my files are encrypted and extension is a1f6 , is it filecoder.cerber trojan ? Nod32 recognized the readme file and removed them , but files remained encrypted