Jump to content

Help_decrypt virus help needed


Recommended Posts

Went to a webpage this morning and bam this crap. Ran malwarebytes, but didn't go away. HELP please! running an eset online scan as wee speak

eset log:

C:\Program Files\WinZip\Utils\WzSysScan\WINZIPSS.exe a variant of Win32/Systweak.L potentially unwanted application cleaned by deleting - quarantined

C:\Program Files\WinZip\Utils\WzSysScan\WINZIPSSHelper.dll a variant of Win32/Systweak.N potentially unwanted application cleaned by deleting - quarantined

C:\Program Files\WinZip\Utils\WzSysScan\WINZIPSSPrivacyProtector.exe a variant of Win32/Systweak.L potentially unwanted application cleaned by deleting - quarantined

C:\Program Files\WinZip\Utils\WzSysScan\WINZIPSSRegClean.exe a variant of Win32/Systweak potentially unwanted application cleaned by deleting - quarantined

C:\Program Files\WinZip\Utils\WzSysScan\WINZIPSSRegistryOptimizer.exe a variant of Win32/Systweak.L potentially unwanted application cleaned by deleting - quarantined

C:\Program Files\WinZip\Utils\WzSysScan\WINZIPSSSystemCleaner.exe a variant of Win32/Systweak.L potentially unwanted application cleaned by deleting - quarantined

C:\Program Files (x86)\Dell DataSafe Local Backup\hstart.exe a variant of Win32/HiddenStart.A potentially unsafe application cleaned by deleting - quarantined

C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\hstart.exe a variant of Win32/HiddenStart.A potentially unsafe application cleaned by deleting - quarantined

C:\UPS\WSTD\INSTALLATION_16_0_20_0\PIF\IM\Resources\images\NLD\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\INSTALLATION_16_0_20_0\PIF\IM\Resources\images\PLK\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\INSTALLATION_16_0_20_0\PIF\IM\Resources\images\PLK\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\INSTALLATION_16_0_20_0\PIF\IM\Resources\images\PTB\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\INSTALLATION_16_0_20_0\PIF\IM\Resources\images\PTB\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\INSTALLATION_16_0_20_0\PIF\IM\Resources\images\ROM\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\INSTALLATION_16_0_20_0\PIF\IM\Resources\images\ROM\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\INSTALLATION_16_0_20_0\PIF\IM\Resources\images\RUS\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\INSTALLATION_16_0_20_0\PIF\IM\Resources\images\RUS\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\INSTALLATION_16_0_20_0\PIF\IM\Resources\images\TRK\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\INSTALLATION_16_0_20_0\PIF\IM\Resources\images\TRK\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\INSTALLATION_16_0_20_0\PIF\IM\Resources\images\ZHH\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\INSTALLATION_16_0_20_0\PIF\IM\Resources\images\ZHH\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\INSTALLATION_16_0_20_0\Resources\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\INSTALLATION_16_0_20_0\Resources\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\INSTALLATION_16_0_20_0\UPSlink\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\INSTALLATION_16_0_20_0\UPSlink\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\LookupTblsBackup\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\LookupTblsBackup\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\Messages\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\Messages\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\MoveInstructions\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\MoveInstructions\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\MSSQL.1\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\MSSQL.1\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\MSSQL.1\MSSQL\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\MSSQL.1\MSSQL\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\MSSQL.1\MSSQL\Binn\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\MSSQL.1\MSSQL\Binn\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\MSSQL.1\MSSQL\Data\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\MSSQL.1\MSSQL\Data\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\MSSQL.1\MSSQL\Install\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\MSSQL.1\MSSQL\Install\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\MSSQL.1\MSSQL\Template Data\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\MSSQL.1\MSSQL\Template Data\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\ODBACKUP\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\ODBACKUP\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\PortCodeData\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\PortCodeData\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\PostalCode\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\PostalCode\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\RBITData\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\RBITData\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\Readme\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\Readme\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\RECONCILER\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\RECONCILER\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\RECONCILER\Rechelp_CHS\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\RECONCILER\Rechelp_CHS\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\RECONCILER\Rechelp_CHT\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\RECONCILER\Rechelp_CHT\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\RECONCILER\Rechelp_CSY\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\RECONCILER\Rechelp_CSY\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\RECONCILER\Rechelp_DEU\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\RECONCILER\Rechelp_DEU\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\RECONCILER\Rechelp_ENG\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\RECONCILER\Rechelp_ENG\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\RECONCILER\Rechelp_ENU\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\RECONCILER\Rechelp_ENU\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\RECONCILER\Rechelp_ESP\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\RECONCILER\Rechelp_ESP\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\RECONCILER\Rechelp_FRA\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\RECONCILER\Rechelp_FRA\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\RECONCILER\Rechelp_FRC\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\RECONCILER\Rechelp_FRC\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\RECONCILER\Rechelp_HUN\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\RECONCILER\Rechelp_HUN\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\RECONCILER\Rechelp_ITA\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\RECONCILER\Rechelp_ITA\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\RECONCILER\Rechelp_JPN\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\RECONCILER\Rechelp_JPN\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\RECONCILER\Rechelp_KOR\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\RECONCILER\Rechelp_KOR\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\RECONCILER\Rechelp_NLD\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\RECONCILER\Rechelp_NLD\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\RECONCILER\Rechelp_PLK\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\RECONCILER\Rechelp_PLK\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\RECONCILER\Rechelp_PTB\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\RECONCILER\Rechelp_PTB\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\RECONCILER\Rechelp_ROM\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\RECONCILER\Rechelp_ROM\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\RECONCILER\Rechelp_RUS\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\RECONCILER\Rechelp_RUS\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\RECONCILER\Rechelp_TRK\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\RECONCILER\Rechelp_TRK\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\RECONCILER\Rechelp_ZHH\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\RECONCILER\Rechelp_ZHH\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\SIM\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\SIM\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\SIWizard\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\SIWizard\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\SIWizard\SIWHelp\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\SIWizard\SIWHelp\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\SIWizard\SIWHelp\CHS\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\SIWizard\SIWHelp\CHS\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\SIWizard\SIWHelp\CHT\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\SIWizard\SIWHelp\CHT\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\SIWizard\SIWHelp\CSY\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\SIWizard\SIWHelp\CSY\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\SIWizard\SIWHelp\DEU\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\SIWizard\SIWHelp\DEU\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\SIWizard\SIWHelp\ENG\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\SIWizard\SIWHelp\ENG\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\SIWizard\SIWHelp\ENU\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\SIWizard\SIWHelp\ENU\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\SIWizard\SIWHelp\ESP\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\SIWizard\SIWHelp\ESP\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\SIWizard\SIWHelp\FRA\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\SIWizard\SIWHelp\FRA\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\SIWizard\SIWHelp\FRC\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\SIWizard\SIWHelp\FRC\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\SIWizard\SIWHelp\HUN\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\SIWizard\SIWHelp\HUN\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\SIWizard\SIWHelp\ITA\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\SIWizard\SIWHelp\ITA\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\SIWizard\SIWHelp\JPN\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\SIWizard\SIWHelp\JPN\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\SIWizard\SIWHelp\KOR\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\SIWizard\SIWHelp\KOR\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\SIWizard\SIWHelp\NLD\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\SIWizard\SIWHelp\NLD\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\SIWizard\SIWHelp\PLK\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\SIWizard\SIWHelp\PLK\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\SIWizard\SIWHelp\PTB\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\SIWizard\SIWHelp\PTB\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\SIWizard\SIWHelp\ROM\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\SIWizard\SIWHelp\ROM\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\SIWizard\SIWHelp\RUS\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\SIWizard\SIWHelp\RUS\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\SIWizard\SIWHelp\TRK\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\SIWizard\SIWHelp\TRK\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\SIWizard\SIWHelp\ZHH\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\SIWizard\SIWHelp\ZHH\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\Support\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\Support\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\Support\DBSupport\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\Support\DBSupport\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\Support\DBSupport\UPSWS_SUPPORT_20130618_v118_001\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\Support\DBSupport\UPSWS_SUPPORT_20130618_v118_001\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\Support\DBSupport\UPSWS_SUPPORT_20130618_v118_001\Lan\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\Support\DBSupport\UPSWS_SUPPORT_20130618_v118_001\Lan\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\Support\DBSupport\UPSWS_SUPPORT_20130618_v118_002\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\Support\DBSupport\UPSWS_SUPPORT_20130618_v118_002\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\Support\DBSupport\UPSWS_SUPPORT_20130618_v118_002\Lan\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\Support\DBSupport\UPSWS_SUPPORT_20130618_v118_002\Lan\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\Syslog\sbs\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\Syslog\sbs\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\Syslog\sbs\log\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\Syslog\sbs\log\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\Syslog\UPSHelp\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\Syslog\UPSHelp\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\Syslog\UPSHelp\Log\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\Syslog\UPSHelp\Log\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\Syslog\upsicc\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\Syslog\upsicc\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\Syslog\upsicc\log\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\Syslog\upsicc\log\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\Syslog\upslhttp\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\Syslog\upslhttp\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\Syslog\upslhttp\log\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\Syslog\upslhttp\log\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\UPDATEDIR\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\UPDATEDIR\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\UPDATEDIR\WSTD\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\UPDATEDIR\WSTD\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\UPDATEDIR\WSTD\ODBACKUP\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\UPDATEDIR\WSTD\ODBACKUP\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\UPSICC\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\UPSICC\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\UPSICC\ICCHelp\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\UPSICC\ICCHelp\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\UPSICC\ICCHelp\CHS\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\UPSICC\ICCHelp\CHS\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\UPSICC\ICCHelp\CHT\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\UPSICC\ICCHelp\CHT\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\UPSICC\ICCHelp\CSY\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\UPSICC\ICCHelp\CSY\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\UPSICC\ICCHelp\DEU\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\UPSICC\ICCHelp\DEU\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\UPSICC\ICCHelp\ENG\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\UPSICC\ICCHelp\ENG\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\UPSICC\ICCHelp\ENU\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\UPSICC\ICCHelp\ENU\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\UPSICC\ICCHelp\ESP\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\UPSICC\ICCHelp\ESP\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\UPSICC\ICCHelp\FRA\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\UPSICC\ICCHelp\FRA\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\UPSICC\ICCHelp\FRC\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\UPSICC\ICCHelp\FRC\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\UPSICC\ICCHelp\HUN\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\UPSICC\ICCHelp\HUN\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\UPSICC\ICCHelp\ITA\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\UPSICC\ICCHelp\ITA\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\UPSICC\ICCHelp\JPN\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\UPSICC\ICCHelp\JPN\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\UPSICC\ICCHelp\KOR\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\UPSICC\ICCHelp\KOR\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\UPSICC\ICCHelp\NLD\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\UPSICC\ICCHelp\NLD\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\UPSICC\ICCHelp\PLK\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\UPSICC\ICCHelp\PLK\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\UPSICC\ICCHelp\PTB\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\UPSICC\ICCHelp\PTB\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\UPSICC\ICCHelp\ROM\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\UPSICC\ICCHelp\ROM\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\UPSICC\ICCHelp\RUS\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\UPSICC\ICCHelp\RUS\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\UPSICC\ICCHelp\TRK\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\UPSICC\ICCHelp\TRK\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\UPSICC\ICCHelp\ZHH\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\UPSICC\ICCHelp\ZHH\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\Utilities\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\Utilities\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\Utilities\AU\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\Utilities\AU\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\XML\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\XML\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\XML\Backup\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\UPS\WSTD\XML\Backup\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\ImpExp\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\ImpExp\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\ImpExp\AcctPkgs\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\ImpExp\AcctPkgs\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\ImpExp\AcctPkgs\Sample Order Import 1\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\ImpExp\AcctPkgs\Sample Order Import 1\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\ImpExp\AddrBook\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\ImpExp\AddrBook\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\ImpExp\AddrBook\MyUPS\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\ImpExp\AddrBook\MyUPS\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\ImpExp\Ansi\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\ImpExp\Ansi\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\Install\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\Install\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\Install\Disk1\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\Install\Disk1\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\Install\Disk1\PIF\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\Install\Disk1\PIF\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\Install\Disk1\PIF\IM\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\Install\Disk1\PIF\IM\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\Install\Disk1\PIF\IM\Resources\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\Install\Disk1\PIF\IM\Resources\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\Install\Disk1\PIF\IM\Resources\EULA\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\Install\Disk1\PIF\IM\Resources\EULA\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\Install\Disk1\PIF\IM\Resources\images\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\Install\Disk1\PIF\IM\Resources\images\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\Install\Disk1\PIF\IM\Resources\images\CHS\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\Install\Disk1\PIF\IM\Resources\images\CHS\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\Install\Disk1\PIF\IM\Resources\images\CHT\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\Install\Disk1\PIF\IM\Resources\images\CHT\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\Install\Disk1\PIF\IM\Resources\images\CSY\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\Install\Disk1\PIF\IM\Resources\images\CSY\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\Install\Disk1\PIF\IM\Resources\images\DEU\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\Install\Disk1\PIF\IM\Resources\images\DEU\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\Install\Disk1\PIF\IM\Resources\images\ENU\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\Install\Disk1\PIF\IM\Resources\images\ENU\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\Install\Disk1\PIF\IM\Resources\images\ESP\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\Install\Disk1\PIF\IM\Resources\images\ESP\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\Install\Disk1\PIF\IM\Resources\images\FRA\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\Install\Disk1\PIF\IM\Resources\images\FRA\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\Install\Disk1\PIF\IM\Resources\images\FRC\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\Install\Disk1\PIF\IM\Resources\images\FRC\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\Install\Disk1\PIF\IM\Resources\images\HUN\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\Install\Disk1\PIF\IM\Resources\images\HUN\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\Install\Disk1\PIF\IM\Resources\images\ITA\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\Install\Disk1\PIF\IM\Resources\images\ITA\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\Install\Disk1\PIF\IM\Resources\images\JPN\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\Install\Disk1\PIF\IM\Resources\images\JPN\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\Install\Disk1\PIF\IM\Resources\images\KOR\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\Install\Disk1\PIF\IM\Resources\images\KOR\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\Install\Disk1\PIF\IM\Resources\images\NLD\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\Install\Disk1\PIF\IM\Resources\images\NLD\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\Install\Disk1\PIF\IM\Resources\images\PLK\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\Install\Disk1\PIF\IM\Resources\images\PLK\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\Install\Disk1\PIF\IM\Resources\images\PTB\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\Install\Disk1\PIF\IM\Resources\images\PTB\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\Install\Disk1\PIF\IM\Resources\images\ROM\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\Install\Disk1\PIF\IM\Resources\images\ROM\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\Install\Disk1\PIF\IM\Resources\images\RUS\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\Install\Disk1\PIF\IM\Resources\images\RUS\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\Install\Disk1\PIF\IM\Resources\images\TRK\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\Install\Disk1\PIF\IM\Resources\images\TRK\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\Install\Disk1\PIF\IM\Resources\images\ZHH\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\Install\Disk1\PIF\IM\Resources\images\ZHH\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\Install\Disk1\RESOURCES\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\Install\Disk1\RESOURCES\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\Install\Disk1\UPSLINK\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\Remote\Install\Disk1\UPSLINK\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\XML\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\upsdata\UPS\WSTD\XML\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Apps\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Apps\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Apps\2.0\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Apps\2.0\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Apps\2.0\LH4R5MQO.RDT\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Apps\2.0\LH4R5MQO.RDT\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Apps\2.0\LH4R5MQO.RDT\XLLO83VA.DHR\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Apps\2.0\LH4R5MQO.RDT\XLLO83VA.DHR\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Apps\2.0\LH4R5MQO.RDT\XLLO83VA.DHR\rowr...exe_e3504e55fd4c5f16_0002.0000_none_38b0d5036eb7daa8\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Apps\2.0\LH4R5MQO.RDT\XLLO83VA.DHR\rowr...exe_e3504e55fd4c5f16_0002.0000_none_38b0d5036eb7daa8\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Apps\2.0\LH4R5MQO.RDT\XLLO83VA.DHR\rowr...exe_e3504e55fd4c5f16_0002.0000_none_38b0d5036eb7daa8\images\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Apps\2.0\LH4R5MQO.RDT\XLLO83VA.DHR\rowr...exe_e3504e55fd4c5f16_0002.0000_none_38b0d5036eb7daa8\images\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Apps\2.0\LH4R5MQO.RDT\XLLO83VA.DHR\rowr..tion_e3504e55fd4c5f16_0002.0000_893b039c822521d5\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Apps\2.0\LH4R5MQO.RDT\XLLO83VA.DHR\rowr..tion_e3504e55fd4c5f16_0002.0000_893b039c822521d5\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Apps\2.0\LH4R5MQO.RDT\XLLO83VA.DHR\rowr..tion_e3504e55fd4c5f16_0002.0000_893b039c822521d5\images\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Apps\2.0\LH4R5MQO.RDT\XLLO83VA.DHR\rowr..tion_e3504e55fd4c5f16_0002.0000_893b039c822521d5\images\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Downloaded Installations\{3A689B30-F482-4D55-9B4D-E5638B4F55E1}\The Weather Channel App.msi a variant of Win32/Bundled.Toolbar.Ask.D potentially unsafe application deleted - quarantined

C:\Users\parts1\AppData\Local\Google\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Google\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Google\Chrome\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Google\Chrome\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Google\Chrome\User Data\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Google\Chrome\User Data\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Google\Chrome\User Data\Default\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Google\Chrome\User Data\Default\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Google\Chrome\User Data\Default\databases\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Google\Chrome\User Data\Default\databases\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Google\Chrome\User Data\Default\Extensions\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Google\Chrome\User Data\Default\Extensions\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_0\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_0\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_0\audio\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_0\audio\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\HP\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\HP\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\HP\AtInstall\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\HP\AtInstall\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Microsoft\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Microsoft\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Microsoft\Device Metadata\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Microsoft\Device Metadata\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Microsoft\Internet Explorer\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Microsoft\Internet Explorer\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Microsoft\Office\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Microsoft\Office\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Microsoft\Office\15.0\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Microsoft\Office\15.0\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Microsoft\Office\15.0\OfficeFileCache\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Microsoft\Office\15.0\OfficeFileCache\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Microsoft\Outlook\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Microsoft\Outlook\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Microsoft\Windows Mail\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Microsoft\Windows Mail\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Microsoft\Windows Mail\Backup\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Microsoft\Windows Mail\Backup\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Microsoft\Windows Mail\Backup\new\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Microsoft\Windows Mail\Backup\new\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Microsoft\Windows Mail\Local Folders\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Microsoft\Windows Mail\Local Folders\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Microsoft\Windows Mail\Local Folders\Inbox\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Microsoft\Windows Mail\Local Folders\Inbox\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Microsoft\Windows Mail\Stationery\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Microsoft\Windows Mail\Stationery\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Microsoft\Windows Media\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Microsoft\Windows Media\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Microsoft\Windows Media\12.0\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Microsoft\Windows Media\12.0\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Microsoft\Windows Photo Gallery\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Microsoft\Windows Photo Gallery\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\The Weather Channel\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\The Weather Channel\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\The Weather Channel\The Weather Channel App\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\The Weather Channel\The Weather Channel App\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\The Weather Channel\The Weather Channel App\themes\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\The Weather Channel\The Weather Channel App\themes\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\The Weather Channel\The Weather Channel App\themes\Driving\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\The Weather Channel\The Weather Channel App\themes\Driving\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\The Weather Channel\The Weather Channel App\themes\Weather\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\The Weather Channel\The Weather Channel App\themes\Weather\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\WinZip\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Local\WinZip\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\LocalLow\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\LocalLow\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\LocalLow\Adobe\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\LocalLow\Adobe\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\LocalLow\Adobe\Acrobat\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\LocalLow\Adobe\Acrobat\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\LocalLow\Adobe\Acrobat\10.0\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\LocalLow\Adobe\Acrobat\10.0\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Roaming\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Roaming\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Roaming\Adobe\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Roaming\Adobe\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Roaming\Adobe\Flash Player\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Roaming\Adobe\Flash Player\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Roaming\Adobe\Flash Player\AssetCache\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Roaming\Adobe\Flash Player\AssetCache\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Roaming\Adobe\Flash Player\AssetCache\283N7K2E\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Roaming\Adobe\Flash Player\AssetCache\283N7K2E\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Roaming\Dell\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Roaming\Dell\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Roaming\Dell\Dell Stage\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Roaming\Dell\Dell Stage\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Roaming\Dell\Dell Stage\{6dedbe25-1baa-49d5-a314-3524143af6f7}\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Roaming\Dell\Dell Stage\{6dedbe25-1baa-49d5-a314-3524143af6f7}\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Roaming\HP\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Roaming\HP\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Roaming\HP\WebRegLogs\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Roaming\HP\WebRegLogs\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Roaming\HP\WowLogs\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Roaming\HP\WowLogs\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Roaming\Microsoft\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Roaming\Microsoft\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Roaming\Microsoft\Document Building Blocks\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Roaming\Microsoft\Document Building Blocks\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Roaming\Microsoft\Document Building Blocks\1033\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Roaming\Microsoft\Document Building Blocks\1033\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Roaming\Microsoft\Document Building Blocks\1033\15\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Roaming\Microsoft\Document Building Blocks\1033\15\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Roaming\Microsoft\Templates\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Roaming\Microsoft\Templates\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Roaming\Microsoft\Windows Live Photo Gallery\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Roaming\Microsoft\Windows Live Photo Gallery\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Roaming\Progressive Automotive Systems, Inc\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Roaming\Progressive Automotive Systems, Inc\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Roaming\Progressive Automotive Systems, Inc\ROWriter\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Roaming\Progressive Automotive Systems, Inc\ROWriter\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Roaming\Progressive Automotive Systems, Inc\ROWriter\Backup\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Roaming\Progressive Automotive Systems, Inc\ROWriter\Backup\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Roaming\Progressive Automotive Systems, Inc\ROWriter\Term\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\AppData\Roaming\Progressive Automotive Systems, Inc\ROWriter\Term\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\7-Zip\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\7-Zip\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\7-Zip\Lang\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\7-Zip\Lang\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\Apple Valley\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\Apple Valley\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\Applevalley fire truck 4982\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\Applevalley fire truck 4982\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\applevalley fire truck 4983\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\applevalley fire truck 4983\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\Awi\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\Awi\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\chevy bed\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\chevy bed\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\crew cab chevy\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\crew cab chevy\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\Devils lake\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\Devils lake\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\Egg truck\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\Egg truck\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\massac\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\massac\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\New folder\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\New folder\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\New folder (2)\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\New folder (2)\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\P.O #\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\P.O #\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\photos\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\photos\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\photos\03 International\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\photos\03 International\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\photos\New folder\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\photos\New folder\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\photos\New folder (2)\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\photos\New folder (2)\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\photos\New folder (3)\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\photos\New folder (3)\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\photos\New folder (4)\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\photos\New folder (4)\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\photos\New folder1\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\photos\New folder1\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\photos\Walworth\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\photos\Walworth\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\RANDOM PDF\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\RANDOM PDF\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\S10\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\S10\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\Seat Belt part#'s\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\Seat Belt part#'s\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\Seymour ambulance\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\Seymour ambulance\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\Stryker\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\Stryker\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\Williston1\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\Williston1\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\Williston2\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Desktop\Williston2\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Documents\ccsetup501.exe Win32/Bundled.Toolbar.Google.D potentially unsafe application deleted - quarantined

C:\Users\parts1\Documents\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Documents\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Documents\Outlook Files\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Documents\Outlook Files\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Downloads\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Downloads\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Pictures\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Pictures\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Pictures\Chicago Pictures\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Pictures\Chicago Pictures\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Pictures\New folder\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Pictures\New folder\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Pictures\New folder\Invoices sent\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Pictures\New folder\Invoices sent\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Pictures\New folder\Invoices sent\1 December\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted - quarantined

C:\Users\parts1\Pictures\New folder\Invoices sent\1 December\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted

C:\Users\parts1\Pictures\New folder\Invoices sent\1 December\New folder\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted

C:\Users\parts1\Pictures\New folder\Invoices sent\1 December\New folder\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted

C:\Users\parts1\Pictures\New folder\Invoices sent\1 December\New folder\1\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted

C:\Users\parts1\Pictures\New folder\Invoices sent\1 December\New folder\1\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted

C:\Users\parts1\Pictures\New folder\Invoices sent\1 December\Paid\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted

C:\Users\parts1\Pictures\New folder\Invoices sent\1 December\Paid\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted

C:\Users\parts1\Pictures\New folder\Invoices sent\2 January\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted

C:\Users\parts1\Pictures\New folder\Invoices sent\2 January\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted

C:\Users\parts1\Pictures\New folder\Invoices sent\2 January\paid\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted

C:\Users\parts1\Pictures\New folder\Invoices sent\2 January\paid\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted

C:\Users\parts1\Pictures\New folder\Invoices sent\3 February\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted

C:\Users\parts1\Pictures\New folder\Invoices sent\3 February\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted

C:\Users\parts1\Pictures\New folder\Invoices sent\3 February\Paid\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted

C:\Users\parts1\Pictures\New folder\Invoices sent\3 February\Paid\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted

C:\Users\parts1\Pictures\New folder\Invoices sent\5 April\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted

C:\Users\parts1\Pictures\New folder\Invoices sent\5 April\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted

C:\Users\parts1\Pictures\New folder\Invoices sent\March\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted

C:\Users\parts1\Pictures\New folder\Invoices sent\March\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted

C:\Users\parts1\Pictures\New folder\Invoices sent\March\Paid\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted

C:\Users\parts1\Pictures\New folder\Invoices sent\March\Paid\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted

C:\Users\parts1\Pictures\New folder (2)\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted

C:\Users\parts1\Pictures\New folder (2)\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted

C:\Users\parts1\Pictures\New folder (3)\HELP_DECRYPT.HTML Win32/Filecoder.CR trojan deleted

C:\Users\parts1\Pictures\New folder (3)\HELP_DECRYPT.TXT Win32/Filecoder.CR trojan deleted

C:\Users\parts1\Pictures\New folder (3)\winzip19-new.exe a variant of Win32/InstallCore.ACZ potentially unwanted application cleaned by deleting - quarantined

C:\Windows\Installer\b6c181.msi a variant of Win32/Systweak.L potentially unwanted application deleted - quarantined

 

Link to post
Share on other sites

Welcome to the forum.

Here's the bible of that infection:


 

Your files are most likely gone but you can try the methods listed in the link below to retrieve them:


 

The virus usually deletes itself after doing it's damage.

 

==============================

 

MrC

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.