start
CreateRestorePoint:
CloseProcesses:
C:\Windows.old\Users\Dorothy01\DECRYPT_INSTRUCTION.HTML
C:\Windows.old\Users\Dorothy01\DECRYPT_INSTRUCTION.TXT
C:\Windows.old\Users\Dorothy01\AppData\DECRYPT_INSTRUCTION.HTML
C:\Windows.old\Users\Dorothy01\AppData\DECRYPT_INSTRUCTION.TXT
C:\Windows.old\Users\Dorothy01\AppData\Local\DECRYPT_INSTRUCTION.HTML
C:\Windows.old\Users\Dorothy01\AppData\Local\DECRYPT_INSTRUCTION.TXT
C:\Windows.old\Users\Dorothy01\AppData\Local\Microsoft\DECRYPT_INSTRUCTION.HTML
C:\Windows.old\Users\Dorothy01\AppData\Local\Microsoft\DECRYPT_INSTRUCTION.TXT
C:\Windows.old\Users\Dorothy01\AppData\Local\Microsoft\Windows Media\DECRYPT_INSTRUCTION.HTML
C:\Windows.old\Users\Dorothy01\AppData\Local\Microsoft\Windows Media\DECRYPT_INSTRUCTION.TXT
C:\Windows.old\Users\Dorothy01\AppData\Local\Microsoft\Windows Media\12.0\DECRYPT_INSTRUCTION.HTML
C:\Windows.old\Users\Dorothy01\AppData\Local\Microsoft\Windows Media\12.0\DECRYPT_INSTRUCTION.TXT
C:\Users\Public\DECRYPT_INSTRUCTION.URL
C:\Users\Public\CyberLink\DECRYPT_INSTRUCTION.URL
C:\Users\Dorothy01\Music\iTunes\iTunes Media\DECRYPT_INSTRUCTION.URL
C:\Users\Dorothy01\Music\iTunes\iTunes Media\Music\DECRYPT_INSTRUCTION.URL
C:\Users\Dorothy01\Music\iTunes\iTunes Media\Music\Unknown Artist\DECRYPT_INSTRUCTION.URL
C:\Users\Dorothy01\Music\iTunes\iTunes Media\Music\Unknown Artist\Unknown Album\DECRYPT_INSTRUCTION.URL
C:\Users\Dorothy01\AppData\Roaming\Microsoft\Windows\Recent\DECRYPT_INSTRUCTION.lnk
C:\System Volume Information\HELP_DECRYPT.PNG
C:\System Volume Information\HELP_DECRYPT.URL
C:\System Volume Information\EfaData\HELP_DECRYPT.PNG
C:\System Volume Information\EfaData\HELP_DECRYPT.URL
C:\$Recycle.Bin\S-1-5-21-1427692388-1042374531-2795145444-1001\HELP_DECRYPT.HTML
C:\$Recycle.Bin\S-1-5-21-1427692388-1042374531-2795145444-1001\HELP_DECRYPT.PNG
C:\$Recycle.Bin\S-1-5-21-1427692388-1042374531-2795145444-1001\HELP_DECRYPT.TXT
C:\$Recycle.Bin\S-1-5-21-1427692388-1042374531-2795145444-1001\HELP_DECRYPT.URL
Reboot:
end