Trojan.Encoder.29201

Technical Information

To ensure autorun and distribution

Creates the following files on removable media

<Drive name for removable media>:\gruenspecht_02172016.pptx.wncryt
<Drive name for removable media>:\iso27k_isms_implementation_and_certification_process_overview_v2.pptx.wncryt
<Drive name for removable media>:\indogerman2010.pptx.wncryt
<Drive name for removable media>:\stoc13_ml_quoc_le.pptx.wncryt
<Drive name for removable media>:\samieee_obiee_presentation.pptx.wncryt
<Drive name for removable media>:\@please_read_me@.txt
<Drive name for removable media>:\@wanadecryptor@.exe

Malicious functions

Reads files which store third party applications passwords

%HOMEPATH%\desktop\february_catalogue__2015.doc
%HOMEPATH%\desktop\issi2013_template_for_posters.docx
%HOMEPATH%\desktop\nwfieldnotes1966.docx
%HOMEPATH%\desktop\sdszfo.docx
%HOMEPATH%\desktop\thlps_keeper_mayer_1965.docx
%HOMEPATH%\desktop\uep_form_786_bulletin_1726i602.doc
%HOMEPATH%\desktop\dashborder_144.bmp
%HOMEPATH%\desktop\dashborder_192.bmp
%HOMEPATH%\desktop\join.avi
%HOMEPATH%\desktop\tileimage.bmp

Modifies file system

Creates the following files

<Current directory>\b.wnry
%APPDATA%\icqm\icq\smiles\smiles\set06\s010.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set06\s011.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set06\s012.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set06\s013.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set06\s014.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set06\s015.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set06\s017.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\smiles\bee.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set06\s018.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set06\s019.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set06\s020.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\smiles\angry.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\smiles\ass.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\smiles\bazilio.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set06\s009.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set06\s016.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set06\s008.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set05\s016.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set05\s010.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set05\s011.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set05\s012.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set05\s013.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set05\s014.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set05\s015.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set05\s017.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set06\s004.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set05\s018.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set05\s019.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set05\s020.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set06\s001.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set06\s002.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set06\s003.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set06\s006.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\smiles\blink.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\smiles\bullshit.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\smiles\coolguy.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\valentine\kissed.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\valentine\lets_play.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\valentine\on_wings.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\valentine\undress.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\valentine\want_you.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\valentine\jealousy.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\valentine\kiss.gif.wncryt
%APPDATA%\icqm\icq\sounds\auth.mp3.wncryt
%APPDATA%\icqm\icq\sounds\conference.mp3.wncryt
%APPDATA%\icqm\icq\sounds\error.wav.wncryt
%APPDATA%\icqm\icq\sounds\letter.wav.wncryt
%APPDATA%\icqm\icq\sounds\message.mp3.wncryt
%APPDATA%\icqm\icq\sounds\no_answer.wav.wncryt
%APPDATA%\icqm\icq\sounds\busy.mp3.wncryt
%APPDATA%\icqm\icq\sounds\call_in.wav.wncryt
%APPDATA%\icqm\icq\smiles\smiles\valentine\in_love.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\valentine\dont_be_late.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\valentine\broken_heart.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\smiles\disappointed.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\smiles\heart.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\smiles\hm.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\smiles\kiss.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\smiles\laughter.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\smiles\oo.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\smiles\cry.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\smiles\pig.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\smiles\rrr.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\smiles\sceptic.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\smiles\shy.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\smiles\smile.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\smiles\vampire.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\smiles\zloradstvo.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\smiles\really.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set05\s009.gif.wncryt
%APPDATA%\icqm\icq\sounds\otprav.mp3.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set05\s008.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set05\s006.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set03\angel.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set03\bad.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set03\blum.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set03\blush.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set03\cray.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set03\crazy.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set03\diablo.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set03\man_in_love.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set03\dirol.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set03\drinks.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set03\facepalm.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set03\fool.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set03\good.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set03\kiss_mini.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\53a.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set03\dance.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\52a.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\27a.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\09a.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\10a.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\11a.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\13a.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\14a.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\26a.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\28a.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\50a.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\41b.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\44a.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\45a.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\47a.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\48a.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\49a.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\51a.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set03\mocking.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set03\music.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set03\nea.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set04\s009.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set04\s010.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set04\s011.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set04\s012.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set04\s013.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set04\s007.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set04\s008.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set04\s014.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set05\s001.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set05\s002.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set05\s003.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set05\s004.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set05\s005.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set04\s015.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set04\s016.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set04\s006.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set04\s005.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set04\s004.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set03\rofl.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set03\rolleyes.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set03\sad.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set03\scratch_one-s_head.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set03\shok.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set03\shout.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set03\pardon.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set03\smile.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set03\wacko2.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set03\wink.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set03\yahoo.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set04\s001.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set04\s002.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set04\s003.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set03\unknw.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set05\s007.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\37.gif.wncryt
%HOMEPATH%\templates\sndrec.wav.wncryt
%APPDATA%\icqm\icq\sounds\start.wav.wncryt
%APPDATA%\icqm\icq\smiles\smiles\smiles\kukes.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\smiles\live.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\smiles\ok.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\smiles\plug.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\smiles\sleepy.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\smiles\tears.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\smiles\victory.gif.wncryt
%HOMEPATH%\cookies\user@7ba[1].txt.wncryt
%APPDATA%\microsoft\internet explorer\brndlog.bak.wncryt
%APPDATA%\mozilla\firefox\profiles\22ie2h77.default\sitesecurityservicestate.txt.wncryt
%APPDATA%\mozilla\firefox\profiles\22ie2h77.default\sessionstore-backups\previous.js.wncryt
%APPDATA%\mozilla\firefox\profiles\22ie2h77.default\sessionstore-backups\recovery.js.wncryt
%APPDATA%\opera software\opera stable\opera_shutdown_ms.txt.wncryt
%HOMEPATH%\cookies\user@326944[1].txt.wncryt
%APPDATA%\icqm\icq\smiles\smiles\smiles\koza_right.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\smiles\think.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\smiles\koza_left.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\smiles\aaa.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\40a.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\42a.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\43a.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\46a.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set03\biggrin.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\set03\give_rose.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\smiles\amazed.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\smiles\fist.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\smiles\biganger.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\smiles\biggrin.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\smiles\crocodile.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\smiles\detzl.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\smiles\devil.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\smiles\die.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\smiles\fuck.gif.wncryt
%HOMEPATH%\cookies\user@adnxs[1].txt.wncryt
%HOMEPATH%\cookies\user@adobe[1].txt.wncryt
%HOMEPATH%\cookies\user@atdmt[1].txt.wncryt
%HOMEPATH%\cookies\user@win-rar[1].txt.wncryt
%HOMEPATH%\cookies\user@winrar.softkey[2].txt.wncryt
%HOMEPATH%\cookies\user@www.msn[1].txt.wncryt
%HOMEPATH%\cookies\user@yadro[1].txt.wncryt
%HOMEPATH%\cookies\user@yandex[2].txt.wncryt
%HOMEPATH%\cookies\user@serving-sys[2].txt.wncryt
%HOMEPATH%\cookies\user@softkey[2].txt.wncryt
<LS_APPDATA>\chromium\user data\default\bookmarks_20150820130020.backup.wncryt
<LS_APPDATA>\google\chrome\user data\default\bookmarks_20150820130020.backup.wncryt
<LS_APPDATA>\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\main.js.wncryt
<LS_APPDATA>\google\chrome\user data\default\service worker\cachestorage\b5828dd7cc3b943f8890a5bb6e3b1b63e8ee8703\index.txt.wncryt
<LS_APPDATA>\nichrome\user data\default\bookmarks_20150820130020.backup.wncryt
<LS_APPDATA>\nichrome\user data\default\preferences_20150820130020.backup.wncryt
<LS_APPDATA>\chromium\user data\default\preferences_20150820130020.backup.wncryt
<LS_APPDATA>\google\chrome\user data\chrome_shutdown_ms.txt.wncryt
%HOMEPATH%\cookies\user@scorecardresearch[2].txt.wncryt
%HOMEPATH%\cookies\user@rarlab[1].txt.wncryt
%HOMEPATH%\cookies\user@rambler[2].txt.wncryt
%HOMEPATH%\cookies\user@bluekai[2].txt.wncryt
%HOMEPATH%\cookies\user@c.bing[1].txt.wncryt
%HOMEPATH%\cookies\user@c.msn[1].txt.wncryt
%HOMEPATH%\cookies\user@d.castplatform[2].txt.wncryt
%HOMEPATH%\cookies\user@help.softkey[2].txt.wncryt
%HOMEPATH%\cookies\user@help.softkey[3].txt.wncryt
%HOMEPATH%\cookies\user@bing[1].txt.wncryt
%HOMEPATH%\cookies\user@mail[1].txt.wncryt
%HOMEPATH%\cookies\user@mon.softkey[2].txt.wncryt
%HOMEPATH%\cookies\user@msn[1].txt.wncryt
%HOMEPATH%\cookies\user@openstat[1].txt.wncryt
%HOMEPATH%\cookies\user@opera[1].txt.wncryt
%HOMEPATH%\cookies\user@point4all[2].txt.wncryt
%HOMEPATH%\cookies\user@rabotaetvse[1].txt.wncryt
%HOMEPATH%\cookies\user@microsoft[1].txt.wncryt
%APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\39a.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\08a.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\38a.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\36a.gif.wncryt
%APPDATA%\opera software\opera stable\bookmarks_20150820130021.backup.wncryt
%APPDATA%\opera software\opera stable\bookmarks_20150820130022.backup.wncryt
%APPDATA%\opera software\opera stable\bookmarks_20150820130023.backup.wncryt
%APPDATA%\opera software\opera stable\browser.js.wncryt
%APPDATA%\opera software\opera stable\favorites.db.wncryt
%APPDATA%\opera software\opera stable\preferences_20150820125838.backup.wncryt
%APPDATA%\opera software\opera stable\thumbnails.db.wncryt
<LS_APPDATA>\iconcache.db.wncryt
%APPDATA%\opera software\opera stable\web data_20150820125838.backup.wncryt
%APPDATA%\opera software\opera stable\web data_20150820130020.backup.wncryt
%APPDATA%\thunderbird\profiles\cr5sc40q.default\cert8.db.wncryt
%APPDATA%\thunderbird\profiles\cr5sc40q.default\key3.db.wncryt
%APPDATA%\thunderbird\profiles\cr5sc40q.default\prefs.js.wncryt
%APPDATA%\thunderbird\profiles\cr5sc40q.default\secmod.db.wncryt
%APPDATA%\opera software\opera stable\bookmarks_20150820130020.backup.wncryt
%APPDATA%\opera software\opera stable\preferences_20150820130020.backup.wncryt
%APPDATA%\opera software\opera stable\bookmarks_20150820125841.backup.wncryt
%APPDATA%\mozilla\firefox\profiles\22ie2h77.default\key3.db.wncryt
%APPDATA%\icqm\icq\sounds\test_sound.wav.wncryt
%APPDATA%\icqm\icq\sounds\voiceend.wav.wncryt
%APPDATA%\icqm\icq\video\video.swf.wncryt
%APPDATA%\microsoft\document building blocks\1033\building blocks.dotx.wncryt
%APPDATA%\microsoft\templates\normal.dotm.wncryt
%APPDATA%\mozilla\firefox\profiles\22ie2h77.default\cert8.db.wncryt
%APPDATA%\mozilla\firefox\profiles\22ie2h77.default\prefs.js.wncryt
%APPDATA%\opera software\opera stable\bookmarks_20150820125839.backup.wncryt
%APPDATA%\mozilla\firefox\profiles\22ie2h77.default\prefs.js_20150820125841.backup.wncryt
%APPDATA%\mozilla\firefox\profiles\22ie2h77.default\prefs.js_20150820130023.backup.wncryt
%APPDATA%\mozilla\firefox\profiles\22ie2h77.default\secmod.db.wncryt
%APPDATA%\mozilla\firefox\profiles\22ie2h77.default\user.js.wncryt
%APPDATA%\opera software\opera stable\bookmarks.bak.wncryt
%APPDATA%\opera software\opera stable\bookmarks_20150820125838.backup.wncryt
%APPDATA%\opera software\opera stable\bookmarks_20150820125840.backup.wncryt
<LS_APPDATA>\chromium\user data\default\web data_20150820130020.backup.wncryt
<LS_APPDATA>\google\chrome\user data\default\bookmarks.bak.wncryt
<LS_APPDATA>\google\chrome\user data\default\preferences_20150820125837.backup.wncryt
%APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\19a.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\20a.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\21a.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\22a.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\23a.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\16a.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\17a.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\24a.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\30a.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\31a.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\32a.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\33a.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\34a.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\25a.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\29a.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\15a.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\12a.gif.wncryt
%APPDATA%\adobe\acrobat\9.0\javascripts\glob.settings.js.wncryt
<LS_APPDATA>\google\chrome\user data\default\databases\databases.db.wncryt
<LS_APPDATA>\google\chrome\user data\default\extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.5_0\audio\chime.wav.wncryt
<LS_APPDATA>\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\craw_background.js.wncryt
<LS_APPDATA>\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\craw_window.js.wncryt
<LS_APPDATA>\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\images\flapper.gif.wncryt
<LS_APPDATA>\nichrome\user data\default\web data_20150820130020.backup.wncryt
<LS_APPDATA>\google\chrome\user data\default\preferences_20150820130020.backup.wncryt
%HOMEPATH%\templates\quattro.wb2.wncryt
C:\documents and settings\default user\application data\microsoft\internet explorer\brndlog.bak.wncryt
C:\documents and settings\default user\application data\microsoft\internet explorer\brndlog.txt.wncryt
C:\documents and settings\default user\templates\sndrec.wav.wncryt
%APPDATA%\adobe\acrobat\10.0\javascripts\glob.js.wncryt
%APPDATA%\adobe\acrobat\10.0\javascripts\glob.settings.js.wncryt
%APPDATA%\adobe\acrobat\9.0\javascripts\glob.js.wncryt
C:\autoexec.bat.wncryt
%APPDATA%\icqm\icq\sounds\otprav.wav.wncryt
%APPDATA%\icqm\icq\sounds\ring.mp3.wncryt
%APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\07a.gif.wncryt
%APPDATA%\icqm\icq\smiles\flash\love_bear_rose.swf.wncryt
%HOMEPATH%\cookies\@wanadecryptor@.exe
<LS_APPDATA>\@please_read_me@.txt
<LS_APPDATA>\@wanadecryptor@.exe.lnk
<LS_APPDATA>\microsoft\outlook\outlook.pst.wncryt
%HOMEPATH%\templates\@please_read_me@.txt
%HOMEPATH%\templates\@wanadecryptor@.exe
C:\msocache\all users\{90120000-0030-0000-0000-0000000ff1ce}-c\@wanadecryptor@.exe
%APPDATA%\icqm\icq\html\kz\loading\progress_agent.gif.wncryt
%ALLUSERSPROFILE%\application data\microsoft\office\data\opa12.bak.wncryt
C:\documents and settings\default user\templates\quattro.wb2.wncryt
%APPDATA%\icqm\icq\html\bg\loading\progress_agent.gif.wncryt
%APPDATA%\icqm\icq\html\cz\loading\progress_agent.gif.wncryt
%APPDATA%\icqm\icq\html\de\loading\progress_agent.gif.wncryt
%APPDATA%\icqm\icq\html\en\loading\progress_agent.gif.wncryt
%HOMEPATH%\cookies\@please_read_me@.txt
C:\msocache\all users\{90120000-0030-0000-0000-0000000ff1ce}-c\@please_read_me@.txt
%APPDATA%\telegram desktop\@wanadecryptor@.exe.lnk
%APPDATA%\microsoft\internet explorer\brndlog.txt.wncryt
%APPDATA%\icqm\icq\database\citylist_kz.csv.wncryt
%APPDATA%\icqm\icq\database\citylist_ru.csv.wncryt
%APPDATA%\icqm\icq\database\citylist_tr.csv.wncryt
%APPDATA%\icqm\icq\database\citylist_ua.csv.wncryt
%APPDATA%\icqm\icq\database\citylist_uz.csv.wncryt
%APPDATA%\icqm\icq\smiles\skin.txt.wncryt
%APPDATA%\microsoft\internet explorer\@please_read_me@.txt
%APPDATA%\telegram desktop\log.txt.wncryt
%APPDATA%\microsoft\internet explorer\@wanadecryptor@.exe.lnk
%APPDATA%\microsoft\templates\@please_read_me@.txt
%APPDATA%\microsoft\templates\@wanadecryptor@.exe.lnk
%APPDATA%\mozilla\firefox\profiles\22ie2h77.default\revocations.txt.wncryt
%APPDATA%\opera software\opera stable\@please_read_me@.txt
%APPDATA%\opera software\opera stable\@wanadecryptor@.exe.lnk
%APPDATA%\telegram desktop\@please_read_me@.txt
%APPDATA%\icqm\icq\html\pt\loading\progress_agent.gif.wncryt
%APPDATA%\icqm\icq\html\ru\loading\progress_agent.gif.wncryt
%APPDATA%\icqm\icq\html\tr\loading\progress_agent.gif.wncryt
%APPDATA%\icqm\icq\smiles\flash\guby.swf.wncryt
%APPDATA%\icqm\icq\smiles\flash\information.swf.wncryt
%APPDATA%\icqm\icq\smiles\flash\joy.swf.wncryt
%APPDATA%\icqm\icq\smiles\flash\kisses.swf.wncryt
%APPDATA%\icqm\icq\smiles\flash\kot_cool.swf.wncryt
%APPDATA%\icqm\icq\smiles\flash\duh.swf.wncryt
%APPDATA%\icqm\icq\smiles\flash\gangsta.swf.wncryt
%APPDATA%\icqm\icq\smiles\flash\kot_goodbye.swf.wncryt
%APPDATA%\icqm\icq\smiles\flash\kot_spasibo.swf.wncryt
%APPDATA%\icqm\icq\smiles\flash\kot_wow.swf.wncryt
%APPDATA%\icqm\icq\smiles\flash\krizis.swf.wncryt
%APPDATA%\icqm\icq\smiles\flash\laugh.swf.wncryt
%APPDATA%\icqm\icq\smiles\flash\likeu.swf.wncryt
%APPDATA%\icqm\icq\smiles\flash\kot_nedutza.swf.wncryt
%APPDATA%\icqm\icq\smiles\flash\kot_obida.swf.wncryt
%APPDATA%\icqm\icq\smiles\flash\drako_zombie.swf.wncryt
%APPDATA%\icqm\icq\smiles\flash\drako_snegyrka.swf.wncryt
%APPDATA%\icqm\icq\smiles\flash\drako_opyatnica.swf.wncryt
%APPDATA%\icqm\icq\html\uz\loading\progress_agent.gif.wncryt
%APPDATA%\icqm\icq\smiles\flash\akitaka.swf.wncryt
%APPDATA%\icqm\icq\smiles\flash\angel.swf.wncryt
%APPDATA%\icqm\icq\smiles\flash\bad_cold.swf.wncryt
%APPDATA%\icqm\icq\smiles\flash\beback.swf.wncryt
%APPDATA%\icqm\icq\smiles\flash\beer.swf.wncryt
%APPDATA%\icqm\icq\html\ua\loading\progress_agent.gif.wncryt
%APPDATA%\icqm\icq\smiles\flash\bodun.swf.wncryt
%APPDATA%\icqm\icq\smiles\flash\canthearu.swf.wncryt
%APPDATA%\icqm\icq\smiles\flash\chillout.swf.wncryt
%APPDATA%\icqm\icq\smiles\flash\devochka.swf.wncryt
%APPDATA%\icqm\icq\smiles\flash\drako_bolnoy.swf.wncryt
%APPDATA%\icqm\icq\smiles\flash\drako_koster.swf.wncryt
%APPDATA%\icqm\icq\smiles\flash\drako_love.swf.wncryt
%APPDATA%\icqm\icq\smiles\flash\boo.swf.wncryt
%APPDATA%\icqm\icq\database\citylist_en.csv.wncryt
%APPDATA%\icqm\icq\smiles\flash\love_bear_hugs.swf.wncryt
%APPDATA%\icq-profile\update\@wanadecryptor@.exe.lnk
C:\documents and settings\default user\templates\@wanadecryptor@.exe
<Current directory>\msg\m_latvian.wnry
<Current directory>\msg\m_norwegian.wnry
<Current directory>\msg\m_polish.wnry
<Current directory>\msg\m_portuguese.wnry
<Current directory>\msg\m_romanian.wnry
<Current directory>\msg\m_russian.wnry
<Current directory>\msg\m_spanish.wnry
<Current directory>\taskdl.exe
<Current directory>\msg\m_swedish.wnry
<Current directory>\msg\m_turkish.wnry
<Current directory>\msg\m_vietnamese.wnry
<Current directory>\r.wnry
<Current directory>\s.wnry
<Current directory>\t.wnry
<Current directory>\msg\m_korean.wnry
<Current directory>\msg\m_slovak.wnry
<Current directory>\msg\m_japanese.wnry
<Current directory>\msg\m_danish.wnry
<Current directory>\c.wnry
<Current directory>\msg\m_bulgarian.wnry
<Current directory>\msg\m_chinese (simplified).wnry
<Current directory>\msg\m_chinese (traditional).wnry
<Current directory>\msg\m_croatian.wnry
<Current directory>\msg\m_czech.wnry
<Current directory>\msg\m_dutch.wnry
<Current directory>\msg\m_indonesian.wnry
<Current directory>\msg\m_english.wnry
<Current directory>\msg\m_filipino.wnry
<Current directory>\msg\m_finnish.wnry
<Current directory>\msg\m_french.wnry
<Current directory>\msg\m_german.wnry
<Current directory>\msg\m_greek.wnry
<Current directory>\msg\m_italian.wnry
<Current directory>\taskse.exe
<Current directory>\u.wnry
<Current directory>\00000000.pky
%ALLUSERSPROFILE%\documents\my music\sample music\@please_read_me@.txt
%ALLUSERSPROFILE%\documents\my music\sample music\@wanadecryptor@.exe.lnk
%ALLUSERSPROFILE%\documents\my pictures\sample pictures\@please_read_me@.txt
%ALLUSERSPROFILE%\documents\my pictures\sample pictures\@wanadecryptor@.exe.lnk
%ALLUSERSPROFILE%\documents\my music\sample music\beethoven's symphony no. 9 (scherzo).wma.wncryt
%HOMEPATH%\desktop\dashborder_192.bmp.wncryt
<Current directory>\@wanadecryptor@.exe.lnk
%ALLUSERSPROFILE%\documents\my music\sample music\new stories (highway blues).wma.wncryt
%ALLUSERSPROFILE%\application data\microsoft\user account pictures\@please_read_me@.txt
%ALLUSERSPROFILE%\application data\microsoft\user account pictures\@wanadecryptor@.exe.lnk
C:\documents and settings\default user\application data\microsoft\internet explorer\@please_read_me@.txt
C:\documents and settings\default user\application data\microsoft\internet explorer\@wanadecryptor@.exe.lnk
C:\documents and settings\default user\templates\@please_read_me@.txt
C:\@please_read_me@.txt
C:\@wanadecryptor@.exe
%HOMEPATH%\desktop\dashborder_144.bmp.wncryt
%HOMEPATH%\desktop\@wanadecryptor@.exe
%HOMEPATH%\desktop\@please_read_me@.txt
<Current directory>\00000000.res
<Current directory>\@wanadecryptor@.exe
<Current directory>\125581565238038.bat
<Current directory>\@please_read_me@.txt
<Current directory>\m.vbs
%HOMEPATH%\desktop\2.jpeg.wncryt
<Current directory>\00000000.eky
%HOMEPATH%\desktop\adhd_and_obesity.docx.wncryt
%HOMEPATH%\desktop\february_catalogue__2015.doc.wncryt
%HOMEPATH%\desktop\issi2013_template_for_posters.docx.wncryt
%HOMEPATH%\desktop\nwfieldnotes1966.docx.wncryt
%HOMEPATH%\desktop\sdszfo.docx.wncryt
%HOMEPATH%\desktop\thlps_keeper_mayer_1965.docx.wncryt
%HOMEPATH%\desktop\uep_form_786_bulletin_1726i602.doc.wncryt
<Current directory>\f.wnry
%APPDATA%\icq-profile\update\@please_read_me@.txt
%APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\blushing.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\04b.gif.wncryt
%APPDATA%\icqm\icq\smiles\flash\mad dog.swf.wncryt
%APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\stop.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\surprised.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\thank you.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\thumbs up.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\tongue out.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\koloboks\air_kiss.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\koloboks\biggrin.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\koloboks\cry.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\koloboks\blum1.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\koloboks\blush.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\koloboks\bomb.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\koloboks\bye2.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\koloboks\cool.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\koloboks\crazy.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\smile.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\koloboks\bad.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\scream.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\in love.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\cool.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\crying.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\devil.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\drinking.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\falling asleep.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\gross.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\kiss.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\nothing to say.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\kissed.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\kissing.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\laughing out loud (lol).gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\laughing.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\listening to music.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\mad.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\sad.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\koloboks\dance.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\koloboks\diablo.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\koloboks\drinks.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\koloboks\scratch_one-s_head.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\koloboks\shok.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\koloboks\shout.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\koloboks\smile.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\koloboks\sorry.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\koloboks\rofl.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\koloboks\sad.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\koloboks\unknown.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\koloboks\yahoo.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\koloboks\yes.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\01.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\02.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\03a.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\koloboks\wacko1.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\koloboks\wink.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\koloboks\pardon.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\koloboks\nea.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\koloboks\music.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\koloboks\girl_angel.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\koloboks\give_heart.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\koloboks\give_rose.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\koloboks\good.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\koloboks\hang1.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\koloboks\hi.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\koloboks\gamer.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\koloboks\ireful.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\koloboks\kiss.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\koloboks\kiss3.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\koloboks\lol.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\koloboks\mad.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\koloboks\man_in_love.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\koloboks\mocking.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\koloboks\i_am_so_happy.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\can't say-shut up.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\06a.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\bomb.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\blinking.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\8march\drink.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\8march\flowers.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\8march\hug.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\8march\joy.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\8march\love.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\8march\mad.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\8march\perfume.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\animated\beer.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\8march\ring.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\8march\shoes.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\8march\sunburn.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\animated\angel.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\animated\appl.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\animated\beauty.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\8march\doll.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\8march\new_dress.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\8march\cookie.gif.wncryt
%APPDATA%\icqm\icq\smiles\flash\sobaka.swf.wncryt
%APPDATA%\icqm\icq\smiles\flash\missyou.swf.wncryt
%APPDATA%\icqm\icq\smiles\flash\rabotaet.swf.wncryt
%APPDATA%\icqm\icq\smiles\flash\rosy.swf.wncryt
%APPDATA%\icqm\icq\smiles\flash\serdze.swf.wncryt
%APPDATA%\icqm\icq\smiles\flash\skratch.swf.wncryt
%APPDATA%\icqm\icq\smiles\flash\smeh.swf.wncryt
%APPDATA%\icqm\icq\smiles\flash\sobaka_strelyaet.swf.wncryt
%APPDATA%\icqm\icq\smiles\smiles\8march\car.gif.wncryt
%APPDATA%\icqm\icq\smiles\flash\sorry.swf.wncryt
%APPDATA%\icqm\icq\smiles\flash\tank.swf.wncryt
%APPDATA%\icqm\icq\smiles\flash\wf_love_sdaus.swf.wncryt
%APPDATA%\icqm\icq\smiles\flash\wf_love_srazila.swf.wncryt
%APPDATA%\icqm\icq\smiles\flash\zadolbal.swf.wncryt
%APPDATA%\icqm\icq\smiles\smiles\s008.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\8march\cat.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\animated\blew.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\animated\book.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\animated\could.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\animated\skuka.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\animated\sleep.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\animated\smile.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\animated\tongue.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\animated\victory.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\animated\sad.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\animated\sing.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\animated\wonder.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\cat\cat_lick.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\cat\cat_meow.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\cat\cat_mouse.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\cat\cat_paper.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\angel.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\cat\cat_attack.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\cat\cat_hand.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\animated\red.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\animated\rainbow.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\animated\poison.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\animated\dance.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\animated\devil.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\animated\eat.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\animated\fight.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\animated\fingal.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\animated\flowr.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\animated\cry.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\animated\gg.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\animated\gift.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\animated\history.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\animated\hungry.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\animated\kiss.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\animated\love.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\animated\pistolet.gif.wncryt
%APPDATA%\icqm\icq\smiles\smiles\animated\gg2.gif.wncryt
%APPDATA%\icqm\icq\smiles\flash\love_bear_kiss.swf.wncryt
C:\msocache\all users\{90120000-0030-0000-0000-0000000ff1ce}-c\enterww.cab.wncryt

Deletes the following files

<Current directory>\m.vbs

Moves the following files

from %HOMEPATH%\desktop\2.jpeg.wncryt to %HOMEPATH%\desktop\2.jpeg.wncry
from %APPDATA%\icqm\icq\smiles\smiles\8march\cat.gif to %TEMP%\306.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\8march\car.gif to %TEMP%\305.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\typing.bmp to %TEMP%\304.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\s008.gif to %TEMP%\303.wncryt
from %APPDATA%\icqm\icq\smiles\flash\zadolbal.swf to %TEMP%\302.wncryt
from %APPDATA%\icqm\icq\smiles\flash\wf_love_srazila.swf to %TEMP%\301.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\8march\cookie.gif to %TEMP%\307.wncryt
from %APPDATA%\icqm\icq\smiles\flash\wf_love_srazila.png to %TEMP%\300.wncryt
from %APPDATA%\icqm\icq\smiles\flash\wf_love_sdaus.png to %TEMP%\298.wncryt
from %APPDATA%\icqm\icq\smiles\flash\tank.swf to %TEMP%\297.wncryt
from %APPDATA%\icqm\icq\smiles\flash\tank.png to %TEMP%\296.wncryt
from %APPDATA%\icqm\icq\smiles\flash\sorry.swf to %TEMP%\295.wncryt
from %APPDATA%\icqm\icq\smiles\flash\sorry.png to %TEMP%\294.wncryt
from %APPDATA%\icqm\icq\smiles\flash\sobaka_strelyaet.swf to %TEMP%\293.wncryt
from %APPDATA%\icqm\icq\smiles\flash\wf_love_sdaus.swf to %TEMP%\299.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\8march\doll.gif to %TEMP%\308.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\8march\drink.gif to %TEMP%\309.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\8march\flowers.gif to %TEMP%\310.wncryt
from %APPDATA%\icqm\icq\smiles\flash\kot_obida.png to %TEMP%\253.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\animated\blew.gif to %TEMP%\324.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\animated\beer.gif to %TEMP%\323.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\animated\beauty.gif to %TEMP%\322.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\animated\appl.gif to %TEMP%\321.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\animated\angel.gif to %TEMP%\320.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\8march\sunburn.gif to %TEMP%\319.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\8march\shoes.gif to %TEMP%\318.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\8march\ring.gif to %TEMP%\317.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\8march\perfume.gif to %TEMP%\316.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\8march\new_dress.gif to %TEMP%\315.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\8march\mad.gif to %TEMP%\314.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\8march\love.gif to %TEMP%\313.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\8march\joy.gif to %TEMP%\312.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\8march\hug.gif to %TEMP%\311.wncryt
from %APPDATA%\icqm\icq\smiles\flash\sobaka.swf to %TEMP%\292.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\animated\book.gif to %TEMP%\325.wncryt
from %APPDATA%\icqm\icq\smiles\flash\smeh.swf to %TEMP%\291.wncryt
from %APPDATA%\icqm\icq\smiles\flash\skratch.png to %TEMP%\289.wncryt
from %APPDATA%\icqm\icq\smiles\flash\love_bear_rose.png to %TEMP%\269.wncryt
from %APPDATA%\icqm\icq\smiles\flash\love_bear_kiss.swf to %TEMP%\268.wncryt
from %APPDATA%\icqm\icq\smiles\flash\love_bear_kiss.png to %TEMP%\267.wncryt
from %APPDATA%\icqm\icq\smiles\flash\love_bear_hugs.swf to %TEMP%\266.wncryt
from %APPDATA%\icqm\icq\smiles\flash\love_bear_hugs.png to %TEMP%\265.wncryt
from %APPDATA%\icqm\icq\smiles\flash\likeu.swf to %TEMP%\264.wncryt
from %APPDATA%\icqm\icq\smiles\flash\love_bear_rose.swf to %TEMP%\270.wncryt
from %APPDATA%\icqm\icq\smiles\flash\likeu.png to %TEMP%\263.wncryt
from %APPDATA%\icqm\icq\smiles\flash\laugh.png to %TEMP%\261.wncryt
from %APPDATA%\icqm\icq\smiles\flash\krizis.swf to %TEMP%\260.wncryt
from %APPDATA%\icqm\icq\smiles\flash\krizis.png to %TEMP%\259.wncryt
from %APPDATA%\icqm\icq\smiles\flash\kot_wow.swf to %TEMP%\258.wncryt
from %APPDATA%\icqm\icq\smiles\flash\kot_wow.png to %TEMP%\257.wncryt
from %APPDATA%\icqm\icq\smiles\flash\kot_spasibo.swf to %TEMP%\256.wncryt
from %APPDATA%\icqm\icq\smiles\flash\laugh.swf to %TEMP%\262.wncryt
from %APPDATA%\icqm\icq\smiles\flash\mad dog.swf to %TEMP%\271.wncryt
from %APPDATA%\icqm\icq\smiles\flash\missyou.png to %TEMP%\272.wncryt
from %APPDATA%\icqm\icq\smiles\flash\missyou.swf to %TEMP%\273.wncryt
from %APPDATA%\icqm\icq\smiles\flash\serdze.swf to %TEMP%\288.wncryt
from %APPDATA%\icqm\icq\smiles\flash\rosy.swf to %TEMP%\287.wncryt
from %APPDATA%\icqm\icq\smiles\flash\rabotaet.swf to %TEMP%\286.wncryt
from %APPDATA%\icqm\icq\smiles\flash\mult_working.png to %TEMP%\285.wncryt
from %APPDATA%\icqm\icq\smiles\flash\mult_shoot.png to %TEMP%\284.wncryt
from %APPDATA%\icqm\icq\smiles\flash\mult_roses.png to %TEMP%\283.wncryt
from %APPDATA%\icqm\icq\smiles\flash\mult_maddog.png to %TEMP%\282.wncryt
from %APPDATA%\icqm\icq\smiles\flash\mult_laugh.png to %TEMP%\281.wncryt
from %APPDATA%\icqm\icq\smiles\flash\mult_kiss.png to %TEMP%\280.wncryt
from %APPDATA%\icqm\icq\smiles\flash\mult_heart.png to %TEMP%\279.wncryt
from %APPDATA%\icqm\icq\smiles\flash\mult_hangover.png to %TEMP%\278.wncryt
from %APPDATA%\icqm\icq\smiles\flash\mult_girl.png to %TEMP%\277.wncryt
from %APPDATA%\icqm\icq\smiles\flash\mult_dog.png to %TEMP%\276.wncryt
from %APPDATA%\icqm\icq\smiles\flash\mult_bored.png to %TEMP%\275.wncryt
from %APPDATA%\icqm\icq\smiles\flash\mult_beer.png to %TEMP%\274.wncryt
from %APPDATA%\icqm\icq\smiles\flash\skratch.swf to %TEMP%\290.wncryt
from %APPDATA%\icqm\icq\smiles\flash\kot_spasibo.png to %TEMP%\255.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\animated\cry.gif to %TEMP%\327.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\animated\dance.gif to %TEMP%\328.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f239.png to %TEMP%\380.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f234.png to %TEMP%\378.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f233.png to %TEMP%\377.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f232.png to %TEMP%\376.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f22f.png to %TEMP%\375.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f21a.png to %TEMP%\374.wncryt
from %APPDATA%\icqm\icq\html\pt\loading\progress_agent.gif to %TEMP%\196.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f1fa-1f1f8.png to %TEMP%\373.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f1f7-1f1fa.png to %TEMP%\372.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f1ea-1f1f8.png to %TEMP%\370.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f199.png to %TEMP%\369.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f198.png to %TEMP%\368.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f197.png to %TEMP%\367.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f196.png to %TEMP%\366.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f235.png to %TEMP%\379.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f23a.png to %TEMP%\381.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f310.png to %TEMP%\397.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f194.png to %TEMP%\364.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f251.png to %TEMP%\382.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f30f.png to %TEMP%\396.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f30e.png to %TEMP%\395.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f30d.png to %TEMP%\394.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f30c.png to %TEMP%\393.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f30b.png to %TEMP%\392.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f30a.png to %TEMP%\391.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f309.png to %TEMP%\390.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f308.png to %TEMP%\389.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f307.png to %TEMP%\388.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f306.png to %TEMP%\387.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f304.png to %TEMP%\386.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f303.png to %TEMP%\385.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f301.png to %TEMP%\384.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f300.png to %TEMP%\383.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f195.png to %TEMP%\365.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\animated\gg.gif to %TEMP%\334.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f1ec-1f1e7.png to %TEMP%\371.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f192.png to %TEMP%\363.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\animated\red.gif to %TEMP%\344.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\animated\gg2.gif to %TEMP%\335.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\animated\love.gif to %TEMP%\340.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\animated\kiss.gif to %TEMP%\339.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\animated\hungry.gif to %TEMP%\338.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\animated\history.gif to %TEMP%\337.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\animated\sad.gif to %TEMP%\345.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\animated\gift.gif to %TEMP%\336.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\animated\flowr.gif to %TEMP%\333.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\animated\rainbow.gif to %TEMP%\343.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\animated\fingal.gif to %TEMP%\332.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\animated\fight.gif to %TEMP%\331.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\animated\eat.gif to %TEMP%\330.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\animated\devil.gif to %TEMP%\329.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\animated\poison.gif to %TEMP%\342.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f0cf.png to %TEMP%\360.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f191.png to %TEMP%\362.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\animated\sing.gif to %TEMP%\346.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f18e.png to %TEMP%\361.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\animated\pistolet.gif to %TEMP%\341.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f004.png to %TEMP%\359.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\cat\cat_paper.gif to %TEMP%\358.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\cat\cat_mouse.gif to %TEMP%\357.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\cat\cat_meow.gif to %TEMP%\356.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\cat\cat_lick.gif to %TEMP%\355.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\cat\cat_hand.gif to %TEMP%\354.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\cat\cat_attack.gif to %TEMP%\353.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\animated\wonder.gif to %TEMP%\352.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\animated\victory.gif to %TEMP%\351.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\animated\tongue.gif to %TEMP%\350.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\animated\smile.gif to %TEMP%\349.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\animated\sleep.gif to %TEMP%\348.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\animated\skuka.gif to %TEMP%\347.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\animated\could.gif to %TEMP%\326.wncryt
from %APPDATA%\icqm\icq\smiles\flash\kot_obida.swf to %TEMP%\254.wncryt
from %APPDATA%\icqm\icq\smiles\flash\kot_nedutza.swf to %TEMP%\252.wncryt
from %APPDATA%\icqm\icq\smiles\flash\kot_nedutza.png to %TEMP%\251.wncryt
from %ALLUSERSPROFILE%\application data\microsoft\office\data\opa12.bak to %TEMP%\147.wncryt
from %ALLUSERSPROFILE%\application data\microsoft\user account pictures\default pictures\ball.bmp to %TEMP%\152.wncryt
from %ALLUSERSPROFILE%\application data\microsoft\user account pictures\default pictures\astronaut.bmp to %TEMP%\151.wncryt
from %ALLUSERSPROFILE%\application data\microsoft\user account pictures\default pictures\airplane.bmp to %TEMP%\150.wncryt
from %ALLUSERSPROFILE%\application data\microsoft\user account pictures\user.bmp to %TEMP%\149.wncryt
from %ALLUSERSPROFILE%\application data\microsoft\user account pictures\guest.bmp to %TEMP%\148.wncryt
from %ALLUSERSPROFILE%\application data\microsoft\user account pictures\default pictures\cat.bmp to %TEMP%\156.wncryt
from %ALLUSERSPROFILE%\application data\microsoft\user account pictures\default pictures\butterfly.bmp to %TEMP%\154.wncryt
from %ALLUSERSPROFILE%\application data\microsoft\user account pictures\default pictures\car.bmp to %TEMP%\155.wncryt
from %HOMEPATH%\templates\powerpnt.ppt to %TEMP%\144.wncryt
from %HOMEPATH%\templates\excel4.xls to %TEMP%\143.wncryt
from %HOMEPATH%\templates\excel.xls to %TEMP%\142.wncryt
from <LS_APPDATA>\microsoft\outlook\outlook.pst to %TEMP%\141.wncryt
from %APPDATA%\telegram desktop\log.txt to %TEMP%\132.wncryt
from %HOMEPATH%\templates\winword.doc to %TEMP%\145.wncryt
from %ALLUSERSPROFILE%\application data\microsoft\user account pictures\default pictures\chess.bmp to %TEMP%\157.wncryt
from %ALLUSERSPROFILE%\application data\microsoft\user account pictures\default pictures\snowflake.bmp to %TEMP%\172.wncryt
from %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\revocations.txt to %TEMP%\131.wncryt
from %APPDATA%\microsoft\internet explorer\brndlog.txt to %TEMP%\130.wncryt
from %ALLUSERSPROFILE%\application data\microsoft\user account pictures\default pictures\skater.bmp to %TEMP%\171.wncryt
from %ALLUSERSPROFILE%\application data\microsoft\user account pictures\default pictures\red flower.bmp to %TEMP%\170.wncryt
from %ALLUSERSPROFILE%\application data\microsoft\user account pictures\default pictures\pink flower.bmp to %TEMP%\169.wncryt
from %ALLUSERSPROFILE%\application data\microsoft\user account pictures\default pictures\palm tree.bmp to %TEMP%\168.wncryt
from %ALLUSERSPROFILE%\application data\microsoft\user account pictures\default pictures\lift-off.bmp to %TEMP%\167.wncryt
from %ALLUSERSPROFILE%\application data\microsoft\user account pictures\default pictures\kick.bmp to %TEMP%\166.wncryt
from %ALLUSERSPROFILE%\application data\microsoft\user account pictures\default pictures\horses.bmp to %TEMP%\165.wncryt
from %ALLUSERSPROFILE%\application data\microsoft\user account pictures\default pictures\guitar.bmp to %TEMP%\164.wncryt
from %ALLUSERSPROFILE%\application data\microsoft\user account pictures\default pictures\frog.bmp to %TEMP%\163.wncryt
from %ALLUSERSPROFILE%\application data\microsoft\user account pictures\default pictures\fish.bmp to %TEMP%\162.wncryt
from %ALLUSERSPROFILE%\application data\microsoft\user account pictures\default pictures\duck.bmp to %TEMP%\161.wncryt
from %ALLUSERSPROFILE%\application data\microsoft\user account pictures\default pictures\drip.bmp to %TEMP%\160.wncryt
from %ALLUSERSPROFILE%\application data\microsoft\user account pictures\default pictures\dog.bmp to %TEMP%\159.wncryt
from %ALLUSERSPROFILE%\application data\microsoft\user account pictures\default pictures\dirt bike.bmp to %TEMP%\158.wncryt
from %HOMEPATH%\templates\winword2.doc to %TEMP%\146.wncryt
from %ALLUSERSPROFILE%\application data\microsoft\user account pictures\default pictures\beach.bmp to %TEMP%\153.wncryt
from C:\documents and settings\default user\templates\quattro.wb2 to %TEMP%\175.wncryt
from %APPDATA%\adobe\acrobat\10.0\rdrmessage.zip to %TEMP%\176.wncryt
from <Drive name for removable media>:\contractualdeadlines.zip to %TEMP%\99.wncryt
from <Drive name for removable media>:\background.png to %TEMP%\104.wncryt
from <Drive name for removable media>:\breakpoint.png to %TEMP%\103.wncryt
from <Drive name for removable media>:\block.png to %TEMP%\102.wncryt
from <Drive name for removable media>:\1sm_price.zip to %TEMP%\101.wncryt
from <Drive name for removable media>:\removedtitles_records.zip to %TEMP%\100.wncryt
from C:\documents and settings\default user\templates\winword.doc to %TEMP%\111.wncryt
from C:\documents and settings\default user\templates\excel4.xls to %TEMP%\109.wncryt
from C:\documents and settings\default user\templates\powerpnt.ppt to %TEMP%\110.wncryt
from <Drive name for removable media>:\price030215.zip to %TEMP%\96.wncryt
from <Drive name for removable media>:\productos.zip to %TEMP%\95.wncryt
from <Drive name for removable media>:\fiche_inscription_2015.zip to %TEMP%\94.wncryt
from <Drive name for removable media>:\testwmv.wmv to %TEMP%\93.wncryt
from <Drive name for removable media>:\babyboymaintonotesbackground_pal.wmv to %TEMP%\92.wncryt
from <Drive name for removable media>:\price.zip to %TEMP%\97.wncryt
from C:\documents and settings\default user\templates\winword2.doc to %TEMP%\112.wncryt
from %APPDATA%\icqm\icq\html\ua\error\exclamation.jpg to %TEMP%\127.wncryt
from %APPDATA%\icqm\icq\smiles\skin.txt to %TEMP%\129.wncryt
from C:\documents and settings\default user\templates\excel.xls to %TEMP%\108.wncryt
from %APPDATA%\icqm\icq\html\tr\error\exclamation.jpg to %TEMP%\126.wncryt
from %APPDATA%\icqm\icq\html\ru\error\exclamation.jpg to %TEMP%\125.wncryt
from %APPDATA%\icqm\icq\html\pt\error\exclamation.jpg to %TEMP%\124.wncryt
from %APPDATA%\icqm\icq\html\kz\error\exclamation.jpg to %TEMP%\123.wncryt
from %APPDATA%\icqm\icq\html\en\error\exclamation.jpg to %TEMP%\122.wncryt
from %APPDATA%\icqm\icq\html\de\error\exclamation.jpg to %TEMP%\121.wncryt
from %APPDATA%\icqm\icq\html\cz\error\exclamation.jpg to %TEMP%\120.wncryt
from %APPDATA%\icqm\icq\html\bg\error\exclamation.jpg to %TEMP%\119.wncryt
from %APPDATA%\icqm\icq\database\citylist_uz.csv to %TEMP%\118.wncryt
from %APPDATA%\icqm\icq\database\citylist_ua.csv to %TEMP%\117.wncryt
from %APPDATA%\icqm\icq\database\citylist_tr.csv to %TEMP%\116.wncryt
from %APPDATA%\icqm\icq\database\citylist_ru.csv to %TEMP%\115.wncryt
from %APPDATA%\icqm\icq\database\citylist_kz.csv to %TEMP%\114.wncryt
from %APPDATA%\icqm\icq\database\citylist_en.csv to %TEMP%\113.wncryt
from %APPDATA%\icqm\icq\html\uz\error\exclamation.jpg to %TEMP%\128.wncryt
from %APPDATA%\icqm\icq\graphics\phone\screen-busy-mouse.bmp to %TEMP%\177.wncryt
from %APPDATA%\icqm\icq\smiles\flash\drako_snegyrka.png to %TEMP%\230.wncryt
from %APPDATA%\icqm\icq\graphics\phone\screen-decline-mouse.bmp to %TEMP%\179.wncryt
from %APPDATA%\icqm\icq\smiles\flash\drako_zombie.png to %TEMP%\233.wncryt
from %APPDATA%\icqm\icq\smiles\flash\drako_koster.png to %TEMP%\224.wncryt
from %APPDATA%\icqm\icq\smiles\flash\drako_opyatnica.swf to %TEMP%\229.wncryt
from %APPDATA%\icqm\icq\smiles\flash\drako_opyatnica.png to %TEMP%\228.wncryt
from %APPDATA%\icqm\icq\smiles\flash\drako_love.swf to %TEMP%\227.wncryt
from %APPDATA%\icqm\icq\smiles\flash\drako_love.png to %TEMP%\226.wncryt
from %APPDATA%\icqm\icq\smiles\flash\drako_zombie.swf to %TEMP%\234.wncryt
from %APPDATA%\icqm\icq\smiles\flash\drako_koster.swf to %TEMP%\225.wncryt
from %APPDATA%\icqm\icq\smiles\flash\drako_bolnoy.png to %TEMP%\222.wncryt
from %APPDATA%\icqm\icq\smiles\flash\drako_srach.png to %TEMP%\232.wncryt
from %APPDATA%\icqm\icq\smiles\flash\devochka.swf to %TEMP%\221.wncryt
from %APPDATA%\icqm\icq\smiles\flash\chillout.swf to %TEMP%\220.wncryt
from %APPDATA%\icqm\icq\smiles\flash\chillout.png to %TEMP%\219.wncryt
from %APPDATA%\icqm\icq\smiles\flash\canthearu.swf to %TEMP%\218.wncryt
from %APPDATA%\icqm\icq\smiles\flash\drako_snegyrka.swf to %TEMP%\231.wncryt
from %APPDATA%\icqm\icq\smiles\flash\kot_goodbye.png to %TEMP%\249.wncryt
from %APPDATA%\icqm\icq\smiles\flash\boo.swf to %TEMP%\216.wncryt
from %APPDATA%\icqm\icq\smiles\flash\drako_zp.png to %TEMP%\235.wncryt
from %APPDATA%\icqm\icq\smiles\flash\kot_goodbye.swf to %TEMP%\250.wncryt
from %APPDATA%\icqm\icq\smiles\flash\bodun.swf to %TEMP%\214.wncryt
from %APPDATA%\icqm\icq\smiles\flash\kot_cool.swf to %TEMP%\248.wncryt
from %APPDATA%\icqm\icq\smiles\flash\kot_cool.png to %TEMP%\247.wncryt
from %APPDATA%\icqm\icq\smiles\flash\kisses.swf to %TEMP%\246.wncryt
from %APPDATA%\icqm\icq\smiles\flash\kisses.png to %TEMP%\245.wncryt
from %APPDATA%\icqm\icq\smiles\flash\joy.swf to %TEMP%\244.wncryt
from %APPDATA%\icqm\icq\smiles\flash\joy.png to %TEMP%\243.wncryt
from %APPDATA%\icqm\icq\smiles\flash\information.swf to %TEMP%\242.wncryt
from %APPDATA%\icqm\icq\smiles\flash\information.png to %TEMP%\241.wncryt
from %APPDATA%\icqm\icq\smiles\flash\guby.swf to %TEMP%\240.wncryt
from %APPDATA%\icqm\icq\smiles\flash\gangsta.swf to %TEMP%\239.wncryt
from %APPDATA%\icqm\icq\smiles\flash\gangsta.png to %TEMP%\238.wncryt
from %APPDATA%\icqm\icq\smiles\flash\duh.swf to %TEMP%\237.wncryt
from %APPDATA%\icqm\icq\smiles\flash\duh.png to %TEMP%\236.wncryt
from %APPDATA%\icqm\icq\smiles\flash\canthearu.png to %TEMP%\217.wncryt
from %APPDATA%\icqm\icq\smiles\flash\drako_bolnoy.swf to %TEMP%\223.wncryt
from %APPDATA%\icqm\icq\smiles\flash\boo.png to %TEMP%\215.wncryt
from %APPDATA%\icqm\icq\smiles\flash\beer.swf to %TEMP%\213.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f311.png to %TEMP%\398.wncryt
from %APPDATA%\icqm\icq\html\bg\loading\progress_agent.gif to %TEMP%\186.wncryt
from %APPDATA%\icqm\icq\html\en\loading\progress_agent.gif to %TEMP%\192.wncryt
from %APPDATA%\icqm\icq\html\en\jabber\warning.png to %TEMP%\191.wncryt
from %APPDATA%\icqm\icq\html\de\loading\progress_agent.gif to %TEMP%\190.wncryt
from %APPDATA%\icqm\icq\html\de\jabber\warning.png to %TEMP%\189.wncryt
from %APPDATA%\icqm\icq\html\cz\loading\progress_agent.gif to %TEMP%\188.wncryt
from %APPDATA%\icqm\icq\html\cz\jabber\warning.png to %TEMP%\187.wncryt
from %APPDATA%\icqm\icq\html\bg\jabber\warning.png to %TEMP%\185.wncryt
from %APPDATA%\icqm\icq\html\kz\loading\progress_agent.gif to %TEMP%\194.wncryt
from %APPDATA%\icqm\icq\graphics\phone\screen-online.bmp to %TEMP%\184.wncryt
from %APPDATA%\icqm\icq\graphics\phone\screen-online-inv.bmp to %TEMP%\183.wncryt
from %APPDATA%\icqm\icq\graphics\phone\screen-offline.bmp to %TEMP%\182.wncryt
from %APPDATA%\icqm\icq\graphics\phone\screen-offline-inv.bmp to %TEMP%\181.wncryt
from %APPDATA%\icqm\icq\graphics\phone\screen-decline.bmp to %TEMP%\180.wncryt
from %APPDATA%\icqm\icq\html\pt\jabber\warning.png to %TEMP%\195.wncryt
from <Drive name for removable media>:\passport_pal.wmv to %TEMP%\91.wncryt
from %APPDATA%\icqm\icq\html\ru\jabber\warning.png to %TEMP%\197.wncryt
from %APPDATA%\icqm\icq\html\tr\jabber\warning.png to %TEMP%\199.wncryt
from %APPDATA%\icqm\icq\graphics\phone\screen-busy.bmp to %TEMP%\178.wncryt
from %APPDATA%\icqm\icq\html\kz\jabber\warning.png to %TEMP%\193.wncryt
from %APPDATA%\icqm\icq\smiles\flash\beback.swf to %TEMP%\212.wncryt
from %APPDATA%\icqm\icq\smiles\flash\beback.png to %TEMP%\211.wncryt
from %APPDATA%\icqm\icq\smiles\flash\bad_cold.swf to %TEMP%\210.wncryt
from %APPDATA%\icqm\icq\smiles\flash\bad_cold.png to %TEMP%\209.wncryt
from %APPDATA%\icqm\icq\smiles\flash\angel.swf to %TEMP%\208.wncryt
from %APPDATA%\icqm\icq\smiles\flash\angel.png to %TEMP%\207.wncryt
from %APPDATA%\icqm\icq\smiles\flash\akitaka.swf to %TEMP%\206.wncryt
from %APPDATA%\icqm\icq\smiles\flash\akitaka.png to %TEMP%\205.wncryt
from %APPDATA%\icqm\icq\html\uz\loading\progress_agent.gif to %TEMP%\204.wncryt
from %APPDATA%\icqm\icq\html\uz\jabber\warning.png to %TEMP%\203.wncryt
from %APPDATA%\icqm\icq\html\ua\loading\progress_agent.gif to %TEMP%\202.wncryt
from %APPDATA%\icqm\icq\html\ua\jabber\warning.png to %TEMP%\201.wncryt
from %APPDATA%\icqm\icq\html\tr\loading\progress_agent.gif to %TEMP%\200.wncryt
from %APPDATA%\icqm\icq\html\ru\loading\progress_agent.gif to %TEMP%\198.wncryt
from <Drive name for removable media>:\calculatorworksheet.zip to %TEMP%\98.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f312.png to %TEMP%\399.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f31e.png to %TEMP%\408.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f4bf.png to %TEMP%\602.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f4be.png to %TEMP%\601.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f4bd.png to %TEMP%\600.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f4ba.png to %TEMP%\599.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f4b9.png to %TEMP%\598.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f4b8.png to %TEMP%\597.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f4c0.png to %TEMP%\603.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f4b7.png to %TEMP%\596.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f4b4.png to %TEMP%\594.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f4b0.png to %TEMP%\593.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f4ae.png to %TEMP%\592.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f4a8.png to %TEMP%\591.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f4a3.png to %TEMP%\590.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f49e.png to %TEMP%\589.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f4b6.png to %TEMP%\595.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f4c1.png to %TEMP%\604.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f4c2.png to %TEMP%\605.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f4c5.png to %TEMP%\606.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f4d9.png to %TEMP%\621.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f4d8.png to %TEMP%\620.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f4d7.png to %TEMP%\619.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f4d6.png to %TEMP%\618.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f4d5.png to %TEMP%\617.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f4d4.png to %TEMP%\616.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f4d3.png to %TEMP%\615.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f4d2.png to %TEMP%\614.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f4d1.png to %TEMP%\613.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f4cb.png to %TEMP%\612.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f4ca.png to %TEMP%\611.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f4c9.png to %TEMP%\610.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f4c8.png to %TEMP%\609.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f4c7.png to %TEMP%\608.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f4c6.png to %TEMP%\607.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f49d.png to %TEMP%\588.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f45d.png to %TEMP%\550.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f498.png to %TEMP%\587.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f496.png to %TEMP%\585.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f475.png to %TEMP%\565.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f474.png to %TEMP%\564.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f473.png to %TEMP%\563.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f471.png to %TEMP%\562.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f470.png to %TEMP%\561.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f46f.png to %TEMP%\560.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f476.png to %TEMP%\566.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f46e.png to %TEMP%\559.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f46c.png to %TEMP%\557.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f46b.png to %TEMP%\556.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f46a.png to %TEMP%\555.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f469.png to %TEMP%\554.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f468.png to %TEMP%\553.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f467.png to %TEMP%\552.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f46d.png to %TEMP%\558.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f477.png to %TEMP%\567.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f478.png to %TEMP%\568.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f479.png to %TEMP%\569.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f492.png to %TEMP%\584.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f491.png to %TEMP%\583.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f490.png to %TEMP%\582.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f48f.png to %TEMP%\581.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f48b.png to %TEMP%\580.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f48a.png to %TEMP%\579.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f487.png to %TEMP%\578.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f486.png to %TEMP%\577.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f485.png to %TEMP%\576.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f481.png to %TEMP%\575.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f47f.png to %TEMP%\574.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f47e.png to %TEMP%\573.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f47d.png to %TEMP%\572.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f47c.png to %TEMP%\571.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f47a.png to %TEMP%\570.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f497.png to %TEMP%\586.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f466.png to %TEMP%\551.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f4da.png to %TEMP%\622.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f4eb.png to %TEMP%\631.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f60b.png to %TEMP%\675.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f609.png to %TEMP%\674.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f608.png to %TEMP%\673.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f607.png to %TEMP%\672.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f606.png to %TEMP%\671.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f605.png to %TEMP%\670.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f60e.png to %TEMP%\677.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f60d.png to %TEMP%\676.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f602.png to %TEMP%\667.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f601.png to %TEMP%\666.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f600.png to %TEMP%\665.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f5fe.png to %TEMP%\664.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f5fd.png to %TEMP%\663.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f5fc.png to %TEMP%\662.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f604.png to %TEMP%\669.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f45b.png to %TEMP%\548.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f613.png to %TEMP%\678.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f62d.png to %TEMP%\694.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f62c.png to %TEMP%\693.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f62b.png to %TEMP%\692.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f62a.png to %TEMP%\691.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f629.png to %TEMP%\690.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f628.png to %TEMP%\689.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f625.png to %TEMP%\688.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f624.png to %TEMP%\687.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f622.png to %TEMP%\686.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f621.png to %TEMP%\685.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f61d.png to %TEMP%\684.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f61c.png to %TEMP%\683.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f61b.png to %TEMP%\682.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f61a.png to %TEMP%\681.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f618.png to %TEMP%\680.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f5fb.png to %TEMP%\661.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f603.png to %TEMP%\668.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f4dc.png to %TEMP%\624.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f4db.png to %TEMP%\623.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f524.png to %TEMP%\658.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f4ec.png to %TEMP%\632.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f4f5.png to %TEMP%\637.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f4f4.png to %TEMP%\636.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f4f2.png to %TEMP%\635.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f4f0.png to %TEMP%\634.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f4ed.png to %TEMP%\633.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f4fb.png to %TEMP%\641.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f4f9.png to %TEMP%\639.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f4fa.png to %TEMP%\640.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f4e6.png to %TEMP%\629.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f4e2.png to %TEMP%\628.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f4e1.png to %TEMP%\627.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f4e0.png to %TEMP%\626.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f4dd.png to %TEMP%\625.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f4ea.png to %TEMP%\630.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f500.png to %TEMP%\642.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f523.png to %TEMP%\657.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f52e.png to %TEMP%\659.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f4f6.png to %TEMP%\638.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f522.png to %TEMP%\656.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f521.png to %TEMP%\655.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f520.png to %TEMP%\654.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f51f.png to %TEMP%\653.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f51e.png to %TEMP%\652.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f515.png to %TEMP%\651.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f510.png to %TEMP%\650.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f50f.png to %TEMP%\649.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f50a.png to %TEMP%\648.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f507.png to %TEMP%\647.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f506.png to %TEMP%\646.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f504.png to %TEMP%\645.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f502.png to %TEMP%\644.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f501.png to %TEMP%\643.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f52f.png to %TEMP%\660.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f45c.png to %TEMP%\549.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f45a.png to %TEMP%\547.wncryt
from %APPDATA%\opera software\opera stable\web data_20150820130020.backup.wncryt to %APPDATA%\opera software\opera stable\web data_20150820130020.backup.wncry
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f368.png to %TEMP%\446.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f371.png to %TEMP%\451.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f370.png to %TEMP%\450.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f36f.png to %TEMP%\449.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f36d.png to %TEMP%\448.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f36a.png to %TEMP%\447.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f376.png to %TEMP%\455.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f373.png to %TEMP%\453.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f375.png to %TEMP%\454.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f364.png to %TEMP%\443.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f363.png to %TEMP%\442.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f360.png to %TEMP%\441.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f35f.png to %TEMP%\440.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f35e.png to %TEMP%\439.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f365.png to %TEMP%\444.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f37a.png to %TEMP%\456.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f3a0.png to %TEMP%\471.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f35d.png to %TEMP%\438.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f35c.png to %TEMP%\437.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f392.png to %TEMP%\470.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f391.png to %TEMP%\469.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f38f.png to %TEMP%\468.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f38e.png to %TEMP%\467.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f38a.png to %TEMP%\466.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f389.png to %TEMP%\465.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f387.png to %TEMP%\464.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f386.png to %TEMP%\463.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f385.png to %TEMP%\462.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f383.png to %TEMP%\461.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f382.png to %TEMP%\460.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f381.png to %TEMP%\459.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f380.png to %TEMP%\458.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f37b.png to %TEMP%\457.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f367.png to %TEMP%\445.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f3a6.png to %TEMP%\474.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f3a1.png to %TEMP%\472.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f3a2.png to %TEMP%\473.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f320.png to %TEMP%\409.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f33a.png to %TEMP%\414.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f338.png to %TEMP%\413.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f337.png to %TEMP%\412.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f333.png to %TEMP%\411.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f330.png to %TEMP%\410.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f33f.png to %TEMP%\418.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f33d.png to %TEMP%\416.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f33e.png to %TEMP%\417.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f31a.png to %TEMP%\406.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f318.png to %TEMP%\405.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f317.png to %TEMP%\404.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f316.png to %TEMP%\403.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f315.png to %TEMP%\402.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f31d.png to %TEMP%\407.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f340.png to %TEMP%\419.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f356.png to %TEMP%\434.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f35a.png to %TEMP%\436.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f33b.png to %TEMP%\415.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f354.png to %TEMP%\433.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f353.png to %TEMP%\432.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f352.png to %TEMP%\431.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f351.png to %TEMP%\430.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f350.png to %TEMP%\429.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f34f.png to %TEMP%\428.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f34e.png to %TEMP%\427.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f34b.png to %TEMP%\426.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f34a.png to %TEMP%\425.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f349.png to %TEMP%\424.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f348.png to %TEMP%\423.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f347.png to %TEMP%\422.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f345.png to %TEMP%\421.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f344.png to %TEMP%\420.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f358.png to %TEMP%\435.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f3a8.png to %TEMP%\475.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f430.png to %TEMP%\527.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f3e1.png to %TEMP%\491.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f433.png to %TEMP%\530.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f42f.png to %TEMP%\526.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f42e.png to %TEMP%\525.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f42d.png to %TEMP%\524.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f429.png to %TEMP%\523.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f428.png to %TEMP%\522.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f372.png to %TEMP%\452.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f431.png to %TEMP%\528.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f423.png to %TEMP%\519.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f420.png to %TEMP%\518.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f41d.png to %TEMP%\517.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f41a.png to %TEMP%\516.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f419.png to %TEMP%\515.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f418.png to %TEMP%\514.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f426.png to %TEMP%\521.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f435.png to %TEMP%\531.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f455.png to %TEMP%\545.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f415.png to %TEMP%\512.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f458.png to %TEMP%\546.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f454.png to %TEMP%\544.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f452.png to %TEMP%\543.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f451.png to %TEMP%\542.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f44f.png to %TEMP%\541.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f44d.png to %TEMP%\540.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f44b.png to %TEMP%\539.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f44a.png to %TEMP%\538.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f43c.png to %TEMP%\537.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f43b.png to %TEMP%\536.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f43a.png to %TEMP%\535.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f439.png to %TEMP%\534.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f437.png to %TEMP%\533.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f436.png to %TEMP%\532.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f417.png to %TEMP%\513.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f425.png to %TEMP%\520.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f432.png to %TEMP%\529.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f413.png to %TEMP%\511.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f40f.png to %TEMP%\510.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f3e3.png to %TEMP%\492.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f3b3.png to %TEMP%\482.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f3c7.png to %TEMP%\488.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f3c4.png to %TEMP%\487.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f3c2.png to %TEMP%\486.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f3c0.png to %TEMP%\485.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f3be.png to %TEMP%\484.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f3bd.png to %TEMP%\483.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f3b1.png to %TEMP%\481.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f313.png to %TEMP%\400.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f3b0.png to %TEMP%\480.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f3af.png to %TEMP%\479.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f3ad.png to %TEMP%\478.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f3ac.png to %TEMP%\477.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f3aa.png to %TEMP%\476.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f3e5.png to %TEMP%\494.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f314.png to %TEMP%\401.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f40c.png to %TEMP%\509.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f3e6.png to %TEMP%\495.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f3c9.png to %TEMP%\490.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f3c8.png to %TEMP%\489.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f40a.png to %TEMP%\508.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f409.png to %TEMP%\507.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f402.png to %TEMP%\506.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f400.png to %TEMP%\505.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f3f0.png to %TEMP%\504.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f3ef.png to %TEMP%\503.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f3ed.png to %TEMP%\502.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f3ec.png to %TEMP%\501.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f3eb.png to %TEMP%\500.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f3ea.png to %TEMP%\499.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f3e9.png to %TEMP%\498.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f3e8.png to %TEMP%\497.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f3e7.png to %TEMP%\496.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f3e4.png to %TEMP%\493.wncryt
from <Drive name for removable media>:\babyboymaintoscenesbackground_pal.wmv to %TEMP%\90.wncryt
from <Drive name for removable media>:\arrow-down.png to %TEMP%\89.wncryt
from <Drive name for removable media>:\cleanlyrics.png to %TEMP%\88.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\music.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\koloboks\music.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\scratch_one-s_head.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\koloboks\scratch_one-s_head.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\sad.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\koloboks\sad.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\rofl.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\koloboks\rofl.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\pardon.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\koloboks\pardon.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\nea.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\koloboks\nea.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\sorry.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\koloboks\sorry.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\shout.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\koloboks\shout.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\smile.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\koloboks\smile.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\mad.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\koloboks\mad.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\lol.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\koloboks\lol.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\kiss3.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\koloboks\kiss3.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\kiss.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\koloboks\kiss.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\i_am_so_happy.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\koloboks\i_am_so_happy.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\man_in_love.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\koloboks\man_in_love.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\unknown.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\koloboks\unknown.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\13a.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\13a.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\ireful.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\koloboks\ireful.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\hi.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\koloboks\hi.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\11a.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\11a.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\10a.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\10a.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\09a.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\09a.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\08a.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\08a.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\07a.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\07a.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\06a.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\06a.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\04b.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\04b.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\03a.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\03a.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\02.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\02.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\01.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\01.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\yes.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\koloboks\yes.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\yahoo.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\koloboks\yahoo.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\wink.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\koloboks\wink.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\wacko1.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\koloboks\wacko1.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\mocking.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\koloboks\mocking.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\26a.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\26a.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\14a.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\14a.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\in love.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\in love.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\nothing to say.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\nothing to say.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\surprised.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\surprised.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\stop.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\stop.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\smile.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\smile.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\scream.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\scream.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\sad.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\sad.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\air_kiss.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\koloboks\air_kiss.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\thumbs up.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\thumbs up.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\tongue out.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\tongue out.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\laughing.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\laughing.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\laughing out loud (lol).gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\laughing out loud (lol).gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\kissing.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\kissing.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\kissed.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\kissed.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\kiss.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\kiss.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\listening to music.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\listening to music.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\bad.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\koloboks\bad.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\give_rose.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\koloboks\give_rose.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\hang1.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\koloboks\hang1.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\thank you.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\thank you.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\give_heart.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\koloboks\give_heart.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\girl_angel.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\koloboks\girl_angel.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\gamer.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\koloboks\gamer.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\drinks.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\koloboks\drinks.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\diablo.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\koloboks\diablo.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\dance.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\koloboks\dance.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\cry.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\koloboks\cry.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\crazy.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\koloboks\crazy.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\cool.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\koloboks\cool.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\bye2.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\koloboks\bye2.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\bomb.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\koloboks\bomb.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\blush.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\koloboks\blush.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\blum1.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\koloboks\blum1.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\biggrin.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\koloboks\biggrin.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\good.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\koloboks\good.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\mad.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\mad.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\28a.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\28a.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set03\crazy.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set03\crazy.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set04\s010.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set04\s010.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set04\s009.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set04\s009.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set04\s008.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set04\s008.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set04\s007.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set04\s007.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set04\s006.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set04\s006.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set04\s012.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set04\s012.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set04\s014.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set04\s014.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set04\s005.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set04\s005.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set04\s002.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set04\s002.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set04\s001.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set04\s001.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set03\yahoo.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set03\yahoo.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set03\wink.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set03\wink.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set03\wacko2.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set03\wacko2.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set04\s004.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set04\s004.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set04\s003.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set04\s003.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set05\s016.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set05\s016.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set04\s015.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set04\s015.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set05\s013.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set05\s013.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set05\s012.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set05\s012.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set05\s011.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set05\s011.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set05\s010.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set05\s010.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set05\s009.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set05\s009.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set05\s008.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set05\s008.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set05\s007.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set05\s007.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set05\s006.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set05\s006.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set05\s005.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set05\s005.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set05\s004.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set05\s004.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set05\s003.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set05\s003.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set05\s002.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set05\s002.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set05\s001.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set05\s001.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set04\s016.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set04\s016.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set03\unknw.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set03\unknw.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\27a.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\27a.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set04\s013.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set04\s013.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set04\s011.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set04\s011.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set03\smile.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set03\smile.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set03\blush.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set03\blush.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\49a.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\49a.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set03\bad.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set03\bad.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set03\angel.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set03\angel.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\53a.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\53a.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\52a.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\52a.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set03\cray.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set03\cray.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set03\diablo.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set03\diablo.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\51a.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\51a.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set03\dance.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set03\dance.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\47a.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\47a.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\45a.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\45a.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\44a.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\44a.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\41b.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\41b.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\50a.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\50a.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\48a.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\48a.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set03\scratch_one-s_head.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set03\scratch_one-s_head.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set03\sad.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set03\sad.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\gross.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\gross.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set03\blum.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set03\blum.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set03\rolleyes.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set03\rolleyes.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set03\rofl.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set03\rofl.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set03\pardon.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set03\pardon.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set03\nea.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set03\nea.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set03\music.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set03\music.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set03\mocking.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set03\mocking.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set03\man_in_love.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set03\man_in_love.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set03\kiss_mini.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set03\kiss_mini.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set03\good.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set03\good.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set03\fool.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set03\fool.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set03\facepalm.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set03\facepalm.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set03\drinks.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set03\drinks.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set03\dirol.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set03\dirol.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set03\shout.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set03\shout.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set03\shok.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set03\shok.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\falling asleep.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\falling asleep.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\drinking.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\drinking.gif.wncry
from %APPDATA%\icqm\icq\smiles\flash\duh.swf.wncryt to %APPDATA%\icqm\icq\smiles\flash\duh.swf.wncry
from %APPDATA%\icqm\icq\smiles\flash\drako_snegyrka.swf.wncryt to %APPDATA%\icqm\icq\smiles\flash\drako_snegyrka.swf.wncry
from %APPDATA%\icqm\icq\smiles\flash\drako_opyatnica.swf.wncryt to %APPDATA%\icqm\icq\smiles\flash\drako_opyatnica.swf.wncry
from %APPDATA%\icqm\icq\smiles\flash\drako_love.swf.wncryt to %APPDATA%\icqm\icq\smiles\flash\drako_love.swf.wncry
from %APPDATA%\icqm\icq\smiles\flash\drako_koster.swf.wncryt to %APPDATA%\icqm\icq\smiles\flash\drako_koster.swf.wncry
from %APPDATA%\icqm\icq\smiles\flash\gangsta.swf.wncryt to %APPDATA%\icqm\icq\smiles\flash\gangsta.swf.wncry
from %APPDATA%\icqm\icq\smiles\flash\drako_bolnoy.swf.wncryt to %APPDATA%\icqm\icq\smiles\flash\drako_bolnoy.swf.wncry
from %APPDATA%\icqm\icq\smiles\flash\chillout.swf.wncryt to %APPDATA%\icqm\icq\smiles\flash\chillout.swf.wncry
from %APPDATA%\icqm\icq\smiles\flash\canthearu.swf.wncryt to %APPDATA%\icqm\icq\smiles\flash\canthearu.swf.wncry
from %APPDATA%\icqm\icq\smiles\flash\boo.swf.wncryt to %APPDATA%\icqm\icq\smiles\flash\boo.swf.wncry
from %APPDATA%\icqm\icq\smiles\flash\bodun.swf.wncryt to %APPDATA%\icqm\icq\smiles\flash\bodun.swf.wncry
from %APPDATA%\icqm\icq\smiles\flash\beer.swf.wncryt to %APPDATA%\icqm\icq\smiles\flash\beer.swf.wncry
from %APPDATA%\icqm\icq\smiles\flash\beback.swf.wncryt to %APPDATA%\icqm\icq\smiles\flash\beback.swf.wncry
from %APPDATA%\icqm\icq\smiles\flash\devochka.swf.wncryt to %APPDATA%\icqm\icq\smiles\flash\devochka.swf.wncry
from %APPDATA%\icqm\icq\smiles\flash\guby.swf.wncryt to %APPDATA%\icqm\icq\smiles\flash\guby.swf.wncry
from %APPDATA%\icqm\icq\smiles\flash\information.swf.wncryt to %APPDATA%\icqm\icq\smiles\flash\information.swf.wncry
from %APPDATA%\icqm\icq\smiles\flash\joy.swf.wncryt to %APPDATA%\icqm\icq\smiles\flash\joy.swf.wncry
from %APPDATA%\icqm\icq\smiles\flash\missyou.swf.wncryt to %APPDATA%\icqm\icq\smiles\flash\missyou.swf.wncry
from %APPDATA%\icqm\icq\smiles\flash\mad dog.swf.wncryt to %APPDATA%\icqm\icq\smiles\flash\mad dog.swf.wncry
from %APPDATA%\icqm\icq\smiles\flash\love_bear_rose.swf.wncryt to %APPDATA%\icqm\icq\smiles\flash\love_bear_rose.swf.wncry
from %APPDATA%\icqm\icq\smiles\flash\love_bear_kiss.swf.wncryt to %APPDATA%\icqm\icq\smiles\flash\love_bear_kiss.swf.wncry
from %APPDATA%\icqm\icq\smiles\flash\love_bear_hugs.swf.wncryt to %APPDATA%\icqm\icq\smiles\flash\love_bear_hugs.swf.wncry
from %APPDATA%\icqm\icq\smiles\flash\likeu.swf.wncryt to %APPDATA%\icqm\icq\smiles\flash\likeu.swf.wncry
from %APPDATA%\icqm\icq\smiles\flash\laugh.swf.wncryt to %APPDATA%\icqm\icq\smiles\flash\laugh.swf.wncry
from %APPDATA%\icqm\icq\smiles\flash\krizis.swf.wncryt to %APPDATA%\icqm\icq\smiles\flash\krizis.swf.wncry
from %APPDATA%\icqm\icq\smiles\flash\kot_wow.swf.wncryt to %APPDATA%\icqm\icq\smiles\flash\kot_wow.swf.wncry
from %APPDATA%\icqm\icq\smiles\flash\kot_spasibo.swf.wncryt to %APPDATA%\icqm\icq\smiles\flash\kot_spasibo.swf.wncry
from %APPDATA%\icqm\icq\smiles\flash\kot_obida.swf.wncryt to %APPDATA%\icqm\icq\smiles\flash\kot_obida.swf.wncry
from %APPDATA%\icqm\icq\smiles\flash\kot_nedutza.swf.wncryt to %APPDATA%\icqm\icq\smiles\flash\kot_nedutza.swf.wncry
from %APPDATA%\icqm\icq\smiles\flash\kot_goodbye.swf.wncryt to %APPDATA%\icqm\icq\smiles\flash\kot_goodbye.swf.wncry
from %APPDATA%\icqm\icq\smiles\flash\kot_cool.swf.wncryt to %APPDATA%\icqm\icq\smiles\flash\kot_cool.swf.wncry
from %APPDATA%\icqm\icq\smiles\flash\kisses.swf.wncryt to %APPDATA%\icqm\icq\smiles\flash\kisses.swf.wncry
from %APPDATA%\icqm\icq\smiles\flash\bad_cold.swf.wncryt to %APPDATA%\icqm\icq\smiles\flash\bad_cold.swf.wncry
from %APPDATA%\icqm\icq\smiles\flash\rabotaet.swf.wncryt to %APPDATA%\icqm\icq\smiles\flash\rabotaet.swf.wncry
from %APPDATA%\icqm\icq\smiles\flash\angel.swf.wncryt to %APPDATA%\icqm\icq\smiles\flash\angel.swf.wncry
from %APPDATA%\icqm\icq\html\uz\loading\progress_agent.gif.wncryt to %APPDATA%\icqm\icq\html\uz\loading\progress_agent.gif.wncry
from %APPDATA%\icqm\icq\database\citylist_ru.csv.wncryt to %APPDATA%\icqm\icq\database\citylist_ru.csv.wncry
from %APPDATA%\icqm\icq\database\citylist_kz.csv.wncryt to %APPDATA%\icqm\icq\database\citylist_kz.csv.wncry
from %APPDATA%\icqm\icq\database\citylist_en.csv.wncryt to %APPDATA%\icqm\icq\database\citylist_en.csv.wncry
from %ALLUSERSPROFILE%\documents\my music\sample music\new stories (highway blues).wma.wncryt to %ALLUSERSPROFILE%\documents\my music\sample music\new stories (highway blues).wma.wncry
from %ALLUSERSPROFILE%\documents\my music\sample music\beethoven's symphony no. 9 (scherzo).wma.wncryt to %ALLUSERSPROFILE%\documents\my music\sample music\beethoven's symphony no. 9 (scherzo).wma.wncry
from %HOMEPATH%\desktop\dashborder_192.bmp.wncryt to %HOMEPATH%\desktop\dashborder_192.bmp.wncry
from %APPDATA%\icqm\icq\database\citylist_tr.csv.wncryt to %APPDATA%\icqm\icq\database\citylist_tr.csv.wncry
from %HOMEPATH%\desktop\dashborder_144.bmp.wncryt to %HOMEPATH%\desktop\dashborder_144.bmp.wncry
from %HOMEPATH%\desktop\thlps_keeper_mayer_1965.docx.wncryt to %HOMEPATH%\desktop\thlps_keeper_mayer_1965.docx.wncry
from %HOMEPATH%\desktop\sdszfo.docx.wncryt to %HOMEPATH%\desktop\sdszfo.docx.wncry
from %HOMEPATH%\desktop\nwfieldnotes1966.docx.wncryt to %HOMEPATH%\desktop\nwfieldnotes1966.docx.wncry
from %HOMEPATH%\desktop\issi2013_template_for_posters.docx.wncryt to %HOMEPATH%\desktop\issi2013_template_for_posters.docx.wncry
from %HOMEPATH%\desktop\february_catalogue__2015.doc.wncryt to %HOMEPATH%\desktop\february_catalogue__2015.doc.wncry
from %HOMEPATH%\desktop\adhd_and_obesity.docx.wncryt to %HOMEPATH%\desktop\adhd_and_obesity.docx.wncry
from %HOMEPATH%\desktop\uep_form_786_bulletin_1726i602.doc.wncryt to %HOMEPATH%\desktop\uep_form_786_bulletin_1726i602.doc.wncry
from %APPDATA%\icqm\icq\database\citylist_ua.csv.wncryt to %APPDATA%\icqm\icq\database\citylist_ua.csv.wncry
from %APPDATA%\icqm\icq\database\citylist_uz.csv.wncryt to %APPDATA%\icqm\icq\database\citylist_uz.csv.wncry
from %APPDATA%\icqm\icq\smiles\skin.txt.wncryt to %APPDATA%\icqm\icq\smiles\skin.txt.wncry
from %APPDATA%\icqm\icq\html\ua\loading\progress_agent.gif.wncryt to %APPDATA%\icqm\icq\html\ua\loading\progress_agent.gif.wncry
from %APPDATA%\icqm\icq\html\tr\loading\progress_agent.gif.wncryt to %APPDATA%\icqm\icq\html\tr\loading\progress_agent.gif.wncry
from %APPDATA%\icqm\icq\html\ru\loading\progress_agent.gif.wncryt to %APPDATA%\icqm\icq\html\ru\loading\progress_agent.gif.wncry
from %APPDATA%\icqm\icq\html\pt\loading\progress_agent.gif.wncryt to %APPDATA%\icqm\icq\html\pt\loading\progress_agent.gif.wncry
from %APPDATA%\icqm\icq\html\kz\loading\progress_agent.gif.wncryt to %APPDATA%\icqm\icq\html\kz\loading\progress_agent.gif.wncry
from %APPDATA%\icqm\icq\html\en\loading\progress_agent.gif.wncryt to %APPDATA%\icqm\icq\html\en\loading\progress_agent.gif.wncry
from %APPDATA%\icqm\icq\html\de\loading\progress_agent.gif.wncryt to %APPDATA%\icqm\icq\html\de\loading\progress_agent.gif.wncry
from %APPDATA%\icqm\icq\html\cz\loading\progress_agent.gif.wncryt to %APPDATA%\icqm\icq\html\cz\loading\progress_agent.gif.wncry
from %APPDATA%\icqm\icq\html\bg\loading\progress_agent.gif.wncryt to %APPDATA%\icqm\icq\html\bg\loading\progress_agent.gif.wncry
from C:\documents and settings\default user\templates\quattro.wb2.wncryt to C:\documents and settings\default user\templates\quattro.wb2.wncry
from %ALLUSERSPROFILE%\application data\microsoft\office\data\opa12.bak.wncryt to %ALLUSERSPROFILE%\application data\microsoft\office\data\opa12.bak.wncry
from <LS_APPDATA>\microsoft\outlook\outlook.pst.wncryt to <LS_APPDATA>\microsoft\outlook\outlook.pst.wncry
from %APPDATA%\telegram desktop\log.txt.wncryt to %APPDATA%\telegram desktop\log.txt.wncry
from %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\revocations.txt.wncryt to %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\revocations.txt.wncry
from %APPDATA%\microsoft\internet explorer\brndlog.txt.wncryt to %APPDATA%\microsoft\internet explorer\brndlog.txt.wncry
from %APPDATA%\icqm\icq\smiles\flash\akitaka.swf.wncryt to %APPDATA%\icqm\icq\smiles\flash\akitaka.swf.wncry
from %APPDATA%\icqm\icq\smiles\flash\rosy.swf.wncryt to %APPDATA%\icqm\icq\smiles\flash\rosy.swf.wncry
from %APPDATA%\icqm\icq\smiles\flash\serdze.swf.wncryt to %APPDATA%\icqm\icq\smiles\flash\serdze.swf.wncry
from %APPDATA%\icqm\icq\smiles\flash\drako_zombie.swf.wncryt to %APPDATA%\icqm\icq\smiles\flash\drako_zombie.swf.wncry
from %APPDATA%\icqm\icq\smiles\flash\skratch.swf.wncryt to %APPDATA%\icqm\icq\smiles\flash\skratch.swf.wncry
from %APPDATA%\icqm\icq\smiles\smiles\animated\sing.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\animated\sing.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\animated\kiss.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\animated\kiss.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\animated\sad.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\animated\sad.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\animated\red.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\animated\red.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\animated\rainbow.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\animated\rainbow.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\animated\poison.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\animated\poison.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\animated\sleep.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\animated\sleep.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\animated\victory.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\animated\victory.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\animated\pistolet.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\animated\pistolet.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\animated\tongue.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\animated\tongue.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\animated\history.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\animated\history.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\animated\gift.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\animated\gift.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\animated\gg2.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\animated\gg2.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\animated\gg.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\animated\gg.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\animated\love.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\animated\love.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\animated\hungry.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\animated\hungry.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\devil.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\devil.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\crying.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\crying.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\animated\fingal.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\animated\fingal.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\animated\eat.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\animated\eat.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\cool.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\cool.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\can't say-shut up.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\can't say-shut up.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\bomb.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\bomb.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\blushing.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\blushing.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\blinking.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\blinking.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\angel.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\angel.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\cat\cat_paper.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\cat\cat_paper.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\cat\cat_mouse.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\cat\cat_mouse.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\cat\cat_meow.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\cat\cat_meow.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\cat\cat_lick.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\cat\cat_lick.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\cat\cat_hand.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\cat\cat_hand.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\cat\cat_attack.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\cat\cat_attack.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\animated\wonder.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\animated\wonder.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\animated\flowr.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\animated\flowr.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\animated\smile.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\animated\smile.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\animated\fight.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\animated\fight.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\8march\flowers.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\8march\flowers.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\animated\skuka.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\animated\skuka.gif.wncry
from %APPDATA%\icqm\icq\smiles\flash\wf_love_srazila.swf.wncryt to %APPDATA%\icqm\icq\smiles\flash\wf_love_srazila.swf.wncry
from %APPDATA%\icqm\icq\smiles\smiles\8march\doll.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\8march\doll.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\8march\cookie.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\8march\cookie.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\8march\cat.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\8march\cat.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\8march\car.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\8march\car.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\s008.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\s008.gif.wncry
from %APPDATA%\icqm\icq\smiles\flash\zadolbal.swf.wncryt to %APPDATA%\icqm\icq\smiles\flash\zadolbal.swf.wncry
from %APPDATA%\icqm\icq\smiles\flash\wf_love_sdaus.swf.wncryt to %APPDATA%\icqm\icq\smiles\flash\wf_love_sdaus.swf.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set05\s015.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set05\s015.gif.wncry
from %APPDATA%\icqm\icq\smiles\flash\tank.swf.wncryt to %APPDATA%\icqm\icq\smiles\flash\tank.swf.wncry
from %APPDATA%\icqm\icq\smiles\flash\sorry.swf.wncryt to %APPDATA%\icqm\icq\smiles\flash\sorry.swf.wncry
from %APPDATA%\icqm\icq\smiles\flash\sobaka_strelyaet.swf.wncryt to %APPDATA%\icqm\icq\smiles\flash\sobaka_strelyaet.swf.wncry
from %APPDATA%\icqm\icq\smiles\flash\sobaka.swf.wncryt to %APPDATA%\icqm\icq\smiles\flash\sobaka.swf.wncry
from %APPDATA%\icqm\icq\smiles\flash\smeh.swf.wncryt to %APPDATA%\icqm\icq\smiles\flash\smeh.swf.wncry
from %APPDATA%\icqm\icq\smiles\smiles\8march\hug.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\8march\hug.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\8march\joy.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\8march\joy.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set05\s014.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set05\s014.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\8march\mad.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\8march\mad.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\8march\love.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\8march\love.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\8march\drink.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\8march\drink.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\animated\dance.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\animated\dance.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\animated\cry.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\animated\cry.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\animated\could.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\animated\could.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\animated\book.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\animated\book.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\animated\blew.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\animated\blew.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\animated\beer.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\animated\beer.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\animated\beauty.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\animated\beauty.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\animated\appl.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\animated\appl.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\animated\angel.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\animated\angel.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\8march\sunburn.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\8march\sunburn.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\8march\shoes.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\8march\shoes.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\8march\ring.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\8march\ring.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\8march\perfume.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\8march\perfume.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\8march\new_dress.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\8march\new_dress.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\animated\devil.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\animated\devil.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\shok.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\koloboks\shok.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set05\s017.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set05\s017.gif.wncry
from <LS_APPDATA>\chromium\user data\default\preferences_20150820130020.backup.wncryt to <LS_APPDATA>\chromium\user data\default\preferences_20150820130020.backup.wncry
from %HOMEPATH%\cookies\user@win-rar[1].txt.wncryt to %HOMEPATH%\cookies\user@win-rar[1].txt.wncry
from <LS_APPDATA>\chromium\user data\default\bookmarks_20150820130020.backup.wncryt to <LS_APPDATA>\chromium\user data\default\bookmarks_20150820130020.backup.wncry
from %HOMEPATH%\cookies\user@yandex[2].txt.wncryt to %HOMEPATH%\cookies\user@yandex[2].txt.wncry
from %HOMEPATH%\cookies\user@yadro[1].txt.wncryt to %HOMEPATH%\cookies\user@yadro[1].txt.wncry
from %HOMEPATH%\cookies\user@www.msn[1].txt.wncryt to %HOMEPATH%\cookies\user@www.msn[1].txt.wncry
from %HOMEPATH%\cookies\user@winrar.softkey[2].txt.wncryt to %HOMEPATH%\cookies\user@winrar.softkey[2].txt.wncry
from <LS_APPDATA>\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\main.js.wncryt to <LS_APPDATA>\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\main.js.wncry
from <LS_APPDATA>\google\chrome\user data\chrome_shutdown_ms.txt.wncryt to <LS_APPDATA>\google\chrome\user data\chrome_shutdown_ms.txt.wncry
from <LS_APPDATA>\google\chrome\user data\default\bookmarks_20150820130020.backup.wncryt to <LS_APPDATA>\google\chrome\user data\default\bookmarks_20150820130020.backup.wncry
from %HOMEPATH%\cookies\user@scorecardresearch[2].txt.wncryt to %HOMEPATH%\cookies\user@scorecardresearch[2].txt.wncry
from %HOMEPATH%\cookies\user@rarlab[1].txt.wncryt to %HOMEPATH%\cookies\user@rarlab[1].txt.wncry
from %HOMEPATH%\cookies\user@rambler[2].txt.wncryt to %HOMEPATH%\cookies\user@rambler[2].txt.wncry
from %HOMEPATH%\cookies\user@rabotaetvse[1].txt.wncryt to %HOMEPATH%\cookies\user@rabotaetvse[1].txt.wncry
from %HOMEPATH%\cookies\user@point4all[2].txt.wncryt to %HOMEPATH%\cookies\user@point4all[2].txt.wncry
from %HOMEPATH%\cookies\user@serving-sys[2].txt.wncryt to %HOMEPATH%\cookies\user@serving-sys[2].txt.wncry
from <LS_APPDATA>\google\chrome\user data\default\service worker\cachestorage\b5828dd7cc3b943f8890a5bb6e3b1b63e8ee8703\index.txt.wncryt to <LS_APPDATA>\google\chrome\user data\default\service worker\cachestorage\b5828dd7cc3b943f8890a5bb6e3b1b63e8ee8703\index.txt.wncry
from %HOMEPATH%\desktop\tileimage.bmp to %TEMP%\12.wncryt
from %HOMEPATH%\cookies\user@opera[1].txt.wncryt to %HOMEPATH%\cookies\user@opera[1].txt.wncry
from %HOMEPATH%\cookies\user@openstat[1].txt.wncryt to %HOMEPATH%\cookies\user@openstat[1].txt.wncry
from %HOMEPATH%\desktop\join.avi to %TEMP%\11.wncryt
from %HOMEPATH%\desktop\dashborder_192.bmp to %TEMP%\10.wncryt
from %HOMEPATH%\desktop\dashborder_144.bmp to %TEMP%\9.wncryt
from %HOMEPATH%\desktop\uep_form_786_bulletin_1726i602.doc to %TEMP%\8.wncryt
from %HOMEPATH%\desktop\thlps_keeper_mayer_1965.docx to %TEMP%\7.wncryt
from %HOMEPATH%\desktop\sdszfo.docx to %TEMP%\6.wncryt
from %HOMEPATH%\desktop\nwfieldnotes1966.docx to %TEMP%\5.wncryt
from %HOMEPATH%\desktop\issi2013_template_for_posters.docx to %TEMP%\4.wncryt
from %HOMEPATH%\desktop\february_catalogue__2015.doc to %TEMP%\3.wncryt
from %HOMEPATH%\desktop\adhd_and_obesity.docx to %TEMP%\2.wncryt
from %HOMEPATH%\desktop\2.jpeg to %TEMP%\1.wncryt
from %HOMEPATH%\templates\sndrec.wav.wncryt to %HOMEPATH%\templates\sndrec.wav.wncry
from <LS_APPDATA>\nichrome\user data\default\preferences_20150820130020.backup.wncryt to <LS_APPDATA>\nichrome\user data\default\preferences_20150820130020.backup.wncry
from <LS_APPDATA>\nichrome\user data\default\bookmarks_20150820130020.backup.wncryt to <LS_APPDATA>\nichrome\user data\default\bookmarks_20150820130020.backup.wncry
from %HOMEPATH%\cookies\user@softkey[2].txt.wncryt to %HOMEPATH%\cookies\user@softkey[2].txt.wncry
from %ALLUSERSPROFILE%\documents\my pictures\sample pictures\water lilies.jpg to %TEMP%\15.wncryt
from %ALLUSERSPROFILE%\documents\my pictures\sample pictures\blue hills.jpg to %TEMP%\13.wncryt
from %ALLUSERSPROFILE%\documents\my pictures\sample pictures\sunset.jpg to %TEMP%\14.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\smiles\live.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\smiles\live.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\smiles\think.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\smiles\think.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\smiles\tears.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\smiles\tears.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\smiles\sleepy.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\smiles\sleepy.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\smiles\plug.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\smiles\plug.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\smiles\ok.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\smiles\ok.gif.wncry
from %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\sessionstore-backups\previous.js.wncryt to %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\sessionstore-backups\previous.js.wncry
from %APPDATA%\microsoft\internet explorer\brndlog.bak.wncryt to %APPDATA%\microsoft\internet explorer\brndlog.bak.wncry
from %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\sitesecurityservicestate.txt.wncryt to %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\sitesecurityservicestate.txt.wncry
from %APPDATA%\icqm\icq\smiles\smiles\smiles\koza_left.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\smiles\koza_left.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\smiles\fuck.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\smiles\fuck.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\smiles\fist.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\smiles\fist.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\smiles\die.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\smiles\die.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\smiles\devil.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\smiles\devil.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\smiles\koza_right.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\smiles\koza_right.gif.wncry
from %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\sessionstore-backups\recovery.js.wncryt to %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\sessionstore-backups\recovery.js.wncry
from %HOMEPATH%\cookies\user@microsoft[1].txt.wncryt to %HOMEPATH%\cookies\user@microsoft[1].txt.wncry
from %HOMEPATH%\cookies\user@msn[1].txt.wncryt to %HOMEPATH%\cookies\user@msn[1].txt.wncry
from %APPDATA%\icqm\icq\smiles\smiles\smiles\victory.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\smiles\victory.gif.wncry
from %HOMEPATH%\cookies\user@mail[1].txt.wncryt to %HOMEPATH%\cookies\user@mail[1].txt.wncry
from %HOMEPATH%\cookies\user@help.softkey[3].txt.wncryt to %HOMEPATH%\cookies\user@help.softkey[3].txt.wncry
from %HOMEPATH%\cookies\user@help.softkey[2].txt.wncryt to %HOMEPATH%\cookies\user@help.softkey[2].txt.wncry
from %HOMEPATH%\cookies\user@d.castplatform[2].txt.wncryt to %HOMEPATH%\cookies\user@d.castplatform[2].txt.wncry
from %HOMEPATH%\cookies\user@c.msn[1].txt.wncryt to %HOMEPATH%\cookies\user@c.msn[1].txt.wncry
from %HOMEPATH%\cookies\user@c.bing[1].txt.wncryt to %HOMEPATH%\cookies\user@c.bing[1].txt.wncry
from %HOMEPATH%\cookies\user@bluekai[2].txt.wncryt to %HOMEPATH%\cookies\user@bluekai[2].txt.wncry
from %HOMEPATH%\cookies\user@bing[1].txt.wncryt to %HOMEPATH%\cookies\user@bing[1].txt.wncry
from %HOMEPATH%\cookies\user@atdmt[1].txt.wncryt to %HOMEPATH%\cookies\user@atdmt[1].txt.wncry
from %HOMEPATH%\cookies\user@adobe[1].txt.wncryt to %HOMEPATH%\cookies\user@adobe[1].txt.wncry
from %HOMEPATH%\cookies\user@adnxs[1].txt.wncryt to %HOMEPATH%\cookies\user@adnxs[1].txt.wncry
from %HOMEPATH%\cookies\user@7ba[1].txt.wncryt to %HOMEPATH%\cookies\user@7ba[1].txt.wncry
from %HOMEPATH%\cookies\user@326944[1].txt.wncryt to %HOMEPATH%\cookies\user@326944[1].txt.wncry
from %APPDATA%\opera software\opera stable\opera_shutdown_ms.txt.wncryt to %APPDATA%\opera software\opera stable\opera_shutdown_ms.txt.wncry
from %HOMEPATH%\cookies\user@mon.softkey[2].txt.wncryt to %HOMEPATH%\cookies\user@mon.softkey[2].txt.wncry
from %ALLUSERSPROFILE%\documents\my pictures\sample pictures\winter.jpg to %TEMP%\16.wncryt
from <Drive name for removable media>:\2013_finalsummaryforweb.xlsx to %TEMP%\68.wncryt
from <Drive name for removable media>:\3.jpeg to %TEMP%\32.wncryt
from <Drive name for removable media>:\split.avi to %TEMP%\71.wncryt
from <Drive name for removable media>:\applicant.xlsx to %TEMP%\67.wncryt
from <Drive name for removable media>:\fiche_inscription_2015.xls to %TEMP%\66.wncryt
from <Drive name for removable media>:\productos.xls to %TEMP%\65.wncryt
from <Drive name for removable media>:\contractualdeadlines.xls to %TEMP%\64.wncryt
from <Drive name for removable media>:\subjectclassification.xls to %TEMP%\63.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\set05\s018.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set05\s018.gif.wncry
from <Drive name for removable media>:\suspendedcompanies.xlsx to %TEMP%\69.wncryt
from <Drive name for removable media>:\1sm_price.xls to %TEMP%\60.wncryt
from <Drive name for removable media>:\router_manual.rtf to %TEMP%\59.wncryt
from <Drive name for removable media>:\fungalnameauthors.rtf to %TEMP%\58.wncryt
from <Drive name for removable media>:\myhrvoldhanssenbiharfamine.rtf to %TEMP%\57.wncryt
from <Drive name for removable media>:\static_electricity_easy_and_quick_activities.rtf to %TEMP%\56.wncryt
from <Drive name for removable media>:\pubnet_855.rtf to %TEMP%\55.wncryt
from <Drive name for removable media>:\calculatorworksheet.xls to %TEMP%\62.wncryt
from <Drive name for removable media>:\join.avi to %TEMP%\72.wncryt
from <Drive name for removable media>:\asm.png to %TEMP%\86.wncryt
from <Drive name for removable media>:\samieee_obiee_presentation.pptx to %TEMP%\53.wncryt
from <Drive name for removable media>:\calibre.png to %TEMP%\87.wncryt
from <Drive name for removable media>:\systisoft.pem to %TEMP%\85.wncryt
from <Drive name for removable media>:\cert.pem to %TEMP%\84.wncryt
from <Drive name for removable media>:\ck_ugo.pem to %TEMP%\83.wncryt
from <Drive name for removable media>:\ck.pem to %TEMP%\82.wncryt
from <Drive name for removable media>:\51.mp4 to %TEMP%\81.wncryt
from <Drive name for removable media>:\d0068197bb5a41fea16a220c45390606.mp4 to %TEMP%\80.wncryt
from <Drive name for removable media>:\clip_1080_5sec_10mbps_h264.mp4 to %TEMP%\79.wncryt
from <Drive name for removable media>:\video.mp4 to %TEMP%\78.wncryt
from <Drive name for removable media>:\dag2_panel1_320_ref.mov to %TEMP%\77.wncryt
from <Drive name for removable media>:\dashborder_96.bmp to %TEMP%\76.wncryt
from <Drive name for removable media>:\dial.bmp to %TEMP%\75.wncryt
from <Drive name for removable media>:\toolbar.bmp to %TEMP%\74.wncryt
from <Drive name for removable media>:\000814251_video_01.avi to %TEMP%\73.wncryt
from <Drive name for removable media>:\waterlandhealthkano.rtf to %TEMP%\54.wncryt
from <Drive name for removable media>:\removedtitles_records.xls to %TEMP%\61.wncryt
from <Drive name for removable media>:\cee_mmsprogram_summary_public.xlsx to %TEMP%\70.wncryt
from <Drive name for removable media>:\stoc13_ml_quoc_le.pptx to %TEMP%\52.wncryt
from <Drive name for removable media>:\indogerman2010.pptx to %TEMP%\51.wncryt
from <Drive name for removable media>:\2.jpeg to %TEMP%\33.wncryt
from <Drive name for removable media>:\applicantform_en.doc to %TEMP%\23.wncryt
from <Drive name for removable media>:\aoc_saq_d_v3_merchant.docx to %TEMP%\29.wncryt
from <Drive name for removable media>:\glidescope_review_rev_010.docx to %TEMP%\28.wncryt
from <Drive name for removable media>:\adhd_and_obesity.docx to %TEMP%\27.wncryt
from <Drive name for removable media>:\holycrosschurchinstructions.docx to %TEMP%\26.wncryt
from <Drive name for removable media>:\thlps_keeper_mayer_1965.docx to %TEMP%\25.wncryt
from <Drive name for removable media>:\sdszfo.docx to %TEMP%\24.wncryt
from <Drive name for removable media>:\fi51.doc to %TEMP%\22.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\smiles\detzl.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\smiles\detzl.gif.wncry
from <Drive name for removable media>:\uep_form_786_bulletin_1726i602.doc to %TEMP%\21.wncryt
from <Drive name for removable media>:\lisp_success.doc to %TEMP%\20.wncryt
from <Drive name for removable media>:\lisp_success.doc to %TEMP%\19.wncryt
from %ALLUSERSPROFILE%\documents\my music\sample music\new stories (highway blues).wma to %TEMP%\18.wncryt
from %ALLUSERSPROFILE%\documents\my music\sample music\beethoven's symphony no. 9 (scherzo).wma to %TEMP%\17.wncryt
from <Drive name for removable media>:\2.jpg to %TEMP%\35.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\smiles\kukes.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\smiles\kukes.gif.wncry
from <Drive name for removable media>:\iso27k_isms_implementation_and_certification_process_overview_v2.pptx to %TEMP%\50.wncryt
from <Drive name for removable media>:\210252809.jpg to %TEMP%\36.wncryt
from <Drive name for removable media>:\1189.jpeg to %TEMP%\31.wncryt
from <Drive name for removable media>:\parnas_01.jpeg to %TEMP%\30.wncryt
from <Drive name for removable media>:\gruenspecht_02172016.pptx to %TEMP%\49.wncryt
from <Drive name for removable media>:\metac.ppt to %TEMP%\48.wncryt
from <Drive name for removable media>:\sim_gametheory_to_finance.ppt to %TEMP%\47.wncryt
from <Drive name for removable media>:\accountsreceivable.ppt to %TEMP%\46.wncryt
from <Drive name for removable media>:\writingcompletesarnarrative_1103.ppt to %TEMP%\45.wncryt
from <Drive name for removable media>:\proposaltemplates.ppt to %TEMP%\44.wncryt
from <Drive name for removable media>:\dualectls.pdf to %TEMP%\43.wncryt
from <Drive name for removable media>:\fil_20060629111052.pdf to %TEMP%\42.wncryt
from <Drive name for removable media>:\2015-02-worms-nanoparticle-toxicity.pdf to %TEMP%\41.wncryt
from <Drive name for removable media>:\10thingscondoms.pdf to %TEMP%\40.wncryt
from <Drive name for removable media>:\spib_pima.pdf to %TEMP%\39.wncryt
from <Drive name for removable media>:\pushkin.jpg to %TEMP%\38.wncryt
from <Drive name for removable media>:\168.jpg to %TEMP%\37.wncryt
from <Drive name for removable media>:\region-north-karelia.jpeg to %TEMP%\34.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f616.png to %TEMP%\679.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f630.png to %TEMP%\695.wncryt
from %APPDATA%\icqm\icq\smiles\smiles\smiles\biganger.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\smiles\biganger.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\valentine\on_wings.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\valentine\on_wings.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\valentine\lets_play.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\valentine\lets_play.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\valentine\kissed.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\valentine\kissed.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\valentine\kiss.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\valentine\kiss.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\valentine\jealousy.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\valentine\jealousy.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\valentine\want_you.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\valentine\want_you.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\valentine\in_love.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\valentine\in_love.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\valentine\broken_heart.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\valentine\broken_heart.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\smiles\zloradstvo.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\smiles\zloradstvo.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\smiles\vampire.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\smiles\vampire.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\smiles\smile.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\smiles\smile.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\smiles\shy.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\smiles\shy.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\smiles\sceptic.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\smiles\sceptic.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\valentine\dont_be_late.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\valentine\dont_be_late.gif.wncry
from %APPDATA%\icqm\icq\sounds\auth.mp3.wncryt to %APPDATA%\icqm\icq\sounds\auth.mp3.wncry
from %APPDATA%\icqm\icq\sounds\busy.mp3.wncryt to %APPDATA%\icqm\icq\sounds\busy.mp3.wncry
from %APPDATA%\icqm\icq\sounds\call_in.wav.wncryt to %APPDATA%\icqm\icq\sounds\call_in.wav.wncry
from %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\cert8.db.wncryt to %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\cert8.db.wncry
from %APPDATA%\microsoft\templates\normal.dotm.wncryt to %APPDATA%\microsoft\templates\normal.dotm.wncry
from %APPDATA%\microsoft\document building blocks\1033\building blocks.dotx.wncryt to %APPDATA%\microsoft\document building blocks\1033\building blocks.dotx.wncry
from %APPDATA%\icqm\icq\video\video.swf.wncryt to %APPDATA%\icqm\icq\video\video.swf.wncry
from %APPDATA%\icqm\icq\sounds\voiceend.wav.wncryt to %APPDATA%\icqm\icq\sounds\voiceend.wav.wncry
from %APPDATA%\icqm\icq\sounds\test_sound.wav.wncryt to %APPDATA%\icqm\icq\sounds\test_sound.wav.wncry
from %APPDATA%\icqm\icq\sounds\start.wav.wncryt to %APPDATA%\icqm\icq\sounds\start.wav.wncry
from %APPDATA%\icqm\icq\sounds\ring.mp3.wncryt to %APPDATA%\icqm\icq\sounds\ring.mp3.wncry
from %APPDATA%\icqm\icq\sounds\otprav.wav.wncryt to %APPDATA%\icqm\icq\sounds\otprav.wav.wncry
from %APPDATA%\icqm\icq\sounds\otprav.mp3.wncryt to %APPDATA%\icqm\icq\sounds\otprav.mp3.wncry
from %APPDATA%\icqm\icq\sounds\no_answer.wav.wncryt to %APPDATA%\icqm\icq\sounds\no_answer.wav.wncry
from %APPDATA%\icqm\icq\sounds\message.mp3.wncryt to %APPDATA%\icqm\icq\sounds\message.mp3.wncry
from %APPDATA%\icqm\icq\sounds\letter.wav.wncryt to %APPDATA%\icqm\icq\sounds\letter.wav.wncry
from %APPDATA%\icqm\icq\sounds\error.wav.wncryt to %APPDATA%\icqm\icq\sounds\error.wav.wncry
from %APPDATA%\icqm\icq\sounds\conference.mp3.wncryt to %APPDATA%\icqm\icq\sounds\conference.mp3.wncry
from %APPDATA%\icqm\icq\smiles\smiles\smiles\rrr.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\smiles\rrr.gif.wncry
from %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\key3.db.wncryt to %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\key3.db.wncry
from %APPDATA%\icqm\icq\smiles\smiles\smiles\really.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\smiles\really.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\smiles\oo.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\smiles\oo.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set06\s014.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set06\s014.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set06\s013.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set06\s013.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set06\s012.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set06\s012.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set06\s011.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set06\s011.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set06\s010.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set06\s010.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set06\s009.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set06\s009.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set06\s015.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set06\s015.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set06\s008.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set06\s008.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set06\s004.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set06\s004.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set06\s003.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set06\s003.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set06\s002.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set06\s002.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set06\s001.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set06\s001.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set05\s020.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set05\s020.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set05\s019.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set05\s019.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set06\s006.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set06\s006.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set06\s016.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set06\s016.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set06\s017.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set06\s017.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set06\s018.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set06\s018.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\smiles\laughter.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\smiles\laughter.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\smiles\kiss.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\smiles\kiss.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\smiles\hm.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\smiles\hm.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\smiles\heart.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\smiles\heart.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\smiles\disappointed.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\smiles\disappointed.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\smiles\cry.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\smiles\cry.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\smiles\coolguy.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\smiles\coolguy.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\smiles\bullshit.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\smiles\bullshit.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\smiles\blink.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\smiles\blink.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\smiles\bee.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\smiles\bee.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\smiles\bazilio.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\smiles\bazilio.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\smiles\ass.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\smiles\ass.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\smiles\angry.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\smiles\angry.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set06\s020.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set06\s020.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set06\s019.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set06\s019.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\smiles\pig.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\smiles\pig.gif.wncry
from %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\prefs.js.wncryt to %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\prefs.js.wncry
from %APPDATA%\icqm\icq\smiles\smiles\valentine\undress.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\valentine\undress.gif.wncry
from %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\prefs.js_20150820125841.backup.wncryt to %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\prefs.js_20150820125841.backup.wncry
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\24a.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\24a.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\17a.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\17a.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\23a.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\23a.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\22a.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\22a.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\21a.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\21a.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\20a.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\20a.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\19a.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\19a.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\30a.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\30a.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\25a.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\25a.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\29a.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\29a.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\12a.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\12a.gif.wncry
from %APPDATA%\adobe\acrobat\9.0\javascripts\glob.settings.js.wncryt to %APPDATA%\adobe\acrobat\9.0\javascripts\glob.settings.js.wncry
from %APPDATA%\adobe\acrobat\9.0\javascripts\glob.js.wncryt to %APPDATA%\adobe\acrobat\9.0\javascripts\glob.js.wncry
from %APPDATA%\adobe\acrobat\10.0\javascripts\glob.settings.js.wncryt to %APPDATA%\adobe\acrobat\10.0\javascripts\glob.settings.js.wncry
from %APPDATA%\adobe\acrobat\10.0\javascripts\glob.js.wncryt to %APPDATA%\adobe\acrobat\10.0\javascripts\glob.js.wncry
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\15a.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\15a.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\31a.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\31a.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\smiles\amazed.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\smiles\amazed.gif.wncry
from C:\documents and settings\default user\templates\sndrec.wav.wncryt to C:\documents and settings\default user\templates\sndrec.wav.wncry
from C:\documents and settings\default user\application data\microsoft\internet explorer\brndlog.bak.wncryt to C:\documents and settings\default user\application data\microsoft\internet explorer\brndlog.bak.wncry
from %APPDATA%\icqm\icq\smiles\smiles\smiles\aaa.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\smiles\aaa.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set03\give_rose.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set03\give_rose.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\set03\biggrin.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\set03\biggrin.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\46a.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\46a.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\43a.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\43a.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\42a.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\42a.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\40a.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\40a.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\39a.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\39a.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\38a.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\38a.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\37.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\37.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\36a.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\36a.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\34a.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\34a.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\33a.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\33a.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\32a.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\32a.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\16a.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\16a.gif.wncry
from C:\documents and settings\default user\application data\microsoft\internet explorer\brndlog.txt.wncryt to C:\documents and settings\default user\application data\microsoft\internet explorer\brndlog.txt.wncry
from C:\autoexec.bat.wncryt to C:\autoexec.bat.wncry
from %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\prefs.js_20150820130023.backup.wncryt to %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\prefs.js_20150820130023.backup.wncry
from %APPDATA%\opera software\opera stable\bookmarks_20150820130020.backup.wncryt to %APPDATA%\opera software\opera stable\bookmarks_20150820130020.backup.wncry
from %APPDATA%\opera software\opera stable\preferences_20150820125838.backup.wncryt to %APPDATA%\opera software\opera stable\preferences_20150820125838.backup.wncry
from %APPDATA%\opera software\opera stable\favorites.db.wncryt to %APPDATA%\opera software\opera stable\favorites.db.wncry
from %APPDATA%\opera software\opera stable\browser.js.wncryt to %APPDATA%\opera software\opera stable\browser.js.wncry
from %APPDATA%\opera software\opera stable\bookmarks_20150820130023.backup.wncryt to %APPDATA%\opera software\opera stable\bookmarks_20150820130023.backup.wncry
from %APPDATA%\opera software\opera stable\bookmarks_20150820130022.backup.wncryt to %APPDATA%\opera software\opera stable\bookmarks_20150820130022.backup.wncry
from %APPDATA%\opera software\opera stable\bookmarks_20150820130021.backup.wncryt to %APPDATA%\opera software\opera stable\bookmarks_20150820130021.backup.wncry
from %APPDATA%\opera software\opera stable\bookmarks_20150820125841.backup.wncryt to %APPDATA%\opera software\opera stable\bookmarks_20150820125841.backup.wncry
from %APPDATA%\opera software\opera stable\thumbnails.db.wncryt to %APPDATA%\opera software\opera stable\thumbnails.db.wncry
from %APPDATA%\opera software\opera stable\bookmarks_20150820125840.backup.wncryt to %APPDATA%\opera software\opera stable\bookmarks_20150820125840.backup.wncry
from %APPDATA%\opera software\opera stable\bookmarks_20150820125839.backup.wncryt to %APPDATA%\opera software\opera stable\bookmarks_20150820125839.backup.wncry
from %APPDATA%\opera software\opera stable\bookmarks_20150820125838.backup.wncryt to %APPDATA%\opera software\opera stable\bookmarks_20150820125838.backup.wncry
from %APPDATA%\opera software\opera stable\bookmarks.bak.wncryt to %APPDATA%\opera software\opera stable\bookmarks.bak.wncry
from %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\user.js.wncryt to %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\user.js.wncry
from %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\secmod.db.wncryt to %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\secmod.db.wncry
from %APPDATA%\icqm\icq\smiles\smiles\smiles\biggrin.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\smiles\biggrin.gif.wncry
from %APPDATA%\icqm\icq\smiles\smiles\smiles\crocodile.gif.wncryt to %APPDATA%\icqm\icq\smiles\smiles\smiles\crocodile.gif.wncry
from %APPDATA%\opera software\opera stable\web data_20150820125838.backup.wncryt to %APPDATA%\opera software\opera stable\web data_20150820125838.backup.wncry
from %APPDATA%\thunderbird\profiles\cr5sc40q.default\key3.db.wncryt to %APPDATA%\thunderbird\profiles\cr5sc40q.default\key3.db.wncry
from %APPDATA%\opera software\opera stable\preferences_20150820130020.backup.wncryt to %APPDATA%\opera software\opera stable\preferences_20150820130020.backup.wncry
from %HOMEPATH%\templates\quattro.wb2.wncryt to %HOMEPATH%\templates\quattro.wb2.wncry
from <LS_APPDATA>\nichrome\user data\default\web data_20150820130020.backup.wncryt to <LS_APPDATA>\nichrome\user data\default\web data_20150820130020.backup.wncry
from <LS_APPDATA>\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\images\flapper.gif.wncryt to <LS_APPDATA>\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\images\flapper.gif.wncry
from <LS_APPDATA>\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\craw_window.js.wncryt to <LS_APPDATA>\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\craw_window.js.wncry
from <LS_APPDATA>\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\craw_background.js.wncryt to <LS_APPDATA>\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\craw_background.js.wncry
from <LS_APPDATA>\google\chrome\user data\default\extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.5_0\audio\chime.wav.wncryt to <LS_APPDATA>\google\chrome\user data\default\extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.5_0\audio\chime.wav.wncry
from <LS_APPDATA>\google\chrome\user data\default\databases\databases.db.wncryt to <LS_APPDATA>\google\chrome\user data\default\databases\databases.db.wncry
from <LS_APPDATA>\google\chrome\user data\default\preferences_20150820130020.backup.wncryt to <LS_APPDATA>\google\chrome\user data\default\preferences_20150820130020.backup.wncry
from <LS_APPDATA>\google\chrome\user data\default\preferences_20150820125837.backup.wncryt to <LS_APPDATA>\google\chrome\user data\default\preferences_20150820125837.backup.wncry
from <LS_APPDATA>\google\chrome\user data\default\bookmarks.bak.wncryt to <LS_APPDATA>\google\chrome\user data\default\bookmarks.bak.wncry
from <LS_APPDATA>\chromium\user data\default\web data_20150820130020.backup.wncryt to <LS_APPDATA>\chromium\user data\default\web data_20150820130020.backup.wncry
from <LS_APPDATA>\iconcache.db.wncryt to <LS_APPDATA>\iconcache.db.wncry
from %APPDATA%\thunderbird\profiles\cr5sc40q.default\secmod.db.wncryt to %APPDATA%\thunderbird\profiles\cr5sc40q.default\secmod.db.wncry
from %APPDATA%\thunderbird\profiles\cr5sc40q.default\prefs.js.wncryt to %APPDATA%\thunderbird\profiles\cr5sc40q.default\prefs.js.wncry
from %APPDATA%\thunderbird\profiles\cr5sc40q.default\cert8.db.wncryt to %APPDATA%\thunderbird\profiles\cr5sc40q.default\cert8.db.wncry
from %APPDATA%\icqm\icq\smiles\smiles\emoji\1f631.png to %TEMP%\696.wncryt

Substitutes the following files

%TEMP%\20.wncryt
%TEMP%\81.wncryt
%TEMP%\80.wncryt
%TEMP%\79.wncryt
%TEMP%\78.wncryt
%TEMP%\77.wncryt
%TEMP%\76.wncryt
%TEMP%\75.wncryt
%TEMP%\74.wncryt
%TEMP%\73.wncryt
%TEMP%\72.wncryt
%TEMP%\71.wncryt
%TEMP%\70.wncryt
%TEMP%\69.wncryt
%TEMP%\68.wncryt
%TEMP%\67.wncryt
%TEMP%\66.wncryt
%TEMP%\65.wncryt
%TEMP%\63.wncryt
%TEMP%\64.wncryt
%TEMP%\82.wncryt
%TEMP%\83.wncryt
%TEMP%\101.wncryt
%TEMP%\100.wncryt
%TEMP%\99.wncryt
%TEMP%\98.wncryt
%TEMP%\97.wncryt
%TEMP%\96.wncryt
%TEMP%\95.wncryt
%TEMP%\94.wncryt
%TEMP%\92.wncryt
%TEMP%\50.wncryt
%TEMP%\91.wncryt
%TEMP%\90.wncryt
%TEMP%\89.wncryt
%TEMP%\88.wncryt
%TEMP%\87.wncryt
%TEMP%\86.wncryt
%TEMP%\85.wncryt
%TEMP%\84.wncryt
%TEMP%\62.wncryt
%TEMP%\61.wncryt
%TEMP%\60.wncryt
%TEMP%\36.wncryt
%TEMP%\35.wncryt
%TEMP%\34.wncryt
%TEMP%\33.wncryt
%TEMP%\32.wncryt
%TEMP%\31.wncryt
%TEMP%\30.wncryt
%TEMP%\29.wncryt
%TEMP%\28.wncryt
%TEMP%\27.wncryt
%TEMP%\26.wncryt
%TEMP%\25.wncryt
%TEMP%\24.wncryt
%TEMP%\23.wncryt
%TEMP%\22.wncryt
%TEMP%\21.wncryt
%TEMP%\38.wncryt
%TEMP%\39.wncryt
%TEMP%\37.wncryt
%TEMP%\40.wncryt
%TEMP%\59.wncryt
%TEMP%\41.wncryt
%TEMP%\58.wncryt
%TEMP%\57.wncryt
%TEMP%\56.wncryt
%TEMP%\55.wncryt
%TEMP%\54.wncryt
%TEMP%\53.wncryt
%TEMP%\52.wncryt
%TEMP%\93.wncryt
%TEMP%\102.wncryt
%TEMP%\49.wncryt
%TEMP%\48.wncryt
%TEMP%\47.wncryt
%TEMP%\46.wncryt
%TEMP%\45.wncryt
%TEMP%\44.wncryt
%TEMP%\43.wncryt
%TEMP%\42.wncryt
%TEMP%\51.wncryt
%TEMP%\103.wncryt

Modifies user data files (Trojan.Encoder).

Changes user data files extensions (Trojan.Encoder).

Miscellaneous

Creates and executes the following

'<Current directory>\taskdl.exe'
'<SYSTEM32>\attrib.exe' +h .' (with hidden window)
'<Current directory>\taskdl.exe' ' (with hidden window)
'<SYSTEM32>\cmd.exe' /c 125581565238038.bat' (with hidden window)
'<SYSTEM32>\attrib.exe' +h +s D:\$RECYCLE' (with hidden window)

Executes the following

'<SYSTEM32>\attrib.exe' +h .
'<SYSTEM32>\cmd.exe' /c 125581565238038.bat
'<SYSTEM32>\cscript.exe' //nologo m.vbs
'<SYSTEM32>\attrib.exe' +h +s D:\$RECYCLE

Technologies

Terminology

Training and education

Myths

Technical Information

Curing recommendations

Free trial