From 2eaa5949e2af174cc41c1de33b5a86d4a7efff8f Mon Sep 17 00:00:00 2001
From: Jacob Cody Wimer <jacob.wimer@gmail.com>
Date: Mon, 30 Mar 2015 10:48:42 -0400
Subject: [PATCH] Formatted readme

---
 README.md | 50 ++++++++++++++++++++++++++------------------------
 1 file changed, 26 insertions(+), 24 deletions(-)

diff --git a/README.md b/README.md
index ed03364..7bb4ffb 100644
--- a/README.md
+++ b/README.md
@@ -2,32 +2,34 @@
 This program creates a txt for easy backup restoration of files infected with cryptowall. The program depends on the decrypt instrucitons left behind by cryptowall.
 
 For example, if you have two folders on your desktop that contain the following files:
-folder1
-	DECRYPT_INSTRUCITON.TXT
-	DECRYPT_INSTRUCTION.lnk
-	DECRYPT_INSTRUCTION.HTML
-	myfile.txt
-	myOtherFile.txt
-folder2
-	DECRYPT_INSTRUCITON.TXT
-	DECRYPT_INSTRUCTION.lnk
-	DECRYPT_INSTRUCTION.HTML
-	myThirdFile.txt
-	myFourthFile.txt
+
+* folder1
+	- DECRYPT_INSTRUCITON.TXT
+	- DECRYPT_INSTRUCTION.lnk
+	- DECRYPT_INSTRUCTION.HTML
+	- myfile.txt
+	- myOtherFile.txt
+* folder2
+	- DECRYPT_INSTRUCITON.TXT
+	- DECRYPT_INSTRUCTION.lnk
+	- DECRYPT_INSTRUCTION.HTML
+	- myThirdFile.txt
+	- myFourthFile.txt
 
 The program will do the following:
-	1. It will create a txt containing:
-		folder1path\myfile.txt
-		folder1path\myOtherFile.txt
-		folder2path\myThirdFile.txt
-		folder2path\myFourthFile.txt
-	2. It will delete the following files:
-		folder1\DECRYPT_INSTRUCTION.TXT
-		folder1\DECRYPT_INSTRUCTION.lnk
-		folder1\DECRYPT_INSTRUCTION.HTML
-		folder2\DECRYPT_INSTRUCTION.TXT
-		folder2\DECRYPT_INSTRUCTION.lnk
-		folder2\DECRYPT_INSTRUCTION.HTML
+
+	* 1. It will create a txt containing:
+		- folder1path\myfile.txt
+		- folder1path\myOtherFile.txt
+		- folder2path\myThirdFile.txt
+		- folder2path\myFourthFile.txt
+	* 2. It will delete the following files:
+		- folder1\DECRYPT_INSTRUCTION.TXT
+		- folder1\DECRYPT_INSTRUCTION.lnk
+		- folder1\DECRYPT_INSTRUCTION.HTML
+		- folder2\DECRYPT_INSTRUCTION.TXT
+		- folder2\DECRYPT_INSTRUCTION.lnk
+		- folder2\DECRYPT_INSTRUCTION.HTML
 
 Hopefully, having the txt produced by this program will help you easily restore files infected by cryptowall. The program was only written to search local hard drives (not usb or network drives). This functionality can be easily added if needed just ask me. It is advised to not run this on systems in which cryptowall is still encrypting files. Make sure the computer is clean (or running in safe mode) before running this program.