directory not found.
C:\Users\User\AppData\Local\YnqPack => Moved successfully.
"C:\Users\User\AppData\Roaming\HELP_DECRYPT.HTML" => File/Directory not found.
C:\Users\User\AppData\Roaming\HELP_DECRYPT.PNG => Moved successfully.
"C:\Users\User\AppData\Roaming\HELP_DECRYPT.TXT" => File/Directory not found.
"C:\Users\User\AppData\Roaming\HELP_DECRYPT.URL" => File/Directory not found.
"C:\Users\User\AppData\Local\HELP_DECRYPT.HTML" => File/Directory not found.
C:\Users\User\AppData\Local\HELP_DECRYPT.PNG => Moved successfully.
"C:\Users\User\AppData\Local\HELP_DECRYPT.TXT" => File/Directory not found.
"C:\Users\User\AppData\Local\HELP_DECRYPT.URL" => File/Directory not found.
"C:\ProgramData\HELP_DECRYPT.HTML" => File/Directory not found.
C:\ProgramData\HELP_DECRYPT.PNG => Moved successfully.
"C:\ProgramData\HELP_DECRYPT.TXT" => File/Directory not found.
"C:\ProgramData\HELP_DECRYPT.URL" => File/Directory not found.
"C:\ProgramData\systemskey.ini" => File/Directory not found.
EmptyTemp: => Removed 4.3 GB temporary data.
 
 
The system needed a reboot. 
 
==== End of Fixlog 09:28:52 ====
 
***********************************************************************************************
After rebooting my computer in the normal boot I don't see the virus files ( HTML page and PNG picture) any more at the the start up of my computer.

 

But I still have my previous files encrypted (Not important files anyway) .

 

I downloaded some new files to test if the Virus is still working in the background state and see if it going to encrypt them too!

 

What do you think? The virus is gone forever ?

 

Thanks a lot Fireman4it! Your assistance was very helpful :)



#7 fireman4it

fireman4it

    Bleepin' Fireman


  • Malware Response Team
  • 13,505 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Greenup, Ill USA
  • Local time:04:07 PM

Posted 09 February 2015 - 10:50 PM

Farbar's Recovery Scan Tool Search

--------------------

    Launch FRST
    Copy/paste the following in the Search Field

*decrypt*

    Click Search File(s) button
    When completed click OK and a Search.txt document will open on your desktop
    Copy and paste the contents of that document your reply


Edited by fireman4it, 09 February 2015 - 10:50 PM.

" Extinguishing Malware from the world"

The Virus, Trojan, Spyware, and Malware Removal forum is very busy. If I'm helping you and I've not posted back within 24 hrs., send a PM with your topic link. Thank you.

ALL OTHER HELP REQUESTS VIA THE PM SYSTEM WILL BE IGNORED. The Forums are there for a reason!
Thanks-


  userbar_eis_500.gif

If I have helped you, consider making a donation to help me continue the fight against Malware! Just click btn_donate_LG.gif


#8 ysn_chy

ysn_chy
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:09:07 PM

Posted 10 February 2015 - 04:27 AM

Good day FireMan4It!

 

I checked The files that I had saved in my PC yesterday, they are not encrypted after running the FRST fix tool as you instructed in your last replay.

 

but here is the content of search.txt 

 

***********************************************************************************************************

Farbar Recovery Scan Tool (x64) Version: 08-02-2015
Ran by User at 2015-02-10 09:19:24
Running from C:\Users\User\Downloads\Programs
Boot Mode: Normal
 
================== Search Files: "*decrypt*" =============
 
C:\Users\HELP_DECRYPT.PNG
[2015-02-02 14:44][2015-02-02 14:44] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\HELP_DECRYPT.PNG
[2015-02-02 14:44][2015-02-02 14:44] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\Downloads\Softwares\HELP_DECRYPT.HTML
[2015-02-02 14:43][2015-02-02 14:43] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\Downloads\Softwares\HELP_DECRYPT.PNG
[2015-02-02 14:43][2015-02-02 14:43] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\Downloads\Softwares\HELP_DECRYPT.TXT
[2015-02-02 14:43][2015-02-02 14:43] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\Downloads\Softwares\HELP_DECRYPT.URL
[2015-02-02 14:43][2015-02-02 14:43] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\Downloads\Softwares\Grandstream\HELP_DECRYPT.HTML
[2015-02-02 14:43][2015-02-02 14:43] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\Downloads\Softwares\Grandstream\HELP_DECRYPT.PNG
[2015-02-02 14:43][2015-02-02 14:43] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\Downloads\Softwares\Grandstream\HELP_DECRYPT.TXT
[2015-02-02 14:43][2015-02-02 14:43] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\Downloads\Softwares\Grandstream\HELP_DECRYPT.URL
[2015-02-02 14:43][2015-02-02 14:43] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\HELP_DECRYPT.HTML
[2015-02-02 14:42][2015-02-02 14:42] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\HELP_DECRYPT.PNG
[2015-02-02 14:42][2015-02-02 14:42] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\HELP_DECRYPT.TXT
[2015-02-02 14:42][2015-02-02 14:42] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\HELP_DECRYPT.URL
[2015-02-02 14:42][2015-02-02 14:42] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\Swiss German\HELP_DECRYPT.HTML
[2015-02-02 14:42][2015-02-02 14:42] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\Swiss German\HELP_DECRYPT.PNG
[2015-02-02 14:42][2015-02-02 14:42] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\Swiss German\HELP_DECRYPT.TXT
[2015-02-02 14:42][2015-02-02 14:42] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\Swiss German\HELP_DECRYPT.URL
[2015-02-02 14:42][2015-02-02 14:42] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\Pims - Learn German\HELP_DECRYPT.HTML
[2015-02-02 14:40][2015-02-02 14:40] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\Pims - Learn German\HELP_DECRYPT.PNG
[2015-02-02 14:40][2015-02-02 14:40] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\Pims - Learn German\HELP_DECRYPT.TXT
[2015-02-02 14:40][2015-02-02 14:40] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\Pims - Learn German\HELP_DECRYPT.URL
[2015-02-02 14:40][2015-02-02 14:40] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\Learn German (Pimsleur) (4 Audio CDs - MP3)\HELP_DECRYPT.HTML
[2015-02-02 14:39][2015-02-02 14:39] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\Learn German (Pimsleur) (4 Audio CDs - MP3)\HELP_DECRYPT.PNG
[2015-02-02 14:39][2015-02-02 14:39] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\Learn German (Pimsleur) (4 Audio CDs - MP3)\HELP_DECRYPT.TXT
[2015-02-02 14:39][2015-02-02 14:39] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\Learn German (Pimsleur) (4 Audio CDs - MP3)\HELP_DECRYPT.URL
[2015-02-02 14:39][2015-02-02 14:39] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\Instant Conversation German\HELP_DECRYPT.HTML
[2015-02-02 14:38][2015-02-02 14:38] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\Instant Conversation German\HELP_DECRYPT.PNG
[2015-02-02 14:38][2015-02-02 14:38] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\Instant Conversation German\HELP_DECRYPT.TXT
[2015-02-02 14:38][2015-02-02 14:38] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\Instant Conversation German\HELP_DECRYPT.URL
[2015-02-02 14:38][2015-02-02 14:38] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German Plus\HELP_DECRYPT.HTML
[2015-02-02 14:37][2015-02-02 14:37] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German Plus\HELP_DECRYPT.PNG
[2015-02-02 14:37][2015-02-02 14:37] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German Plus\HELP_DECRYPT.TXT
[2015-02-02 14:37][2015-02-02 14:37] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German Plus\HELP_DECRYPT.URL
[2015-02-02 14:37][2015-02-02 14:37] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German III\HELP_DECRYPT.HTML
[2015-02-02 14:37][2015-02-02 14:37] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German III\HELP_DECRYPT.PNG
[2015-02-02 14:37][2015-02-02 14:37] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German III\HELP_DECRYPT.TXT
[2015-02-02 14:37][2015-02-02 14:37] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German III\HELP_DECRYPT.URL
[2015-02-02 14:37][2015-02-02 14:37] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German II\HELP_DECRYPT.HTML
[2015-02-02 14:36][2015-02-02 14:36] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German II\HELP_DECRYPT.PNG
[2015-02-02 14:36][2015-02-02 14:36] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German II\HELP_DECRYPT.TXT
[2015-02-02 14:36][2015-02-02 14:36] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German II\HELP_DECRYPT.URL
[2015-02-02 14:36][2015-02-02 14:36] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German I\HELP_DECRYPT.HTML
[2015-02-02 14:36][2015-02-02 14:36] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German I\HELP_DECRYPT.PNG
[2015-02-02 14:36][2015-02-02 14:36] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German I\HELP_DECRYPT.TXT
[2015-02-02 14:36][2015-02-02 14:36] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German I\HELP_DECRYPT.URL
[2015-02-02 14:36][2015-02-02 14:36] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\HELP_DECRYPT.HTML
[2015-02-02 14:34][2015-02-02 14:34] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\HELP_DECRYPT.PNG
[2015-02-02 14:34][2015-02-02 14:34] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\HELP_DECRYPT.TXT
[2015-02-02 14:34][2015-02-02 14:34] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\HELP_DECRYPT.URL
[2015-02-02 14:34][2015-02-02 14:34] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\Instant Conversation German\HELP_DECRYPT.HTML
[2015-02-02 14:34][2015-02-02 14:34] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\Instant Conversation German\HELP_DECRYPT.PNG
[2015-02-02 14:34][2015-02-02 14:34] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\Instant Conversation German\HELP_DECRYPT.TXT
[2015-02-02 14:34][2015-02-02 14:34] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\Instant Conversation German\HELP_DECRYPT.URL
[2015-02-02 14:34][2015-02-02 14:34] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\German Plus\HELP_DECRYPT.HTML
[2015-02-02 14:33][2015-02-02 14:33] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\German Plus\HELP_DECRYPT.PNG
[2015-02-02 14:33][2015-02-02 14:33] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\German Plus\HELP_DECRYPT.TXT
[2015-02-02 14:33][2015-02-02 14:33] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\German Plus\HELP_DECRYPT.URL
[2015-02-02 14:33][2015-02-02 14:33] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\German III\HELP_DECRYPT.HTML
[2015-02-02 14:33][2015-02-02 14:33] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\German III\HELP_DECRYPT.PNG
[2015-02-02 14:33][2015-02-02 14:33] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\German III\HELP_DECRYPT.TXT
[2015-02-02 14:33][2015-02-02 14:33] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\German III\HELP_DECRYPT.URL
[2015-02-02 14:33][2015-02-02 14:33] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\German II\HELP_DECRYPT.HTML
[2015-02-02 14:32][2015-02-02 14:32] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\German II\HELP_DECRYPT.PNG
[2015-02-02 14:32][2015-02-02 14:32] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\German II\HELP_DECRYPT.TXT
[2015-02-02 14:32][2015-02-02 14:32] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\German II\HELP_DECRYPT.URL
[2015-02-02 14:32][2015-02-02 14:32] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\German I\HELP_DECRYPT.HTML
[2015-02-02 14:31][2015-02-02 14:31] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\German I\HELP_DECRYPT.PNG
[2015-02-02 14:31][2015-02-02 14:31] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\German I\HELP_DECRYPT.TXT
[2015-02-02 14:31][2015-02-02 14:31] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\German I\HELP_DECRYPT.URL
[2015-02-02 14:31][2015-02-02 14:31] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\einz\HELP_DECRYPT.HTML
[2015-02-02 14:30][2015-02-02 14:30] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\einz\HELP_DECRYPT.PNG
[2015-02-02 14:30][2015-02-02 14:30] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\einz\HELP_DECRYPT.TXT
[2015-02-02 14:30][2015-02-02 14:30] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\einz\HELP_DECRYPT.URL
[2015-02-02 14:30][2015-02-02 14:30] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\Documents\technicaldocumentstoread\VoIP\HELP_DECRYPT.HTML
[2015-02-02 14:28][2015-02-02 14:28] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\Documents\technicaldocumentstoread\VoIP\HELP_DECRYPT.PNG
[2015-02-02 14:28][2015-02-02 14:28] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\Documents\technicaldocumentstoread\VoIP\HELP_DECRYPT.TXT
[2015-02-02 14:28][2015-02-02 14:28] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\Documents\technicaldocumentstoread\VoIP\HELP_DECRYPT.URL
[2015-02-02 14:28][2015-02-02 14:28] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\Documents\technicaldocumentstoread\Troubleshooting\HELP_DECRYPT.HTML
[2015-02-02 14:28][2015-02-02 14:28] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\Documents\technicaldocumentstoread\Troubleshooting\HELP_DECRYPT.PNG
[2015-02-02 14:28][2015-02-02 14:28] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\Documents\technicaldocumentstoread\Troubleshooting\HELP_DECRYPT.TXT
[2015-02-02 14:28][2015-02-02 14:28] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\Documents\technicaldocumentstoread\Troubleshooting\HELP_DECRYPT.URL
[2015-02-02 14:28][2015-02-02 14:28] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\Documents\technicaldocumentstoread\Surveillance\HELP_DECRYPT.HTML
[2015-02-02 14:28][2015-02-02 14:28] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\Documents\technicaldocumentstoread\Surveillance\HELP_DECRYPT.PNG
[2015-02-02 14:28][2015-02-02 14:28] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\Documents\technicaldocumentstoread\Surveillance\HELP_DECRYPT.TXT
[2015-02-02 14:28][2015-02-02 14:28] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\Documents\technicaldocumentstoread\Surveillance\HELP_DECRYPT.URL
[2015-02-02 14:28][2015-02-02 14:28] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\Documents\technicaldocumentstoread\Surveillance\How To\HELP_DECRYPT.HTML
[2015-02-02 14:28][2015-02-02 14:28] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\Documents\technicaldocumentstoread\Surveillance\How To\HELP_DECRYPT.PNG
[2015-02-02 14:28][2015-02-02 14:28] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\Documents\technicaldocumentstoread\Surveillance\How To\HELP_DECRYPT.TXT
[2015-02-02 14:28][2015-02-02 14:28] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\Documents\technicaldocumentstoread\Surveillance\How To\HELP_DECRYPT.URL
[2015-02-02 14:28][2015-02-02 14:28] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\Documents\technicaldocumentstoread\Surveillance\How To\Tutos\HELP_DECRYPT.HTML
[2015-02-02 14:28][2015-02-02 14:28] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\Documents\technicaldocumentstoread\Surveillance\How To\Tutos\HELP_DECRYPT.PNG
[2015-02-02 14:28][2015-02-02 14:28] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\Documents\technicaldocumentstoread\Surveillance\How To\Tutos\HELP_DECRYPT.TXT
[2015-02-02 14:28][2015-02-02 14:28] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\Documents\technicaldocumentstoread\Surveillance\How To\Tutos\HELP_DECRYPT.URL
[2015-02-02 14:28][2015-02-02 14:28] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\Documents\technicaldocumentstoread\Networking\HELP_DECRYPT.HTML
[2015-02-02 14:28][2015-02-02 14:28] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\Documents\technicaldocumentstoread\Networking\HELP_DECRYPT.PNG
[2015-02-02 14:28][2015-02-02 14:28] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\Documents\technicaldocumentstoread\Networking\HELP_DECRYPT.TXT
[2015-02-02 14:28][2015-02-02 14:28] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\Documents\technicaldocumentstoread\Networking\HELP_DECRYPT.URL
[2015-02-02 14:28][2015-02-02 14:28] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Roaming\uTorrent\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Roaming\uTorrent\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Roaming\uTorrent\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Roaming\uTorrent\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Roaming\uTorrent\apps\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Roaming\uTorrent\apps\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Roaming\uTorrent\apps\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Roaming\uTorrent\apps\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Roaming\TeamViewer\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Roaming\TeamViewer\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Roaming\TeamViewer\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Roaming\TeamViewer\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Roaming\Skype\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Roaming\Skype\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Roaming\Skype\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Roaming\Skype\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Roaming\Skype\shared_httpfe\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Roaming\Skype\shared_httpfe\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Roaming\Skype\shared_httpfe\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Roaming\Skype\shared_httpfe\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Roaming\Skype\shared_dynco\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Roaming\Skype\shared_dynco\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Roaming\Skype\shared_dynco\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Roaming\Skype\shared_dynco\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Roaming\Notepad++\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Roaming\Notepad++\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Roaming\Notepad++\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Roaming\Notepad++\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Roaming\Notepad++\plugins\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Roaming\Notepad++\plugins\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Roaming\Notepad++\plugins\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Roaming\Notepad++\plugins\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Roaming\Notepad++\plugins\config\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Roaming\Notepad++\plugins\config\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Roaming\Notepad++\plugins\config\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Roaming\Notepad++\plugins\config\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Roaming\Microsoft\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Roaming\Microsoft\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Roaming\Microsoft\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Roaming\Microsoft\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Roaming\Microsoft\Windows Photo Viewer\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Roaming\Microsoft\Windows Photo Viewer\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Roaming\Microsoft\Windows Photo Viewer\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Roaming\Microsoft\Windows Photo Viewer\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Roaming\Microsoft\Templates\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Roaming\Microsoft\Templates\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Roaming\Microsoft\Templates\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Roaming\Microsoft\Templates\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Roaming\Microsoft\Document Building Blocks\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Roaming\Microsoft\Document Building Blocks\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Roaming\Microsoft\Document Building Blocks\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Roaming\Microsoft\Document Building Blocks\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Roaming\Microsoft\Document Building Blocks\1033\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Roaming\Microsoft\Document Building Blocks\1033\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Roaming\Microsoft\Document Building Blocks\1033\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Roaming\Microsoft\Document Building Blocks\1033\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Roaming\IDM\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Roaming\IDM\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Roaming\IDM\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Roaming\IDM\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Roaming\IDM\DwnlData\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Roaming\IDM\DwnlData\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Roaming\IDM\DwnlData\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Roaming\IDM\DwnlData\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Roaming\IDM\DwnlData\User\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Roaming\IDM\DwnlData\User\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Roaming\IDM\DwnlData\User\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Roaming\IDM\DwnlData\User\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Roaming\IDM\DwnlData\User\Suits.S04E11.Loadtv.biz_50\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Roaming\IDM\DwnlData\User\Suits.S04E11.Loadtv.biz_50\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Roaming\IDM\DwnlData\User\Suits.S04E11.Loadtv.biz_50\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Roaming\IDM\DwnlData\User\Suits.S04E11.Loadtv.biz_50\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\LocalLow\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\LocalLow\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\LocalLow\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\LocalLow\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\LocalLow\Microsoft\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\LocalLow\Microsoft\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\LocalLow\Microsoft\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\LocalLow\Microsoft\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\1\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\1\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\1\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\1\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\1\s\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\1\s\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\1\s\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\1\s\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\1\s\qyzgmprsrfvdi1dud3uhxotpjjuckeishl2ttb4tzqqxe1rezlaaaaha\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\1\s\qyzgmprsrfvdi1dud3uhxotpjjuckeishl2ttb4tzqqxe1rezlaaaaha\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\1\s\qyzgmprsrfvdi1dud3uhxotpjjuckeishl2ttb4tzqqxe1rezlaaaaha\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\1\s\qyzgmprsrfvdi1dud3uhxotpjjuckeishl2ttb4tzqqxe1rezlaaaaha\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\1\s\qyzgmprsrfvdi1dud3uhxotpjjuckeishl2ttb4tzqqxe1rezlaaaaha\f\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\1\s\qyzgmprsrfvdi1dud3uhxotpjjuckeishl2ttb4tzqqxe1rezlaaaaha\f\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\1\s\qyzgmprsrfvdi1dud3uhxotpjjuckeishl2ttb4tzqqxe1rezlaaaaha\f\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\1\s\qyzgmprsrfvdi1dud3uhxotpjjuckeishl2ttb4tzqqxe1rezlaaaaha\f\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Skype\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Skype\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Skype\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Skype\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Skype\Apps\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Skype\Apps\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Skype\Apps\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Skype\Apps\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Skype\Apps\login\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Skype\Apps\login\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Skype\Apps\login\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Skype\Apps\login\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Skype\Apps\login\images\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Skype\Apps\login\images\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Skype\Apps\login\images\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Skype\Apps\login\images\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Microsoft\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Microsoft\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Microsoft\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Microsoft\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Microsoft\Windows Media\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Microsoft\Windows Media\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Microsoft\Windows Media\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Microsoft\Windows Media\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Microsoft\Windows Media\12.0\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Microsoft\Windows Media\12.0\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Microsoft\Windows Media\12.0\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Microsoft\Windows Media\12.0\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Microsoft\Windows Mail\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Microsoft\Windows Mail\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Microsoft\Windows Mail\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Microsoft\Windows Mail\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Microsoft\Windows Mail\Stationery\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Microsoft\Windows Mail\Stationery\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Microsoft\Windows Mail\Stationery\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Microsoft\Windows Mail\Stationery\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Microsoft\Windows Mail\Backup\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Microsoft\Windows Mail\Backup\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Microsoft\Windows Mail\Backup\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Microsoft\Windows Mail\Backup\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Microsoft\Windows Mail\Backup\new\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Microsoft\Windows Mail\Backup\new\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Microsoft\Windows Mail\Backup\new\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Microsoft\Windows Mail\Backup\new\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Microsoft\Internet Explorer\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Microsoft\Internet Explorer\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Microsoft\Internet Explorer\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Microsoft\Internet Explorer\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Microsoft\Device Metadata\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Microsoft\Device Metadata\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Microsoft\Device Metadata\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Microsoft\Device Metadata\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Google\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Google\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Google\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Google\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Google\Chrome\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Google\Chrome\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Google\Chrome\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Google\Chrome\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Sync Data Backup\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Sync Data Backup\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Sync Data Backup\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Sync Data Backup\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\def\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\def\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\def\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\def\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\def\databases\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\def\databases\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\def\databases\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\def\databases\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.google.com_0.indexeddb.leveldb\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.google.com_0.indexeddb.leveldb\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.google.com_0.indexeddb.leveldb\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.google.com_0.indexeddb.leveldb\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_inbox.google.com_0.indexeddb.leveldb\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_inbox.google.com_0.indexeddb.leveldb\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_inbox.google.com_0.indexeddb.leveldb\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_inbox.google.com_0.indexeddb.leveldb\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\1.9.10_0\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\1.9.10_0\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\1.9.10_0\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\1.9.10_0\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\1.9.10_0\sites\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\1.9.10_0\sites\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\1.9.10_0\sites\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\1.9.10_0\sites\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\1.9.10_0\sites\global\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\1.9.10_0\sites\global\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\1.9.10_0\sites\global\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\1.9.10_0\sites\global\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\1.9.10_0\sites\global\fonts\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\1.9.10_0\sites\global\fonts\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\1.9.10_0\sites\global\fonts\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\1.9.10_0\sites\global\fonts\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_1\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_1\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_1\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_1\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_1\audio\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_1\audio\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_1\audio\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_1\audio\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\All Users\Microsoft\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\All Users\Microsoft\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\All Users\Microsoft\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\All Users\Microsoft\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\All Users\Microsoft\RAC\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\All Users\Microsoft\RAC\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\All Users\Microsoft\RAC\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\All Users\Microsoft\RAC\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\All Users\Microsoft\RAC\StateData\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\All Users\Microsoft\RAC\StateData\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\All Users\Microsoft\RAC\StateData\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\All Users\Microsoft\RAC\StateData\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\All Users\Microsoft\RAC\PublishedData\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\All Users\Microsoft\RAC\PublishedData\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\All Users\Microsoft\RAC\PublishedData\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\All Users\Microsoft\RAC\PublishedData\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\All Users\Dell\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\All Users\Dell\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\All Users\Dell\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\All Users\Dell\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\All Users\Dell\UpdatePackage\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\All Users\Dell\UpdatePackage\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\All Users\Dell\UpdatePackage\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\All Users\Dell\UpdatePackage\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\All Users\Dell\UpdatePackage\Log\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\All Users\Dell\UpdatePackage\Log\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\All Users\Dell\UpdatePackage\Log\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\All Users\Dell\UpdatePackage\Log\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Snapshot\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Snapshot\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Snapshot\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Snapshot\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Snapshot\2015-01-23\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Snapshot\2015-01-23\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Snapshot\2015-01-23\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Snapshot\2015-01-23\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Snapshot\2015-01-22\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Snapshot\2015-01-22\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Snapshot\2015-01-22\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Snapshot\2015-01-22\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Snapshot\2015-01-21\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Snapshot\2015-01-21\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Snapshot\2015-01-21\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Snapshot\2015-01-21\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\ProgramData\Microsoft\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\ProgramData\Microsoft\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\ProgramData\Microsoft\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\ProgramData\Microsoft\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\ProgramData\Microsoft\RAC\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\ProgramData\Microsoft\RAC\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\ProgramData\Microsoft\RAC\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\ProgramData\Microsoft\RAC\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\ProgramData\Microsoft\RAC\StateData\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\ProgramData\Microsoft\RAC\StateData\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\ProgramData\Microsoft\RAC\StateData\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\ProgramData\Microsoft\RAC\StateData\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\ProgramData\Microsoft\RAC\PublishedData\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\ProgramData\Microsoft\RAC\PublishedData\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\ProgramData\Microsoft\RAC\PublishedData\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\ProgramData\Microsoft\RAC\PublishedData\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\ProgramData\Dell\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\ProgramData\Dell\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\ProgramData\Dell\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\ProgramData\Dell\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\ProgramData\Dell\UpdatePackage\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\ProgramData\Dell\UpdatePackage\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\ProgramData\Dell\UpdatePackage\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\ProgramData\Dell\UpdatePackage\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\ProgramData\Dell\UpdatePackage\Log\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\ProgramData\Dell\UpdatePackage\Log\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\ProgramData\Dell\UpdatePackage\Log\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\ProgramData\Dell\UpdatePackage\Log\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\FRST\Quarantine\C\Users\HELP_DECRYPT.HTML.xBAD
[2015-02-02 14:44][2015-02-02 14:44] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\FRST\Quarantine\C\Users\HELP_DECRYPT.TXT.xBAD
[2015-02-02 14:44][2015-02-02 14:44] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\FRST\Quarantine\C\Users\HELP_DECRYPT.URL.xBAD
[2015-02-02 14:44][2015-02-02 14:44] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\FRST\Quarantine\C\Users\User\HELP_DECRYPT.HTML.xBAD
[2015-02-02 14:44][2015-02-02 14:44] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\FRST\Quarantine\C\Users\User\HELP_DECRYPT.TXT.xBAD
[2015-02-02 14:44][2015-02-02 14:44] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\FRST\Quarantine\C\Users\User\HELP_DECRYPT.URL.xBAD
[2015-02-02 14:44][2015-02-02 14:44] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\FRST\Quarantine\C\Users\User\Desktop\HELP_DECRYPT.HTML.xBAD
[2015-02-02 14:44][2015-02-02 14:44] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\FRST\Quarantine\C\Users\User\Desktop\HELP_DECRYPT.URL.xBAD
[2015-02-02 14:44][2015-02-02 14:44] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\FRST\Quarantine\C\Users\User\AppData\HELP_DECRYPT.HTML.xBAD
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\FRST\Quarantine\C\Users\User\AppData\HELP_DECRYPT.TXT.xBAD
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\FRST\Quarantine\C\Users\User\AppData\HELP_DECRYPT.URL.xBAD
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\FRST\Quarantine\C\Users\User\AppData\Roaming\HELP_DECRYPT.HTML.xBAD
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\FRST\Quarantine\C\Users\User\AppData\Roaming\HELP_DECRYPT.PNG.xBAD
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\FRST\Quarantine\C\Users\User\AppData\Roaming\HELP_DECRYPT.TXT.xBAD
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\FRST\Quarantine\C\Users\User\AppData\Roaming\HELP_DECRYPT.URL.xBAD
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\FRST\Quarantine\C\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HELP_DECRYPT.HTML.xBAD
[2015-02-02 14:44][2015-02-02 14:44] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\FRST\Quarantine\C\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HELP_DECRYPT.PNG.xBAD
[2015-02-02 14:44][2015-02-02 14:44] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\FRST\Quarantine\C\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HELP_DECRYPT.TXT.xBAD
[2015-02-02 14:44][2015-02-02 14:44] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\FRST\Quarantine\C\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HELP_DECRYPT.URL.xBAD
[2015-02-02 14:44][2015-02-02 14:44] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\FRST\Quarantine\C\Users\User\AppData\Local\HELP_DECRYPT.HTML.xBAD
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\FRST\Quarantine\C\Users\User\AppData\Local\HELP_DECRYPT.PNG.xBAD
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\FRST\Quarantine\C\Users\User\AppData\Local\HELP_DECRYPT.TXT.xBAD
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\FRST\Quarantine\C\Users\User\AppData\Local\HELP_DECRYPT.URL.xBAD
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\FRST\Quarantine\C\Users\User\AppData\Local\YnqPack\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\FRST\Quarantine\C\Users\User\AppData\Local\YnqPack\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\FRST\Quarantine\C\Users\User\AppData\Local\YnqPack\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\FRST\Quarantine\C\Users\User\AppData\Local\YnqPack\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\FRST\Quarantine\C\Users\User\AppData\Local\UZmedia\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\FRST\Quarantine\C\Users\User\AppData\Local\UZmedia\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\FRST\Quarantine\C\Users\User\AppData\Local\UZmedia\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\FRST\Quarantine\C\Users\User\AppData\Local\UZmedia\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\FRST\Quarantine\C\ProgramData\HELP_DECRYPT.HTML.xBAD
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\FRST\Quarantine\C\ProgramData\HELP_DECRYPT.PNG.xBAD
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\FRST\Quarantine\C\ProgramData\HELP_DECRYPT.TXT.xBAD
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\FRST\Quarantine\C\ProgramData\HELP_DECRYPT.URL.xBAD
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Capture\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Capture\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Capture\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Capture\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Capture\2015-01-23\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Capture\2015-01-23\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Capture\2015-01-23\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Capture\2015-01-23\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Capture\2015-01-22\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Capture\2015-01-22\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Capture\2015-01-22\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Capture\2015-01-22\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\$Recycle.Bin\HELP_DECRYPT.HTML
[2015-02-02 14:26][2015-02-02 14:26] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\$Recycle.Bin\HELP_DECRYPT.PNG
[2015-02-02 14:26][2015-02-02 14:26] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\$Recycle.Bin\HELP_DECRYPT.TXT
[2015-02-02 14:26][2015-02-02 14:26] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\$Recycle.Bin\HELP_DECRYPT.URL
[2015-02-02 14:26][2015-02-02 14:26] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\$Recycle.Bin\S-1-5-21-3253091791-2452062266-442295166-1000\HELP_DECRYPT.HTML
[2015-02-02 14:26][2015-02-02 14:26] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\$Recycle.Bin\S-1-5-21-3253091791-2452062266-442295166-1000\HELP_DECRYPT.PNG
[2015-02-02 14:26][2015-02-02 14:26] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\$Recycle.Bin\S-1-5-21-3253091791-2452062266-442295166-1000\HELP_DECRYPT.TXT
[2015-02-02 14:26][2015-02-02 14:26] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\$Recycle.Bin\S-1-5-21-3253091791-2452062266-442295166-1000\HELP_DECRYPT.URL
[2015-02-02 14:26][2015-02-02 14:26] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\$Recycle.Bin\S-1-5-21-3253091791-2452062266-442295166-1000\$RPKNRCF\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\$Recycle.Bin\S-1-5-21-3253091791-2452062266-442295166-1000\$RPKNRCF\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\$Recycle.Bin\S-1-5-21-3253091791-2452062266-442295166-1000\$RPKNRCF\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\$Recycle.Bin\S-1-5-21-3253091791-2452062266-442295166-1000\$RPKNRCF\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\$Recycle.Bin\S-1-5-21-3253091791-2452062266-442295166-1000\$RNDFC1T\HELP_DECRYPT.HTML
[2015-02-02 14:28][2015-02-02 14:28] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\$Recycle.Bin\S-1-5-21-3253091791-2452062266-442295166-1000\$RNDFC1T\HELP_DECRYPT.PNG
[2015-02-02 14:28][2015-02-02 14:28] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\$Recycle.Bin\S-1-5-21-3253091791-2452062266-442295166-1000\$RNDFC1T\HELP_DECRYPT.TXT
[2015-02-02 14:28][2015-02-02 14:28] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\$Recycle.Bin\S-1-5-21-3253091791-2452062266-442295166-1000\$RNDFC1T\HELP_DECRYPT.URL
[2015-02-02 14:28][2015-02-02 14:28] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
====== End Of Search ======


#9 fireman4it

fireman4it

    Bleepin' Fireman


  • Malware Response Team
  • 13,505 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Greenup, Ill USA
  • Local time:04:07 PM

Posted 10 February 2015 - 08:09 PM

Download attached fixlist.txt file and save it to the Desktop.

NOTE. It's important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

Run FRST/FRST64 and press the Fix button just once and wait.
If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.

 

 

Attached File  fixlist.txt   160.79KB   7 downloads

 

How is the machine still running?

 


" Extinguishing Malware from the world"

The Virus, Trojan, Spyware, and Malware Removal forum is very busy. If I'm helping you and I've not posted back within 24 hrs., send a PM with your topic link. Thank you.

ALL OTHER HELP REQUESTS VIA THE PM SYSTEM WILL BE IGNORED. The Forums are there for a reason!
Thanks-


  userbar_eis_500.gif

If I have helped you, consider making a donation to help me continue the fight against Malware! Just click btn_donate_LG.gif


#10 ysn_chy

ysn_chy
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:09:07 PM

Posted 11 February 2015 - 04:46 AM

Good day Fireman4it!

 

I put both FRST64 and fixlist.txt in the desktop and i run  FRST64, the fix only last for like 3 seconds. it didn't ask for restart. 

 

What I can notice is my Machine is clean now from unwanted files like :

 

-HELP_DECRYPT.TXT

-HELP_DECRYPT.PNG

-HELP_DECRYPT.HTML

 

New files are not encrypted, but I still see my previous files encrypted (Pictures, PDFs..) 

 

here is the content of Fixlog.txt:



#11 ysn_chy

ysn_chy
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:09:07 PM

Posted 11 February 2015 - 04:48 AM

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 08-02-2015
Ran by User at 2015-02-11 09:23:19 Run:2
Running from C:\Users\User\Desktop
Loaded Profiles: User (Available profiles: User)
Boot Mode: Normal
==============================================
 
Content of fixlist:
*****************
C:\Users\HELP_DECRYPT.PNG
[2015-02-02 14:44][2015-02-02 14:44] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\HELP_DECRYPT.PNG
[2015-02-02 14:44][2015-02-02 14:44] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\Downloads\Softwares\HELP_DECRYPT.HTML
[2015-02-02 14:43][2015-02-02 14:43] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\Downloads\Softwares\HELP_DECRYPT.PNG
[2015-02-02 14:43][2015-02-02 14:43] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\Downloads\Softwares\HELP_DECRYPT.TXT
[2015-02-02 14:43][2015-02-02 14:43] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\Downloads\Softwares\HELP_DECRYPT.URL
[2015-02-02 14:43][2015-02-02 14:43] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\Downloads\Softwares\Grandstream\HELP_DECRYPT.HTML
[2015-02-02 14:43][2015-02-02 14:43] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\Downloads\Softwares\Grandstream\HELP_DECRYPT.PNG
[2015-02-02 14:43][2015-02-02 14:43] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\Downloads\Softwares\Grandstream\HELP_DECRYPT.TXT
[2015-02-02 14:43][2015-02-02 14:43] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\Downloads\Softwares\Grandstream\HELP_DECRYPT.URL
[2015-02-02 14:43][2015-02-02 14:43] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\HELP_DECRYPT.HTML
[2015-02-02 14:42][2015-02-02 14:42] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\HELP_DECRYPT.PNG
[2015-02-02 14:42][2015-02-02 14:42] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\HELP_DECRYPT.TXT
[2015-02-02 14:42][2015-02-02 14:42] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\HELP_DECRYPT.URL
[2015-02-02 14:42][2015-02-02 14:42] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\Swiss German\HELP_DECRYPT.HTML
[2015-02-02 14:42][2015-02-02 14:42] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\Swiss German\HELP_DECRYPT.PNG
[2015-02-02 14:42][2015-02-02 14:42] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\Swiss German\HELP_DECRYPT.TXT
[2015-02-02 14:42][2015-02-02 14:42] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\Swiss German\HELP_DECRYPT.URL
[2015-02-02 14:42][2015-02-02 14:42] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\Pims - Learn German\HELP_DECRYPT.HTML
[2015-02-02 14:40][2015-02-02 14:40] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\Pims - Learn German\HELP_DECRYPT.PNG
[2015-02-02 14:40][2015-02-02 14:40] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\Pims - Learn German\HELP_DECRYPT.TXT
[2015-02-02 14:40][2015-02-02 14:40] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\Pims - Learn German\HELP_DECRYPT.URL
[2015-02-02 14:40][2015-02-02 14:40] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\Learn German (Pimsleur) (4 Audio CDs - MP3)\HELP_DECRYPT.HTML
[2015-02-02 14:39][2015-02-02 14:39] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\Learn German (Pimsleur) (4 Audio CDs - MP3)\HELP_DECRYPT.PNG
[2015-02-02 14:39][2015-02-02 14:39] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\Learn German (Pimsleur) (4 Audio CDs - MP3)\HELP_DECRYPT.TXT
[2015-02-02 14:39][2015-02-02 14:39] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\Learn German (Pimsleur) (4 Audio CDs - MP3)\HELP_DECRYPT.URL
[2015-02-02 14:39][2015-02-02 14:39] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\Instant Conversation German\HELP_DECRYPT.HTML
[2015-02-02 14:38][2015-02-02 14:38] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\Instant Conversation German\HELP_DECRYPT.PNG
[2015-02-02 14:38][2015-02-02 14:38] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\Instant Conversation German\HELP_DECRYPT.TXT
[2015-02-02 14:38][2015-02-02 14:38] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\Instant Conversation German\HELP_DECRYPT.URL
[2015-02-02 14:38][2015-02-02 14:38] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German Plus\HELP_DECRYPT.HTML
[2015-02-02 14:37][2015-02-02 14:37] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German Plus\HELP_DECRYPT.PNG
[2015-02-02 14:37][2015-02-02 14:37] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German Plus\HELP_DECRYPT.TXT
[2015-02-02 14:37][2015-02-02 14:37] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German Plus\HELP_DECRYPT.URL
[2015-02-02 14:37][2015-02-02 14:37] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German III\HELP_DECRYPT.HTML
[2015-02-02 14:37][2015-02-02 14:37] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German III\HELP_DECRYPT.PNG
[2015-02-02 14:37][2015-02-02 14:37] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German III\HELP_DECRYPT.TXT
[2015-02-02 14:37][2015-02-02 14:37] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German III\HELP_DECRYPT.URL
[2015-02-02 14:37][2015-02-02 14:37] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German II\HELP_DECRYPT.HTML
[2015-02-02 14:36][2015-02-02 14:36] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German II\HELP_DECRYPT.PNG
[2015-02-02 14:36][2015-02-02 14:36] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German II\HELP_DECRYPT.TXT
[2015-02-02 14:36][2015-02-02 14:36] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German II\HELP_DECRYPT.URL
[2015-02-02 14:36][2015-02-02 14:36] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German I\HELP_DECRYPT.HTML
[2015-02-02 14:36][2015-02-02 14:36] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German I\HELP_DECRYPT.PNG
[2015-02-02 14:36][2015-02-02 14:36] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German I\HELP_DECRYPT.TXT
[2015-02-02 14:36][2015-02-02 14:36] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German I\HELP_DECRYPT.URL
[2015-02-02 14:36][2015-02-02 14:36] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\HELP_DECRYPT.HTML
[2015-02-02 14:34][2015-02-02 14:34] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\HELP_DECRYPT.PNG
[2015-02-02 14:34][2015-02-02 14:34] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\HELP_DECRYPT.TXT
[2015-02-02 14:34][2015-02-02 14:34] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\HELP_DECRYPT.URL
[2015-02-02 14:34][2015-02-02 14:34] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\Instant Conversation German\HELP_DECRYPT.HTML
[2015-02-02 14:34][2015-02-02 14:34] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\Instant Conversation German\HELP_DECRYPT.PNG
[2015-02-02 14:34][2015-02-02 14:34] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\Instant Conversation German\HELP_DECRYPT.TXT
[2015-02-02 14:34][2015-02-02 14:34] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\Instant Conversation German\HELP_DECRYPT.URL
[2015-02-02 14:34][2015-02-02 14:34] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\German Plus\HELP_DECRYPT.HTML
[2015-02-02 14:33][2015-02-02 14:33] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\German Plus\HELP_DECRYPT.PNG
[2015-02-02 14:33][2015-02-02 14:33] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\German Plus\HELP_DECRYPT.TXT
[2015-02-02 14:33][2015-02-02 14:33] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\German Plus\HELP_DECRYPT.URL
[2015-02-02 14:33][2015-02-02 14:33] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\German III\HELP_DECRYPT.HTML
[2015-02-02 14:33][2015-02-02 14:33] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\German III\HELP_DECRYPT.PNG
[2015-02-02 14:33][2015-02-02 14:33] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\German III\HELP_DECRYPT.TXT
[2015-02-02 14:33][2015-02-02 14:33] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\German III\HELP_DECRYPT.URL
[2015-02-02 14:33][2015-02-02 14:33] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\German II\HELP_DECRYPT.HTML
[2015-02-02 14:32][2015-02-02 14:32] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\German II\HELP_DECRYPT.PNG
[2015-02-02 14:32][2015-02-02 14:32] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\German II\HELP_DECRYPT.TXT
[2015-02-02 14:32][2015-02-02 14:32] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\German II\HELP_DECRYPT.URL
[2015-02-02 14:32][2015-02-02 14:32] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\German I\HELP_DECRYPT.HTML
[2015-02-02 14:31][2015-02-02 14:31] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\German I\HELP_DECRYPT.PNG
[2015-02-02 14:31][2015-02-02 14:31] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\German I\HELP_DECRYPT.TXT
[2015-02-02 14:31][2015-02-02 14:31] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\German I\HELP_DECRYPT.URL
[2015-02-02 14:31][2015-02-02 14:31] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\einz\HELP_DECRYPT.HTML
[2015-02-02 14:30][2015-02-02 14:30] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\einz\HELP_DECRYPT.PNG
[2015-02-02 14:30][2015-02-02 14:30] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\einz\HELP_DECRYPT.TXT
[2015-02-02 14:30][2015-02-02 14:30] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\Downloads\12 Pims-German-LadyFae\einz\HELP_DECRYPT.URL
[2015-02-02 14:30][2015-02-02 14:30] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\Documents\technicaldocumentstoread\VoIP\HELP_DECRYPT.HTML
[2015-02-02 14:28][2015-02-02 14:28] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\Documents\technicaldocumentstoread\VoIP\HELP_DECRYPT.PNG
[2015-02-02 14:28][2015-02-02 14:28] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\Documents\technicaldocumentstoread\VoIP\HELP_DECRYPT.TXT
[2015-02-02 14:28][2015-02-02 14:28] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\Documents\technicaldocumentstoread\VoIP\HELP_DECRYPT.URL
[2015-02-02 14:28][2015-02-02 14:28] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\Documents\technicaldocumentstoread\Troubleshooting\HELP_DECRYPT.HTML
[2015-02-02 14:28][2015-02-02 14:28] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\Documents\technicaldocumentstoread\Troubleshooting\HELP_DECRYPT.PNG
[2015-02-02 14:28][2015-02-02 14:28] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\Documents\technicaldocumentstoread\Troubleshooting\HELP_DECRYPT.TXT
[2015-02-02 14:28][2015-02-02 14:28] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\Documents\technicaldocumentstoread\Troubleshooting\HELP_DECRYPT.URL
[2015-02-02 14:28][2015-02-02 14:28] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\Documents\technicaldocumentstoread\Surveillance\HELP_DECRYPT.HTML
[2015-02-02 14:28][2015-02-02 14:28] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\Documents\technicaldocumentstoread\Surveillance\HELP_DECRYPT.PNG
[2015-02-02 14:28][2015-02-02 14:28] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\Documents\technicaldocumentstoread\Surveillance\HELP_DECRYPT.TXT
[2015-02-02 14:28][2015-02-02 14:28] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\Documents\technicaldocumentstoread\Surveillance\HELP_DECRYPT.URL
[2015-02-02 14:28][2015-02-02 14:28] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\Documents\technicaldocumentstoread\Surveillance\How To\HELP_DECRYPT.HTML
[2015-02-02 14:28][2015-02-02 14:28] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\Documents\technicaldocumentstoread\Surveillance\How To\HELP_DECRYPT.PNG
[2015-02-02 14:28][2015-02-02 14:28] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\Documents\technicaldocumentstoread\Surveillance\How To\HELP_DECRYPT.TXT
[2015-02-02 14:28][2015-02-02 14:28] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\Documents\technicaldocumentstoread\Surveillance\How To\HELP_DECRYPT.URL
[2015-02-02 14:28][2015-02-02 14:28] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\Documents\technicaldocumentstoread\Surveillance\How To\Tutos\HELP_DECRYPT.HTML
[2015-02-02 14:28][2015-02-02 14:28] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\Documents\technicaldocumentstoread\Surveillance\How To\Tutos\HELP_DECRYPT.PNG
[2015-02-02 14:28][2015-02-02 14:28] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\Documents\technicaldocumentstoread\Surveillance\How To\Tutos\HELP_DECRYPT.TXT
[2015-02-02 14:28][2015-02-02 14:28] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\Documents\technicaldocumentstoread\Surveillance\How To\Tutos\HELP_DECRYPT.URL
[2015-02-02 14:28][2015-02-02 14:28] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\Documents\technicaldocumentstoread\Networking\HELP_DECRYPT.HTML
[2015-02-02 14:28][2015-02-02 14:28] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\Documents\technicaldocumentstoread\Networking\HELP_DECRYPT.PNG
[2015-02-02 14:28][2015-02-02 14:28] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\Documents\technicaldocumentstoread\Networking\HELP_DECRYPT.TXT
[2015-02-02 14:28][2015-02-02 14:28] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\Documents\technicaldocumentstoread\Networking\HELP_DECRYPT.URL
[2015-02-02 14:28][2015-02-02 14:28] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Roaming\uTorrent\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Roaming\uTorrent\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Roaming\uTorrent\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Roaming\uTorrent\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Roaming\uTorrent\apps\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Roaming\uTorrent\apps\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Roaming\uTorrent\apps\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Roaming\uTorrent\apps\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Roaming\TeamViewer\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Roaming\TeamViewer\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Roaming\TeamViewer\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Roaming\TeamViewer\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Roaming\Skype\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Roaming\Skype\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Roaming\Skype\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Roaming\Skype\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Roaming\Skype\shared_httpfe\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Roaming\Skype\shared_httpfe\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Roaming\Skype\shared_httpfe\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Roaming\Skype\shared_httpfe\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Roaming\Skype\shared_dynco\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Roaming\Skype\shared_dynco\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Roaming\Skype\shared_dynco\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Roaming\Skype\shared_dynco\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Roaming\Notepad++\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Roaming\Notepad++\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Roaming\Notepad++\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Roaming\Notepad++\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Roaming\Notepad++\plugins\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Roaming\Notepad++\plugins\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Roaming\Notepad++\plugins\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Roaming\Notepad++\plugins\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Roaming\Notepad++\plugins\config\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Roaming\Notepad++\plugins\config\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Roaming\Notepad++\plugins\config\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Roaming\Notepad++\plugins\config\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Roaming\Microsoft\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Roaming\Microsoft\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Roaming\Microsoft\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Roaming\Microsoft\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Roaming\Microsoft\Windows Photo Viewer\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Roaming\Microsoft\Windows Photo Viewer\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Roaming\Microsoft\Windows Photo Viewer\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Roaming\Microsoft\Windows Photo Viewer\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Roaming\Microsoft\Templates\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Roaming\Microsoft\Templates\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Roaming\Microsoft\Templates\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Roaming\Microsoft\Templates\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Roaming\Microsoft\Document Building Blocks\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Roaming\Microsoft\Document Building Blocks\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Roaming\Microsoft\Document Building Blocks\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Roaming\Microsoft\Document Building Blocks\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Roaming\Microsoft\Document Building Blocks\1033\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Roaming\Microsoft\Document Building Blocks\1033\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Roaming\Microsoft\Document Building Blocks\1033\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Roaming\Microsoft\Document Building Blocks\1033\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Roaming\IDM\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Roaming\IDM\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Roaming\IDM\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Roaming\IDM\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Roaming\IDM\DwnlData\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Roaming\IDM\DwnlData\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Roaming\IDM\DwnlData\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Roaming\IDM\DwnlData\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Roaming\IDM\DwnlData\User\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Roaming\IDM\DwnlData\User\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Roaming\IDM\DwnlData\User\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Roaming\IDM\DwnlData\User\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Roaming\IDM\DwnlData\User\Suits.S04E11.Loadtv.biz_50\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Roaming\IDM\DwnlData\User\Suits.S04E11.Loadtv.biz_50\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Roaming\IDM\DwnlData\User\Suits.S04E11.Loadtv.biz_50\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Roaming\IDM\DwnlData\User\Suits.S04E11.Loadtv.biz_50\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\LocalLow\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\LocalLow\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\LocalLow\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\LocalLow\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\LocalLow\Microsoft\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\LocalLow\Microsoft\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\LocalLow\Microsoft\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\LocalLow\Microsoft\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\1\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\1\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\1\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\1\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\1\s\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\1\s\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\1\s\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\1\s\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\1\s\qyzgmprsrfvdi1dud3uhxotpjjuckeishl2ttb4tzqqxe1rezlaaaaha\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\1\s\qyzgmprsrfvdi1dud3uhxotpjjuckeishl2ttb4tzqqxe1rezlaaaaha\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\1\s\qyzgmprsrfvdi1dud3uhxotpjjuckeishl2ttb4tzqqxe1rezlaaaaha\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\1\s\qyzgmprsrfvdi1dud3uhxotpjjuckeishl2ttb4tzqqxe1rezlaaaaha\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\1\s\qyzgmprsrfvdi1dud3uhxotpjjuckeishl2ttb4tzqqxe1rezlaaaaha\f\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\1\s\qyzgmprsrfvdi1dud3uhxotpjjuckeishl2ttb4tzqqxe1rezlaaaaha\f\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\1\s\qyzgmprsrfvdi1dud3uhxotpjjuckeishl2ttb4tzqqxe1rezlaaaaha\f\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\1\s\qyzgmprsrfvdi1dud3uhxotpjjuckeishl2ttb4tzqqxe1rezlaaaaha\f\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Skype\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Skype\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Skype\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Skype\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Skype\Apps\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Skype\Apps\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Skype\Apps\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Skype\Apps\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Skype\Apps\login\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Skype\Apps\login\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Skype\Apps\login\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Skype\Apps\login\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Skype\Apps\login\images\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Skype\Apps\login\images\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Skype\Apps\login\images\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Skype\Apps\login\images\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Microsoft\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Microsoft\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Microsoft\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Microsoft\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Microsoft\Windows Media\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Microsoft\Windows Media\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Microsoft\Windows Media\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Microsoft\Windows Media\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Microsoft\Windows Media\12.0\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Microsoft\Windows Media\12.0\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Microsoft\Windows Media\12.0\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Microsoft\Windows Media\12.0\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Microsoft\Windows Mail\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Microsoft\Windows Mail\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Microsoft\Windows Mail\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Microsoft\Windows Mail\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Microsoft\Windows Mail\Stationery\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Microsoft\Windows Mail\Stationery\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Microsoft\Windows Mail\Stationery\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Microsoft\Windows Mail\Stationery\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Microsoft\Windows Mail\Backup\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Microsoft\Windows Mail\Backup\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Microsoft\Windows Mail\Backup\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Microsoft\Windows Mail\Backup\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Microsoft\Windows Mail\Backup\new\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Microsoft\Windows Mail\Backup\new\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Microsoft\Windows Mail\Backup\new\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Microsoft\Windows Mail\Backup\new\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Microsoft\Internet Explorer\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Microsoft\Internet Explorer\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Microsoft\Internet Explorer\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Microsoft\Internet Explorer\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Microsoft\Device Metadata\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Microsoft\Device Metadata\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Microsoft\Device Metadata\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Microsoft\Device Metadata\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Google\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Google\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Google\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Google\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Google\Chrome\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Google\Chrome\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Google\Chrome\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Google\Chrome\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Sync Data Backup\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Sync Data Backup\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Sync Data Backup\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Sync Data Backup\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\def\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\def\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\def\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\def\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\def\databases\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\def\databases\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\def\databases\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\def\databases\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.google.com_0.indexeddb.leveldb\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.google.com_0.indexeddb.leveldb\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.google.com_0.indexeddb.leveldb\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.google.com_0.indexeddb.leveldb\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_inbox.google.com_0.indexeddb.leveldb\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_inbox.google.com_0.indexeddb.leveldb\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_inbox.google.com_0.indexeddb.leveldb\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_inbox.google.com_0.indexeddb.leveldb\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\1.9.10_0\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\1.9.10_0\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\1.9.10_0\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB

 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\1.9.10_0\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\1.9.10_0\sites\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\1.9.10_0\sites\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\1.9.10_0\sites\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\1.9.10_0\sites\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\1.9.10_0\sites\global\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\1.9.10_0\sites\global\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\1.9.10_0\sites\global\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\1.9.10_0\sites\global\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\1.9.10_0\sites\global\fonts\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\1.9.10_0\sites\global\fonts\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\1.9.10_0\sites\global\fonts\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\1.9.10_0\sites\global\fonts\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_1\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_1\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_1\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_1\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_1\audio\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_1\audio\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_1\audio\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_1\audio\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\All Users\Microsoft\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\All Users\Microsoft\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\All Users\Microsoft\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\All Users\Microsoft\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\All Users\Microsoft\RAC\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\All Users\Microsoft\RAC\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\All Users\Microsoft\RAC\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\All Users\Microsoft\RAC\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\All Users\Microsoft\RAC\StateData\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\All Users\Microsoft\RAC\StateData\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\All Users\Microsoft\RAC\StateData\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\All Users\Microsoft\RAC\StateData\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\All Users\Microsoft\RAC\PublishedData\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\All Users\Microsoft\RAC\PublishedData\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\All Users\Microsoft\RAC\PublishedData\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\All Users\Microsoft\RAC\PublishedData\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\All Users\Dell\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\All Users\Dell\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\All Users\Dell\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\All Users\Dell\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\All Users\Dell\UpdatePackage\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\All Users\Dell\UpdatePackage\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\All Users\Dell\UpdatePackage\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\All Users\Dell\UpdatePackage\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Users\All Users\Dell\UpdatePackage\Log\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Users\All Users\Dell\UpdatePackage\Log\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Users\All Users\Dell\UpdatePackage\Log\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Users\All Users\Dell\UpdatePackage\Log\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Snapshot\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Snapshot\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Snapshot\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Snapshot\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Snapshot\2015-01-23\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Snapshot\2015-01-23\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Snapshot\2015-01-23\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Snapshot\2015-01-23\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Snapshot\2015-01-22\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Snapshot\2015-01-22\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Snapshot\2015-01-22\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Snapshot\2015-01-22\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Snapshot\2015-01-21\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Snapshot\2015-01-21\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Snapshot\2015-01-21\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Snapshot\2015-01-21\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\ProgramData\Microsoft\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\ProgramData\Microsoft\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\ProgramData\Microsoft\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\ProgramData\Microsoft\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\ProgramData\Microsoft\RAC\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\ProgramData\Microsoft\RAC\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\ProgramData\Microsoft\RAC\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\ProgramData\Microsoft\RAC\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\ProgramData\Microsoft\RAC\StateData\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\ProgramData\Microsoft\RAC\StateData\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\ProgramData\Microsoft\RAC\StateData\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\ProgramData\Microsoft\RAC\StateData\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\ProgramData\Microsoft\RAC\PublishedData\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\ProgramData\Microsoft\RAC\PublishedData\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\ProgramData\Microsoft\RAC\PublishedData\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\ProgramData\Microsoft\RAC\PublishedData\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\ProgramData\Dell\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\ProgramData\Dell\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\ProgramData\Dell\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\ProgramData\Dell\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\ProgramData\Dell\UpdatePackage\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\ProgramData\Dell\UpdatePackage\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\ProgramData\Dell\UpdatePackage\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\ProgramData\Dell\UpdatePackage\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\ProgramData\Dell\UpdatePackage\Log\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\ProgramData\Dell\UpdatePackage\Log\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\ProgramData\Dell\UpdatePackage\Log\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\ProgramData\Dell\UpdatePackage\Log\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\FRST\Quarantine\C\Users\HELP_DECRYPT.HTML.xBAD
[2015-02-02 14:44][2015-02-02 14:44] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\FRST\Quarantine\C\Users\HELP_DECRYPT.TXT.xBAD
[2015-02-02 14:44][2015-02-02 14:44] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\FRST\Quarantine\C\Users\HELP_DECRYPT.URL.xBAD
[2015-02-02 14:44][2015-02-02 14:44] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\FRST\Quarantine\C\Users\User\HELP_DECRYPT.HTML.xBAD
[2015-02-02 14:44][2015-02-02 14:44] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\FRST\Quarantine\C\Users\User\HELP_DECRYPT.TXT.xBAD
[2015-02-02 14:44][2015-02-02 14:44] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\FRST\Quarantine\C\Users\User\HELP_DECRYPT.URL.xBAD
[2015-02-02 14:44][2015-02-02 14:44] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\FRST\Quarantine\C\Users\User\Desktop\HELP_DECRYPT.HTML.xBAD
[2015-02-02 14:44][2015-02-02 14:44] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\FRST\Quarantine\C\Users\User\Desktop\HELP_DECRYPT.URL.xBAD
[2015-02-02 14:44][2015-02-02 14:44] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\FRST\Quarantine\C\Users\User\AppData\HELP_DECRYPT.HTML.xBAD
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\FRST\Quarantine\C\Users\User\AppData\HELP_DECRYPT.TXT.xBAD
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\FRST\Quarantine\C\Users\User\AppData\HELP_DECRYPT.URL.xBAD
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\FRST\Quarantine\C\Users\User\AppData\Roaming\HELP_DECRYPT.HTML.xBAD
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\FRST\Quarantine\C\Users\User\AppData\Roaming\HELP_DECRYPT.PNG.xBAD
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\FRST\Quarantine\C\Users\User\AppData\Roaming\HELP_DECRYPT.TXT.xBAD
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\FRST\Quarantine\C\Users\User\AppData\Roaming\HELP_DECRYPT.URL.xBAD
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\FRST\Quarantine\C\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HELP_DECRYPT.HTML.xBAD
[2015-02-02 14:44][2015-02-02 14:44] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\FRST\Quarantine\C\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HELP_DECRYPT.PNG.xBAD
[2015-02-02 14:44][2015-02-02 14:44] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\FRST\Quarantine\C\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HELP_DECRYPT.TXT.xBAD
[2015-02-02 14:44][2015-02-02 14:44] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\FRST\Quarantine\C\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HELP_DECRYPT.URL.xBAD
[2015-02-02 14:44][2015-02-02 14:44] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\FRST\Quarantine\C\Users\User\AppData\Local\HELP_DECRYPT.HTML.xBAD
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\FRST\Quarantine\C\Users\User\AppData\Local\HELP_DECRYPT.PNG.xBAD
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\FRST\Quarantine\C\Users\User\AppData\Local\HELP_DECRYPT.TXT.xBAD
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\FRST\Quarantine\C\Users\User\AppData\Local\HELP_DECRYPT.URL.xBAD
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\FRST\Quarantine\C\Users\User\AppData\Local\YnqPack\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\FRST\Quarantine\C\Users\User\AppData\Local\YnqPack\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\FRST\Quarantine\C\Users\User\AppData\Local\YnqPack\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\FRST\Quarantine\C\Users\User\AppData\Local\YnqPack\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\FRST\Quarantine\C\Users\User\AppData\Local\UZmedia\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\FRST\Quarantine\C\Users\User\AppData\Local\UZmedia\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\FRST\Quarantine\C\Users\User\AppData\Local\UZmedia\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\FRST\Quarantine\C\Users\User\AppData\Local\UZmedia\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\FRST\Quarantine\C\ProgramData\HELP_DECRYPT.HTML.xBAD
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\FRST\Quarantine\C\ProgramData\HELP_DECRYPT.PNG.xBAD
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\FRST\Quarantine\C\ProgramData\HELP_DECRYPT.TXT.xBAD
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\FRST\Quarantine\C\ProgramData\HELP_DECRYPT.URL.xBAD
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Capture\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Capture\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Capture\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Capture\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Capture\2015-01-23\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Capture\2015-01-23\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Capture\2015-01-23\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Capture\2015-01-23\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\Capture\2015-01-22\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\Capture\2015-01-22\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\Capture\2015-01-22\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\Capture\2015-01-22\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\$Recycle.Bin\HELP_DECRYPT.HTML
[2015-02-02 14:26][2015-02-02 14:26] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\$Recycle.Bin\HELP_DECRYPT.PNG
[2015-02-02 14:26][2015-02-02 14:26] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\$Recycle.Bin\HELP_DECRYPT.TXT
[2015-02-02 14:26][2015-02-02 14:26] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\$Recycle.Bin\HELP_DECRYPT.URL
[2015-02-02 14:26][2015-02-02 14:26] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\$Recycle.Bin\S-1-5-21-3253091791-2452062266-442295166-1000\HELP_DECRYPT.HTML
[2015-02-02 14:26][2015-02-02 14:26] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\$Recycle.Bin\S-1-5-21-3253091791-2452062266-442295166-1000\HELP_DECRYPT.PNG
[2015-02-02 14:26][2015-02-02 14:26] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\$Recycle.Bin\S-1-5-21-3253091791-2452062266-442295166-1000\HELP_DECRYPT.TXT
[2015-02-02 14:26][2015-02-02 14:26] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\$Recycle.Bin\S-1-5-21-3253091791-2452062266-442295166-1000\HELP_DECRYPT.URL
[2015-02-02 14:26][2015-02-02 14:26] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\$Recycle.Bin\S-1-5-21-3253091791-2452062266-442295166-1000\$RPKNRCF\HELP_DECRYPT.HTML
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\$Recycle.Bin\S-1-5-21-3253091791-2452062266-442295166-1000\$RPKNRCF\HELP_DECRYPT.PNG
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\$Recycle.Bin\S-1-5-21-3253091791-2452062266-442295166-1000\$RPKNRCF\HELP_DECRYPT.TXT
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\$Recycle.Bin\S-1-5-21-3253091791-2452062266-442295166-1000\$RPKNRCF\HELP_DECRYPT.URL
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
C:\$Recycle.Bin\S-1-5-21-3253091791-2452062266-442295166-1000\$RNDFC1T\HELP_DECRYPT.HTML
[2015-02-02 14:28][2015-02-02 14:28] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C
 
C:\$Recycle.Bin\S-1-5-21-3253091791-2452062266-442295166-1000\$RNDFC1T\HELP_DECRYPT.PNG
[2015-02-02 14:28][2015-02-02 14:28] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9
 
C:\$Recycle.Bin\S-1-5-21-3253091791-2452062266-442295166-1000\$RNDFC1T\HELP_DECRYPT.TXT
[2015-02-02 14:28][2015-02-02 14:28] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB
 
C:\$Recycle.Bin\S-1-5-21-3253091791-2452062266-442295166-1000\$RNDFC1T\HELP_DECRYPT.URL
[2015-02-02 14:28][2015-02-02 14:28] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E
 
 
 
*****************
 
C:\Users\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:44][2015-02-02 14:44] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:44][2015-02-02 14:44] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\Softwares\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:43][2015-02-02 14:43] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\Softwares\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:43][2015-02-02 14:43] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\Softwares\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:43][2015-02-02 14:43] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\Softwares\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:43][2015-02-02 14:43] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\Softwares\Grandstream\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:43][2015-02-02 14:43] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\Softwares\Grandstream\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:43][2015-02-02 14:43] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\Softwares\Grandstream\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:43][2015-02-02 14:43] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\Softwares\Grandstream\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:43][2015-02-02 14:43] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:42][2015-02-02 14:42] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:42][2015-02-02 14:42] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:42][2015-02-02 14:42] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:42][2015-02-02 14:42] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\Swiss German\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:42][2015-02-02 14:42] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\Swiss German\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:42][2015-02-02 14:42] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\Swiss German\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:42][2015-02-02 14:42] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\Swiss German\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:42][2015-02-02 14:42] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\Pims - Learn German\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:40][2015-02-02 14:40] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\Pims - Learn German\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:40][2015-02-02 14:40] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\Pims - Learn German\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:40][2015-02-02 14:40] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\Pims - Learn German\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:40][2015-02-02 14:40] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\Learn German (Pimsleur) (4 Audio CDs - MP3)\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:39][2015-02-02 14:39] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\Learn German (Pimsleur) (4 Audio CDs - MP3)\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:39][2015-02-02 14:39] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\Learn German (Pimsleur) (4 Audio CDs - MP3)\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:39][2015-02-02 14:39] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\Learn German (Pimsleur) (4 Audio CDs - MP3)\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:39][2015-02-02 14:39] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\Instant Conversation German\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:38][2015-02-02 14:38] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\Instant Conversation German\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:38][2015-02-02 14:38] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\Instant Conversation German\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:38][2015-02-02 14:38] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\Instant Conversation German\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:38][2015-02-02 14:38] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\German Plus\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:37][2015-02-02 14:37] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\German Plus\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:37][2015-02-02 14:37] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\German Plus\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:37][2015-02-02 14:37] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\German Plus\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:37][2015-02-02 14:37] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\German III\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:37][2015-02-02 14:37] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\German III\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:37][2015-02-02 14:37] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\German III\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:37][2015-02-02 14:37] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\German III\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:37][2015-02-02 14:37] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\German II\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:36][2015-02-02 14:36] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\German II\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:36][2015-02-02 14:36] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\German II\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:36][2015-02-02 14:36] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\German II\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:36][2015-02-02 14:36] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\German I\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:36][2015-02-02 14:36] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\German I\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:36][2015-02-02 14:36] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\German I\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:36][2015-02-02 14:36] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\German I\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:36][2015-02-02 14:36] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:34][2015-02-02 14:34] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:34][2015-02-02 14:34] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:34][2015-02-02 14:34] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:34][2015-02-02 14:34] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\Instant Conversation German\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:34][2015-02-02 14:34] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\Instant Conversation German\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:34][2015-02-02 14:34] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\Instant Conversation German\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:34][2015-02-02 14:34] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\Instant Conversation German\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:34][2015-02-02 14:34] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\German Plus\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:33][2015-02-02 14:33] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\German Plus\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:33][2015-02-02 14:33] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\German Plus\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:33][2015-02-02 14:33] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\German Plus\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:33][2015-02-02 14:33] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\German III\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:33][2015-02-02 14:33] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\German III\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:33][2015-02-02 14:33] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\German III\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:33][2015-02-02 14:33] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\German III\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:33][2015-02-02 14:33] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\German II\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:32][2015-02-02 14:32] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\German II\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:32][2015-02-02 14:32] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\German II\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:32][2015-02-02 14:32] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\German II\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:32][2015-02-02 14:32] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\German I\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:31][2015-02-02 14:31] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\German I\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:31][2015-02-02 14:31] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\German I\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:31][2015-02-02 14:31] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\German\German I\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:31][2015-02-02 14:31] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\einz\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:30][2015-02-02 14:30] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\einz\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:30][2015-02-02 14:30] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\einz\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:30][2015-02-02 14:30] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\Downloads\12 Pims-German-LadyFae\einz\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:30][2015-02-02 14:30] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\Documents\technicaldocumentstoread\VoIP\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:28][2015-02-02 14:28] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\Documents\technicaldocumentstoread\VoIP\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:28][2015-02-02 14:28] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\Documents\technicaldocumentstoread\VoIP\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:28][2015-02-02 14:28] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\Documents\technicaldocumentstoread\VoIP\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:28][2015-02-02 14:28] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\Documents\technicaldocumentstoread\Troubleshooting\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:28][2015-02-02 14:28] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\Documents\technicaldocumentstoread\Troubleshooting\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:28][2015-02-02 14:28] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\Documents\technicaldocumentstoread\Troubleshooting\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:28][2015-02-02 14:28] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\Documents\technicaldocumentstoread\Troubleshooting\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:28][2015-02-02 14:28] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\Documents\technicaldocumentstoread\Surveillance\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:28][2015-02-02 14:28] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\Documents\technicaldocumentstoread\Surveillance\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:28][2015-02-02 14:28] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\Documents\technicaldocumentstoread\Surveillance\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:28][2015-02-02 14:28] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\Documents\technicaldocumentstoread\Surveillance\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:28][2015-02-02 14:28] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\Documents\technicaldocumentstoread\Surveillance\How To\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:28][2015-02-02 14:28] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\Documents\technicaldocumentstoread\Surveillance\How To\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:28][2015-02-02 14:28] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\Documents\technicaldocumentstoread\Surveillance\How To\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:28][2015-02-02 14:28] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\Documents\technicaldocumentstoread\Surveillance\How To\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:28][2015-02-02 14:28] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\Documents\technicaldocumentstoread\Surveillance\How To\Tutos\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:28][2015-02-02 14:28] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\Documents\technicaldocumentstoread\Surveillance\How To\Tutos\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:28][2015-02-02 14:28] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\Documents\technicaldocumentstoread\Surveillance\How To\Tutos\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:28][2015-02-02 14:28] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\Documents\technicaldocumentstoread\Surveillance\How To\Tutos\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:28][2015-02-02 14:28] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\Documents\technicaldocumentstoread\Networking\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:28][2015-02-02 14:28] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\Documents\technicaldocumentstoread\Networking\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:28][2015-02-02 14:28] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\Documents\technicaldocumentstoread\Networking\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:28][2015-02-02 14:28] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\Documents\technicaldocumentstoread\Networking\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:28][2015-02-02 14:28] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\uTorrent\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\uTorrent\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\uTorrent\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\uTorrent\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\uTorrent\apps\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\uTorrent\apps\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\uTorrent\apps\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\uTorrent\apps\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\TeamViewer\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\TeamViewer\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\TeamViewer\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\TeamViewer\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\Skype\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\Skype\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\Skype\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\Skype\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\Skype\shared_httpfe\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\Skype\shared_httpfe\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\Skype\shared_httpfe\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\Skype\shared_httpfe\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\Skype\shared_dynco\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\Skype\shared_dynco\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\Skype\shared_dynco\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\Skype\shared_dynco\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\Notepad++\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\Notepad++\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\Notepad++\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\Notepad++\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\Notepad++\plugins\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\Notepad++\plugins\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\Notepad++\plugins\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\Notepad++\plugins\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\Notepad++\plugins\config\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\Notepad++\plugins\config\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\Notepad++\plugins\config\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\Notepad++\plugins\config\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\Microsoft\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\Microsoft\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\Microsoft\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\Microsoft\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\Microsoft\Windows Photo Viewer\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\Microsoft\Windows Photo Viewer\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\Microsoft\Windows Photo Viewer\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\Microsoft\Windows Photo Viewer\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\Microsoft\Templates\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\Microsoft\Templates\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\Microsoft\Templates\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\Microsoft\Templates\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\Microsoft\Document Building Blocks\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\Microsoft\Document Building Blocks\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\Microsoft\Document Building Blocks\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\Microsoft\Document Building Blocks\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\Microsoft\Document Building Blocks\1033\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\Microsoft\Document Building Blocks\1033\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\Microsoft\Document Building Blocks\1033\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\Microsoft\Document Building Blocks\1033\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\IDM\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\IDM\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\IDM\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\IDM\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\IDM\DwnlData\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\IDM\DwnlData\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\IDM\DwnlData\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\IDM\DwnlData\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\IDM\DwnlData\User\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\IDM\DwnlData\User\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\IDM\DwnlData\User\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\IDM\DwnlData\User\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\IDM\DwnlData\User\Suits.S04E11.Loadtv.biz_50\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\IDM\DwnlData\User\Suits.S04E11.Loadtv.biz_50\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\IDM\DwnlData\User\Suits.S04E11.Loadtv.biz_50\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Roaming\IDM\DwnlData\User\Suits.S04E11.Loadtv.biz_50\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\LocalLow\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\LocalLow\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\LocalLow\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\LocalLow\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\LocalLow\Microsoft\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\LocalLow\Microsoft\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\LocalLow\Microsoft\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\LocalLow\Microsoft\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\1\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\1\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\1\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\1\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\1\s\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\1\s\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\1\s\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\1\s\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\1\s\qyzgmprsrfvdi1dud3uhxotpjjuckeishl2ttb4tzqqxe1rezlaaaaha\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\1\s\qyzgmprsrfvdi1dud3uhxotpjjuckeishl2ttb4tzqqxe1rezlaaaaha\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\1\s\qyzgmprsrfvdi1dud3uhxotpjjuckeishl2ttb4tzqqxe1rezlaaaaha\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\1\s\qyzgmprsrfvdi1dud3uhxotpjjuckeishl2ttb4tzqqxe1rezlaaaaha\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\1\s\qyzgmprsrfvdi1dud3uhxotpjjuckeishl2ttb4tzqqxe1rezlaaaaha\f\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\1\s\qyzgmprsrfvdi1dud3uhxotpjjuckeishl2ttb4tzqqxe1rezlaaaaha\f\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\1\s\qyzgmprsrfvdi1dud3uhxotpjjuckeishl2ttb4tzqqxe1rezlaaaaha\f\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\LocalLow\Microsoft\Silverlight\is\pvdk4ste.csh\yloquayd.2r0\1\s\qyzgmprsrfvdi1dud3uhxotpjjuckeishl2ttb4tzqqxe1rezlaaaaha\f\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Skype\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Skype\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Skype\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Skype\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Skype\Apps\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Skype\Apps\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Skype\Apps\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Skype\Apps\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Skype\Apps\login\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Skype\Apps\login\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Skype\Apps\login\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Skype\Apps\login\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Skype\Apps\login\images\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Skype\Apps\login\images\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Skype\Apps\login\images\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Skype\Apps\login\images\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Microsoft\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Microsoft\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Microsoft\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Microsoft\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Microsoft\Windows Media\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Microsoft\Windows Media\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Microsoft\Windows Media\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Microsoft\Windows Media\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Microsoft\Windows Media\12.0\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Microsoft\Windows Media\12.0\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Microsoft\Windows Media\12.0\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Microsoft\Windows Media\12.0\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Microsoft\Windows Mail\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Microsoft\Windows Mail\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Microsoft\Windows Mail\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Microsoft\Windows Mail\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Microsoft\Windows Mail\Stationery\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Microsoft\Windows Mail\Stationery\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Microsoft\Windows Mail\Stationery\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Microsoft\Windows Mail\Stationery\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Microsoft\Windows Mail\Backup\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Microsoft\Windows Mail\Backup\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Microsoft\Windows Mail\Backup\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Microsoft\Windows Mail\Backup\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Microsoft\Windows Mail\Backup\new\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Microsoft\Windows Mail\Backup\new\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Microsoft\Windows Mail\Backup\new\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Microsoft\Windows Mail\Backup\new\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Microsoft\Internet Explorer\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Microsoft\Internet Explorer\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Microsoft\Internet Explorer\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Microsoft\Internet Explorer\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Microsoft\Device Metadata\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Microsoft\Device Metadata\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Microsoft\Device Metadata\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Microsoft\Device Metadata\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Sync Data Backup\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Sync Data Backup\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Sync Data Backup\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Sync Data Backup\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\def\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\def\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\def\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\def\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\def\databases\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\def\databases\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\def\databases\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\chrome-signin\def\databases\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.google.com_0.indexeddb.leveldb\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.google.com_0.indexeddb.leveldb\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.google.com_0.indexeddb.leveldb\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.google.com_0.indexeddb.leveldb\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_inbox.google.com_0.indexeddb.leveldb\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_inbox.google.com_0.indexeddb.leveldb\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_inbox.google.com_0.indexeddb.leveldb\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_inbox.google.com_0.indexeddb.leveldb\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\1.9.10_0\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\1.9.10_0\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\1.9.10_0\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\1.9.10_0\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\1.9.10_0\sites\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\1.9.10_0\sites\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\1.9.10_0\sites\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\1.9.10_0\sites\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\1.9.10_0\sites\global\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\1.9.10_0\sites\global\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\1.9.10_0\sites\global\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\1.9.10_0\sites\global\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\1.9.10_0\sites\global\fonts\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\1.9.10_0\sites\global\fonts\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\1.9.10_0\sites\global\fonts\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\1.9.10_0\sites\global\fonts\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_1\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_1\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_1\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_1\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_1\audio\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_1\audio\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_1\audio\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_1\audio\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\All Users\Microsoft\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\All Users\Microsoft\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\All Users\Microsoft\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\All Users\Microsoft\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\All Users\Microsoft\RAC\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\All Users\Microsoft\RAC\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\All Users\Microsoft\RAC\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\All Users\Microsoft\RAC\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\All Users\Microsoft\RAC\StateData\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\All Users\Microsoft\RAC\StateData\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\All Users\Microsoft\RAC\StateData\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\All Users\Microsoft\RAC\StateData\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\All Users\Microsoft\RAC\PublishedData\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\All Users\Microsoft\RAC\PublishedData\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\All Users\Microsoft\RAC\PublishedData\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\All Users\Microsoft\RAC\PublishedData\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\All Users\Dell\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\All Users\Dell\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\All Users\Dell\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\All Users\Dell\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\All Users\Dell\UpdatePackage\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\All Users\Dell\UpdatePackage\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\All Users\Dell\UpdatePackage\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\All Users\Dell\UpdatePackage\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Users\All Users\Dell\UpdatePackage\Log\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Users\All Users\Dell\UpdatePackage\Log\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Users\All Users\Dell\UpdatePackage\Log\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Users\All Users\Dell\UpdatePackage\Log\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Snapshot\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Snapshot\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Snapshot\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Snapshot\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Snapshot\2015-01-23\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Snapshot\2015-01-23\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Snapshot\2015-01-23\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Snapshot\2015-01-23\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Snapshot\2015-01-22\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Snapshot\2015-01-22\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Snapshot\2015-01-22\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Snapshot\2015-01-22\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Snapshot\2015-01-21\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Snapshot\2015-01-21\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Snapshot\2015-01-21\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Snapshot\2015-01-21\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
"C:\ProgramData\Microsoft\HELP_DECRYPT.HTML" => File/Directory not found.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
"C:\ProgramData\Microsoft\HELP_DECRYPT.PNG" => File/Directory not found.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
"C:\ProgramData\Microsoft\HELP_DECRYPT.TXT" => File/Directory not found.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
"C:\ProgramData\Microsoft\HELP_DECRYPT.URL" => File/Directory not found.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
"C:\ProgramData\Microsoft\RAC\HELP_DECRYPT.HTML" => File/Directory not found.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
"C:\ProgramData\Microsoft\RAC\HELP_DECRYPT.PNG" => File/Directory not found.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
"C:\ProgramData\Microsoft\RAC\HELP_DECRYPT.TXT" => File/Directory not found.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
"C:\ProgramData\Microsoft\RAC\HELP_DECRYPT.URL" => File/Directory not found.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
"C:\ProgramData\Microsoft\RAC\StateData\HELP_DECRYPT.HTML" => File/Directory not found.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
"C:\ProgramData\Microsoft\RAC\StateData\HELP_DECRYPT.PNG" => File/Directory not found.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
"C:\ProgramData\Microsoft\RAC\StateData\HELP_DECRYPT.TXT" => File/Directory not found.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
"C:\ProgramData\Microsoft\RAC\StateData\HELP_DECRYPT.URL" => File/Directory not found.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
"C:\ProgramData\Microsoft\RAC\PublishedData\HELP_DECRYPT.HTML" => File/Directory not found.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
"C:\ProgramData\Microsoft\RAC\PublishedData\HELP_DECRYPT.PNG" => File/Directory not found.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
"C:\ProgramData\Microsoft\RAC\PublishedData\HELP_DECRYPT.TXT" => File/Directory not found.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
"C:\ProgramData\Microsoft\RAC\PublishedData\HELP_DECRYPT.URL" => File/Directory not found.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
"C:\ProgramData\Dell\HELP_DECRYPT.HTML" => File/Directory not found.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
"C:\ProgramData\Dell\HELP_DECRYPT.PNG" => File/Directory not found.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
"C:\ProgramData\Dell\HELP_DECRYPT.TXT" => File/Directory not found.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
"C:\ProgramData\Dell\HELP_DECRYPT.URL" => File/Directory not found.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
"C:\ProgramData\Dell\UpdatePackage\HELP_DECRYPT.HTML" => File/Directory not found.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
"C:\ProgramData\Dell\UpdatePackage\HELP_DECRYPT.PNG" => File/Directory not found.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
"C:\ProgramData\Dell\UpdatePackage\HELP_DECRYPT.TXT" => File/Directory not found.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
"C:\ProgramData\Dell\UpdatePackage\HELP_DECRYPT.URL" => File/Directory not found.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
"C:\ProgramData\Dell\UpdatePackage\Log\HELP_DECRYPT.HTML" => File/Directory not found.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
"C:\ProgramData\Dell\UpdatePackage\Log\HELP_DECRYPT.PNG" => File/Directory not found.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
"C:\ProgramData\Dell\UpdatePackage\Log\HELP_DECRYPT.TXT" => File/Directory not found.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
"C:\ProgramData\Dell\UpdatePackage\Log\HELP_DECRYPT.URL" => File/Directory not found.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\FRST\Quarantine\C\Users\HELP_DECRYPT.HTML.xBAD => Moved successfully.
[2015-02-02 14:44][2015-02-02 14:44] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\FRST\Quarantine\C\Users\HELP_DECRYPT.TXT.xBAD => Moved successfully.
[2015-02-02 14:44][2015-02-02 14:44] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\FRST\Quarantine\C\Users\HELP_DECRYPT.URL.xBAD => Moved successfully.
[2015-02-02 14:44][2015-02-02 14:44] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\FRST\Quarantine\C\Users\User\HELP_DECRYPT.HTML.xBAD => Moved successfully.
[2015-02-02 14:44][2015-02-02 14:44] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\FRST\Quarantine\C\Users\User\HELP_DECRYPT.TXT.xBAD => Moved successfully.
[2015-02-02 14:44][2015-02-02 14:44] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\FRST\Quarantine\C\Users\User\HELP_DECRYPT.URL.xBAD => Moved successfully.
[2015-02-02 14:44][2015-02-02 14:44] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\FRST\Quarantine\C\Users\User\Desktop\HELP_DECRYPT.HTML.xBAD => Moved successfully.
[2015-02-02 14:44][2015-02-02 14:44] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\FRST\Quarantine\C\Users\User\Desktop\HELP_DECRYPT.URL.xBAD => Moved successfully.
[2015-02-02 14:44][2015-02-02 14:44] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\FRST\Quarantine\C\Users\User\AppData\HELP_DECRYPT.HTML.xBAD => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\FRST\Quarantine\C\Users\User\AppData\HELP_DECRYPT.TXT.xBAD => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\FRST\Quarantine\C\Users\User\AppData\HELP_DECRYPT.URL.xBAD => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\FRST\Quarantine\C\Users\User\AppData\Roaming\HELP_DECRYPT.HTML.xBAD => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\FRST\Quarantine\C\Users\User\AppData\Roaming\HELP_DECRYPT.PNG.xBAD => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\FRST\Quarantine\C\Users\User\AppData\Roaming\HELP_DECRYPT.TXT.xBAD => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\FRST\Quarantine\C\Users\User\AppData\Roaming\HELP_DECRYPT.URL.xBAD => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\FRST\Quarantine\C\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HELP_DECRYPT.HTML.xBAD => Moved successfully.
[2015-02-02 14:44][2015-02-02 14:44] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\FRST\Quarantine\C\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HELP_DECRYPT.PNG.xBAD => Moved successfully.
[2015-02-02 14:44][2015-02-02 14:44] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\FRST\Quarantine\C\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HELP_DECRYPT.TXT.xBAD => Moved successfully.
[2015-02-02 14:44][2015-02-02 14:44] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\FRST\Quarantine\C\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HELP_DECRYPT.URL.xBAD => Moved successfully.
[2015-02-02 14:44][2015-02-02 14:44] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\FRST\Quarantine\C\Users\User\AppData\Local\HELP_DECRYPT.HTML.xBAD => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\FRST\Quarantine\C\Users\User\AppData\Local\HELP_DECRYPT.PNG.xBAD => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\FRST\Quarantine\C\Users\User\AppData\Local\HELP_DECRYPT.TXT.xBAD => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\FRST\Quarantine\C\Users\User\AppData\Local\HELP_DECRYPT.URL.xBAD => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\FRST\Quarantine\C\Users\User\AppData\Local\YnqPack\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\FRST\Quarantine\C\Users\User\AppData\Local\YnqPack\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\FRST\Quarantine\C\Users\User\AppData\Local\YnqPack\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\FRST\Quarantine\C\Users\User\AppData\Local\YnqPack\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\FRST\Quarantine\C\Users\User\AppData\Local\UZmedia\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\FRST\Quarantine\C\Users\User\AppData\Local\UZmedia\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\FRST\Quarantine\C\Users\User\AppData\Local\UZmedia\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\FRST\Quarantine\C\Users\User\AppData\Local\UZmedia\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\FRST\Quarantine\C\ProgramData\HELP_DECRYPT.HTML.xBAD => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\FRST\Quarantine\C\ProgramData\HELP_DECRYPT.PNG.xBAD => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\FRST\Quarantine\C\ProgramData\HELP_DECRYPT.TXT.xBAD => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\FRST\Quarantine\C\ProgramData\HELP_DECRYPT.URL.xBAD => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Capture\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Capture\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Capture\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Capture\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Capture\2015-01-23\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Capture\2015-01-23\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Capture\2015-01-23\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Capture\2015-01-23\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\Capture\2015-01-22\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\Capture\2015-01-22\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\Capture\2015-01-22\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\Capture\2015-01-22\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\$Recycle.Bin\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:26][2015-02-02 14:26] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\$Recycle.Bin\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:26][2015-02-02 14:26] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\$Recycle.Bin\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:26][2015-02-02 14:26] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\$Recycle.Bin\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:26][2015-02-02 14:26] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\$Recycle.Bin\S-1-5-21-3253091791-2452062266-442295166-1000\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:26][2015-02-02 14:26] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\$Recycle.Bin\S-1-5-21-3253091791-2452062266-442295166-1000\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:26][2015-02-02 14:26] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\$Recycle.Bin\S-1-5-21-3253091791-2452062266-442295166-1000\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:26][2015-02-02 14:26] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\$Recycle.Bin\S-1-5-21-3253091791-2452062266-442295166-1000\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:26][2015-02-02 14:26] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\$Recycle.Bin\S-1-5-21-3253091791-2452062266-442295166-1000\$RPKNRCF\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\$Recycle.Bin\S-1-5-21-3253091791-2452062266-442295166-1000\$RPKNRCF\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\$Recycle.Bin\S-1-5-21-3253091791-2452062266-442295166-1000\$RPKNRCF\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\$Recycle.Bin\S-1-5-21-3253091791-2452062266-442295166-1000\$RPKNRCF\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:27][2015-02-02 14:27] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
C:\$Recycle.Bin\S-1-5-21-3253091791-2452062266-442295166-1000\$RNDFC1T\HELP_DECRYPT.HTML => Moved successfully.
[2015-02-02 14:28][2015-02-02 14:28] 0008658 ____A () D0D9A345859CA43B5D247F04D40BB42C => Error: No automatic fix found for this entry.
C:\$Recycle.Bin\S-1-5-21-3253091791-2452062266-442295166-1000\$RNDFC1T\HELP_DECRYPT.PNG => Moved successfully.
[2015-02-02 14:28][2015-02-02 14:28] 0045842 ____A () 1603BB3D54F1C79165505ACB48351CE9 => Error: No automatic fix found for this entry.
C:\$Recycle.Bin\S-1-5-21-3253091791-2452062266-442295166-1000\$RNDFC1T\HELP_DECRYPT.TXT => Moved successfully.
[2015-02-02 14:28][2015-02-02 14:28] 0004272 ____A () 57258D25717A0F27D9A63EEC113734DB => Error: No automatic fix found for this entry.
C:\$Recycle.Bin\S-1-5-21-3253091791-2452062266-442295166-1000\$RNDFC1T\HELP_DECRYPT.URL => Moved successfully.
[2015-02-02 14:28][2015-02-02 14:28] 0000304 ____A () 0334CE4E71983D316B3729894749BE1E => Error: No automatic fix found for this entry.
 
==== End of Fixlog 09:23:23 ====


#12 fireman4it

fireman4it

    Bleepin' Fireman


  • Malware Response Team
  • 13,505 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Greenup, Ill USA
  • Local time:04:07 PM

Posted 12 February 2015 - 07:20 PM

Currently there is no fix for the files that where encrypted with this infection. The infection has been removed but those files will stay encrypted.

 

  •    
  • Run FRST.

       
  • Type the following in the edit box after "Search:"
        *decrypt*


    Click Search Registry button and post the log it makes to your reply.


" Extinguishing Malware from the world"

The Virus, Trojan, Spyware, and Malware Removal forum is very busy. If I'm helping you and I've not posted back within 24 hrs., send a PM with your topic link. Thank you.

ALL OTHER HELP REQUESTS VIA THE PM SYSTEM WILL BE IGNORED. The Forums are there for a reason!
Thanks-


  userbar_eis_500.gif

If I have helped you, consider making a donation to help me continue the fight against Malware! Just click btn_donate_LG.gif


#13 ysn_chy

ysn_chy
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:09:07 PM

Posted 13 February 2015 - 05:07 AM

Good day!

 

The search.txt is too long to post here, but you can view it via this link :

 

https://www.dropbox.com/s/zcgu5odqeodhott/Search.txt?dl=0

 

Thanks for all :)



#14 fireman4it

fireman4it

    Bleepin' Fireman


  • Malware Response Team
  • 13,505 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Greenup, Ill USA
  • Local time:04:07 PM

Posted 13 February 2015 - 09:28 PM

1.

Download attached fixlist.txt file and save it to the Desktop.

NOTE. It's important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

Run FRST/FRST64 and press the Fix button just once and wait.
If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.

 

Attached File  fixlist.txt   36bytes   6 downloads

 

 

2.

  • Download Emsisoft Emergency Kit and save it to your desktop.
  • Double click on the EmsisoftEmergencyKit.exe icon, click Run then Extract
  • Double click the Start Emsisoft Emergency Kit icon that will appear after extraction
  • Click Yes to update the program
  • Once the update is completed click the Back button
  • Click on 2. Scan (not Quick Scan or Smart Scan)
  • Click Yes to detect Potentially Unwanted Programs (PUPs)
  • Patiently wait for the thorough scan to complete, this can be a lengthy process
  • Once completed click Quarantine selected objects (if computer is clean you will not have this option) then click OK
  • Click View Report
  • Attach the report to your reply
  • Close the program then click Close

 

 

3.

How is your machine running now?

 


Edited by fireman4it, 15 February 2015 - 12:57 PM.

" Extinguishing Malware from the world"

The Virus, Trojan, Spyware, and Malware Removal forum is very busy. If I'm helping you and I've not posted back within 24 hrs., send a PM with your topic link. Thank you.

ALL OTHER HELP REQUESTS VIA THE PM SYSTEM WILL BE IGNORED. The Forums are there for a reason!
Thanks-


  userbar_eis_500.gif

If I have helped you, consider making a donation to help me continue the fight against Malware! Just click btn_donate_LG.gif


#15 ysn_chy

ysn_chy
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:09:07 PM

Posted 16 February 2015 - 06:08 AM

Good day !

 

here are the two reports! 

 

********************************************************************************************************

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 15-02-2015
Ran by User at 2015-02-16 10:00:54 Run:3
Running from C:\Users\User\Desktop\New folder
Loaded Profiles: User (Available profiles: User)
Boot Mode: Normal
==============================================
 
Content of fixlist:
*****************
DeleteQuarantine:
*****************
 
"C:\FRST\Quarantine" => Removed successfully.
 
==== End of Fixlog 10:00:56 ====
 
 
 
********************************************************************************************************
Emsisoft Emergency Kit - Version 9.0
Last update: 2/16/2015 10:48:02 AM
User account: User-PC\User
 
Scan settings:
 
Scan type: Full Scan
Objects: Rootkits, Memory, Traces, C:\, D:\
 
Detect PUPs: On
Scan archives: On
ADS Scan: On
File extension filter: Off
Advanced caching: On
Direct disk access: Off
 
Scan start: 2/16/2015 10:49:33 AM
C:\ProgramData\apn detected: Application.AppInstall (A)
 
Scanned 138320
Found 1
 
Scan end: 2/16/2015 11:03:53 AM
Scan time: 0:14:20
*******************************************************************************************************
 
What I can say is that My Machine is running good now thanks to your assistance !





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users