Fix to CryptoLockerRestore2 function