Trojan.Encoder.29670

Technical Information

To ensure autorun and distribution

Creates or modifies the following files

%ALLUSERSPROFILE%\start menu\programs\startup\ryukreadme.html
%APPDATA%\microsoft\excel\xlstart\ryukreadme.html
%APPDATA%\microsoft\word\startup\ryukreadme.html

Malicious functions

Reads files which store third party applications passwords

%HOMEPATH%\desktop\aoc_saq_d_v3_merchant.docx
%HOMEPATH%\desktop\tree_view.html
%HOMEPATH%\desktop\tree_view.htm
%HOMEPATH%\desktop\toolbar.bmp
%HOMEPATH%\desktop\testee.cer
%HOMEPATH%\desktop\sdksampleunprivdeveloper.cer
%HOMEPATH%\desktop\issi2013_template_for_posters.docx
%HOMEPATH%\desktop\iisstart.htm
%HOMEPATH%\desktop\holycrosschurchinstructions.docx
%HOMEPATH%\desktop\hanni_umami_chapter.doc
%HOMEPATH%\desktop\dashborder_192.bmp
%HOMEPATH%\desktop\cveuropeo.doc
%HOMEPATH%\desktop\contoso_1.cer
%HOMEPATH%\desktop\coffee.bmp
%HOMEPATH%\desktop\browse.htm
%HOMEPATH%\desktop\archer.avi
%HOMEPATH%\desktop\applicantform_en.doc
%HOMEPATH%\desktop\api-hashmap.html
<LS_APPDATA>\chromium\user data\default\web data
<LS_APPDATA>\nichrome\user data\default\web data

Modifies file system

Creates the following files

<Current directory>\upxholc.exe
%APPDATA%\mirc\scripts\ryukreadme.html
%APPDATA%\mirc\logs\ryukreadme.html
%APPDATA%\mirc\downloads\ryukreadme.html
%APPDATA%\mirc\channels\ryukreadme.html
%APPDATA%\mirc\ryukreadme.html
%APPDATA%\microsoft\word\ryukreadme.html
%APPDATA%\microsoft\windows\themes\ryukreadme.html
%APPDATA%\microsoft\windows\ryukreadme.html
%APPDATA%\microsoft\uproof\ryukreadme.html
%APPDATA%\microsoft\templates\ryukreadme.html
%APPDATA%\microsoft\systemcertificates\my\ctls\ryukreadme.html
%APPDATA%\microsoft\systemcertificates\my\crls\ryukreadme.html
%APPDATA%\microsoft\systemcertificates\my\certificates\ryukreadme.html
%APPDATA%\microsoft\systemcertificates\my\ryukreadme.html
%APPDATA%\microsoft\speech\ryukreadme.html
%APPDATA%\opera software\ryukreadme.html
%APPDATA%\microsoft\publisher\ryukreadme.html
%APPDATA%\microsoft\protect\s-1-5-21-1229272821-842925246-1060284298-1003\ryukreadme.html
%APPDATA%\microsoft\protect\ryukreadme.html
%APPDATA%\microsoft\proof\ryukreadme.html
%APPDATA%\microsoft\outlook\ryukreadme.html
%APPDATA%\microsoft\office\recent\ryukreadme.html
%APPDATA%\microsoft\office\ryukreadme.html
%APPDATA%\microsoft\msdn\7.0\ryukreadme.html
%APPDATA%\microsoft\msdn\ryukreadme.html
%APPDATA%\microsoft\mmc\ryukreadme.html
%APPDATA%\microsoft\media player\ryukreadme.html
%APPDATA%\microsoft\internet explorer\quick launch\ryukreadme.html
%APPDATA%\microsoft\internet explorer\ryukreadme.html
%APPDATA%\microsoft\systemcertificates\ryukreadme.html
%APPDATA%\macromedia\flash player\macromedia.com\ryukreadme.html
%APPDATA%\opera software\opera stable\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\0\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\ryukreadme.html
%APPDATA%\sun\java\deployment\ryukreadme.html
%APPDATA%\sun\java\au\ryukreadme.html
%APPDATA%\sun\java\ryukreadme.html
%APPDATA%\sun\ryukreadme.html
%APPDATA%\qipguard\ryukreadme.html
%APPDATA%\qip\profiles\logs\ryukreadme.html
%APPDATA%\qip\profiles\ryukreadme.html
%APPDATA%\qip\ryukreadme.html
%APPDATA%\oracle\java\jre1.8.0_60\ryukreadme.html
%APPDATA%\oracle\java\ryukreadme.html
%APPDATA%\oracle\ryukreadme.html
%APPDATA%\microsoft\imjp9_0\ryukreadme.html
%APPDATA%\mirc\sounds\ryukreadme.html
%APPDATA%\opera software\opera stable\pepper data\shockwave flash\writableroot\#sharedobjects\bpfp7kkz\macromedia.com\support\flashplayer\ryukreadme.html
%APPDATA%\opera software\opera stable\pepper data\shockwave flash\writableroot\#sharedobjects\bpfp7kkz\macromedia.com\support\ryukreadme.html
%APPDATA%\opera software\opera stable\pepper data\shockwave flash\writableroot\#sharedobjects\bpfp7kkz\macromedia.com\ryukreadme.html
%APPDATA%\opera software\opera stable\pepper data\shockwave flash\writableroot\#sharedobjects\bpfp7kkz\ryukreadme.html
%APPDATA%\opera software\opera stable\pepper data\shockwave flash\writableroot\#sharedobjects\ryukreadme.html
%APPDATA%\opera software\opera stable\pepper data\shockwave flash\writableroot\ryukreadme.html
%APPDATA%\opera software\opera stable\pepper data\shockwave flash\cachewritableadoberoot\assetcache\5l589s97\ryukreadme.html
%APPDATA%\opera software\opera stable\pepper data\shockwave flash\cachewritableadoberoot\assetcache\ryukreadme.html
%APPDATA%\opera software\opera stable\pepper data\shockwave flash\cachewritableadoberoot\ryukreadme.html
%APPDATA%\opera software\opera stable\pepper data\shockwave flash\ryukreadme.html
%APPDATA%\opera software\opera stable\pepper data\ryukreadme.html
%APPDATA%\opera software\opera stable\local storage\ryukreadme.html
volume{6a9759b0-c6f5-11e6-92ae-0800279ec8ab}\system volume information\tracking.log.tmp
%APPDATA%\opera software\opera stable\extension state\ryukreadme.html
%APPDATA%\opera software\opera stable\pepper data\shockwave flash\writableroot\#sharedobjects\bpfp7kkz\macromedia.com\support\flashplayer\sys\ryukreadme.html
%APPDATA%\opera software\opera stable\dictionaries\ryukreadme.html
%APPDATA%\microsoft\imjp8_1\ryukreadme.html
%APPDATA%\microsoft\imjp12\ryukreadme.html
%APPDATA%\microsoft\ime12\ryukreadme.html
%APPDATA%\icqm\icq\skin_cache\ryukreadme.html
%APPDATA%\icqm\icq\smiles\smiles\set06\ryukreadme.html
%APPDATA%\icqm\icq\smiles\smiles\set05\ryukreadme.html
%APPDATA%\icqm\icq\smiles\smiles\set04\ryukreadme.html
%APPDATA%\icqm\icq\smiles\smiles\set03\ryukreadme.html
%APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\ryukreadme.html
%APPDATA%\icqm\icq\smiles\smiles\koloboks\ryukreadme.html
%APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\ryukreadme.html
%APPDATA%\icqm\icq\smiles\smiles\emoji\ryukreadme.html
%APPDATA%\icqm\icq\smiles\smiles\cat\ryukreadme.html
%APPDATA%\icqm\icq\smiles\smiles\animated\ryukreadme.html
%APPDATA%\icqm\icq\smiles\smiles\8march\ryukreadme.html
%APPDATA%\icqm\icq\smiles\smiles\ryukreadme.html
%APPDATA%\icqm\icq\smiles\flash\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\1\ryukreadme.html
%APPDATA%\icqm\icq\smiles\smiles\static_png\ryukreadme.html
%APPDATA%\icqm\icq\skin\ryukreadme.html
%APPDATA%\icqm\icq\html\uz\loading\ryukreadme.html
%APPDATA%\icqm\icq\html\uz\jabber\ryukreadme.html
%APPDATA%\icqm\icq\html\uz\error\ryukreadme.html
%APPDATA%\icqm\icq\html\uz\ryukreadme.html
%APPDATA%\icqm\icq\html\ua\loading\ryukreadme.html
%APPDATA%\icqm\icq\html\ua\jabber\ryukreadme.html
%APPDATA%\icqm\icq\html\ua\error\ryukreadme.html
%APPDATA%\icqm\icq\html\ua\ryukreadme.html
%APPDATA%\icqm\icq\html\tr\loading\ryukreadme.html
%APPDATA%\icqm\icq\html\tr\jabber\ryukreadme.html
%APPDATA%\icqm\icq\html\tr\error\ryukreadme.html
%APPDATA%\icqm\icq\html\tr\ryukreadme.html
%APPDATA%\icqm\icq\html\ru\loading\ryukreadme.html
%APPDATA%\icqm\icq\smiles\ryukreadme.html
%APPDATA%\opera software\opera stable\widevinecdm\ryukreadme.html
%APPDATA%\icqm\icq\smiles\smiles\valentine\ryukreadme.html
%APPDATA%\icqm\icq\smiles\statuses\gtalk\ryukreadme.html
%APPDATA%\icqm\icq\smiles\statuses\ryukreadme.html
%APPDATA%\microsoft\excel\ryukreadme.html
%APPDATA%\microsoft\document building blocks\1033\ryukreadme.html
%APPDATA%\microsoft\document building blocks\ryukreadme.html
%APPDATA%\microsoft\dbgclr\7.1\ryukreadme.html
%APPDATA%\microsoft\dbgclr\ryukreadme.html
%APPDATA%\microsoft\crypto\rsa\s-1-5-21-1229272821-842925246-1060284298-1003\ryukreadme.html
%APPDATA%\microsoft\crypto\rsa\ryukreadme.html
%APPDATA%\microsoft\crypto\ryukreadme.html
%APPDATA%\microsoft\credentials\s-1-5-21-1229272821-842925246-1060284298-1003\ryukreadme.html
%APPDATA%\microsoft\credentials\ryukreadme.html
%APPDATA%\microsoft\addins\ryukreadme.html
%APPDATA%\microsoft\ryukreadme.html
%APPDATA%\macromedia\flash player\macromedia.com\support\flashplayer\sys\ryukreadme.html
%APPDATA%\icqm\icq\smiles\statuses\aim\ryukreadme.html
%APPDATA%\macromedia\flash player\macromedia.com\support\flashplayer\ryukreadme.html
%APPDATA%\icqm\icq\smiles\smiles\smiles\ryukreadme.html
%APPDATA%\macromedia\flash player\#sharedobjects\gprus39x\ryukreadme.html
%APPDATA%\macromedia\flash player\#sharedobjects\ryukreadme.html
%APPDATA%\macromedia\flash player\ryukreadme.html
%APPDATA%\macromedia\ryukreadme.html
%APPDATA%\identities\{d6909be8-ea09-4677-9635-1238019fcabc}\ryukreadme.html
%APPDATA%\identities\ryukreadme.html
%APPDATA%\icqm\icq\video\ryukreadme.html
%APPDATA%\icqm\icq\translation\ryukreadme.html
%APPDATA%\icqm\icq\sounds\ryukreadme.html
%APPDATA%\icqm\icq\smiles\statuses\vk\ryukreadme.html
%APPDATA%\icqm\icq\smiles\statuses\set01\ryukreadme.html
%APPDATA%\icqm\icq\smiles\statuses\jabber\ryukreadme.html
%APPDATA%\icqm\icq\smiles\statuses\icq\ryukreadme.html
%APPDATA%\macromedia\flash player\macromedia.com\support\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\57\ryukreadme.html
<LS_APPDATA>\opera software\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\12\ryukreadme.html
<LS_APPDATA>\cef\user data\dictionaries\ryukreadme.html
<LS_APPDATA>\cef\user data\ryukreadme.html
<LS_APPDATA>\cef\ryukreadme.html
<LS_APPDATA>\applicationhistory\ryukreadme.html
<LS_APPDATA>\adobe\updater6\install\ryukreadme.html
<LS_APPDATA>\adobe\updater6\ryukreadme.html
<LS_APPDATA>\adobe\color\ryukreadme.html
<LS_APPDATA>\adobe\acrobat\9.0\updater\ryukreadme.html
<LS_APPDATA>\adobe\acrobat\9.0\cache\ryukreadme.html
<LS_APPDATA>\adobe\acrobat\9.0\ryukreadme.html
<LS_APPDATA>\adobe\acrobat\10.0\cache\search\ryukreadme.html
<LS_APPDATA>\adobe\acrobat\10.0\cache\ryukreadme.html
<LS_APPDATA>\adobe\acrobat\10.0\ryukreadme.html
<LS_APPDATA>\adobe\acrobat\ryukreadme.html
<LS_APPDATA>\ryukreadme.html
<LS_APPDATA>\chromium\user data\ryukreadme.html
%HOMEPATH%\favorites\links\почта.url
%HOMEPATH%\favorites\links\яндекс.url
%HOMEPATH%\local settings\ryukreadme.html
%HOMEPATH%\favorites\links\ryukreadme.html
%HOMEPATH%\favorites\ryukreadme.html
%HOMEPATH%\desktop\ryukreadme.html
%HOMEPATH%\cookies\ryukreadme.html
%APPDATA%\yandex\ryukreadme.html
%APPDATA%\winrar\ryukreadme.html
%APPDATA%\thunderbird\profiles\cr5sc40q.default\minidumps\ryukreadme.html
%APPDATA%\thunderbird\profiles\cr5sc40q.default\ryukreadme.html
%APPDATA%\thunderbird\profiles\ryukreadme.html
%APPDATA%\thunderbird\crash reports\ryukreadme.html
<LS_APPDATA>\adobe\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\10\ryukreadme.html
<LS_APPDATA>\chromium\user data\default\ryukreadme.html
<LS_APPDATA>\nichrome\user data\default\ryukreadme.html
<LS_APPDATA>\nichrome\user data\ryukreadme.html
<LS_APPDATA>\nichrome\ryukreadme.html
<LS_APPDATA>\microsoft help\ryukreadme.html
<LS_APPDATA>\microsoft\windows media\9.0\ryukreadme.html
<LS_APPDATA>\microsoft\windows media\ryukreadme.html
<LS_APPDATA>\microsoft\windows\ryukreadme.html
<LS_APPDATA>\microsoft\outlook\ryukreadme.html
<LS_APPDATA>\microsoft\office\onetconfig\ryukreadme.html
<LS_APPDATA>\microsoft\office\groove\user\ryukreadme.html
<LS_APPDATA>\microsoft\office\groove\system\ryukreadme.html
<LS_APPDATA>\microsoft\office\groove\ryukreadme.html
<LS_APPDATA>\microsoft\office\12.0\ryukreadme.html
<LS_APPDATA>\microsoft\office\ryukreadme.html
%APPDATA%\thunderbird\ryukreadme.html
<LS_APPDATA>\chromium\ryukreadme.html
<LS_APPDATA>\microsoft\media player\ryukreadme.html
<LS_APPDATA>\microsoft\internet explorer\services\ryukreadme.html
<LS_APPDATA>\microsoft\internet explorer\ryukreadme.html
<LS_APPDATA>\microsoft\imjp9_0\ryukreadme.html
<LS_APPDATA>\microsoft\imjp8_1\ryukreadme.html
<LS_APPDATA>\microsoft\imjp12\ryukreadme.html
<LS_APPDATA>\microsoft\ime12\ryukreadme.html
<LS_APPDATA>\microsoft\forms\ryukreadme.html
<LS_APPDATA>\microsoft\dbgclr\7.1\ryukreadme.html
<LS_APPDATA>\microsoft\dbgclr\ryukreadme.html
<LS_APPDATA>\microsoft\credentials\s-1-5-21-1229272821-842925246-1060284298-1003\ryukreadme.html
<LS_APPDATA>\microsoft\credentials\ryukreadme.html
<LS_APPDATA>\microsoft\cd burning\ryukreadme.html
<LS_APPDATA>\microsoft\ryukreadme.html
<LS_APPDATA>\microsoft\msdn\ryukreadme.html
<LS_APPDATA>\google\ryukreadme.html
%APPDATA%\telegram desktop\tdata\dumps\ryukreadme.html
%APPDATA%\telegram desktop\tdata\d877f783d5d3ef8c\ryukreadme.html
%APPDATA%\telegram desktop\tdata\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\26\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\39\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\38\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\37\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\36\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\35\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\34\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\33\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\32\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\31\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\30\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\3\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\29\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\28\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\11\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\40\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\25\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\24\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\23\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\22\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\21\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\20\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\2\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\19\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\18\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\17\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\16\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\15\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\14\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\13\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\27\ryukreadme.html
%APPDATA%\icqm\icq\html\ru\jabber\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\41\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\44\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\42\ryukreadme.html
%APPDATA%\telegram desktop\ryukreadme.html
%APPDATA%\sun\java\deployment\tmp\si\ryukreadme.html
%APPDATA%\sun\java\deployment\tmp\ryukreadme.html
%APPDATA%\sun\java\deployment\security\ryukreadme.html
%APPDATA%\sun\java\deployment\log\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\9\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\8\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\7\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\63\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\62\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\61\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\60\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\6\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\43\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\59\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\4\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\56\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\55\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\54\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\53\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\52\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\51\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\50\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\5\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\49\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\48\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\47\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\46\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\45\ryukreadme.html
%APPDATA%\sun\java\deployment\cache\6.0\58\ryukreadme.html
<LS_APPDATA>\microsoft\msdn\7.0\ryukreadme.html
%APPDATA%\icqm\icq\html\ru\error\ryukreadme.html
%APPDATA%\icqm\icq\html\de\ryukreadme.html
%ALLUSERSPROFILE%\start menu\programs\microsoft .net framework sdk v1.1\ryukreadme.html
%ALLUSERSPROFILE%\start menu\programs\games\ryukreadme.html
%ALLUSERSPROFILE%\start menu\programs\administrative tools\ryukreadme.html
%ALLUSERSPROFILE%\start menu\programs\accessories\system tools\ryukreadme.html
%ALLUSERSPROFILE%\start menu\programs\accessories\entertainment\ryukreadme.html
%ALLUSERSPROFILE%\start menu\programs\accessories\communications\ryukreadme.html
%ALLUSERSPROFILE%\start menu\programs\accessories\accessibility\ryukreadme.html
%ALLUSERSPROFILE%\start menu\programs\accessories\ryukreadme.html
%ALLUSERSPROFILE%\start menu\programs\ryukreadme.html
%ALLUSERSPROFILE%\start menu\ryukreadme.html
%ALLUSERSPROFILE%\favorites\ryukreadme.html
%ALLUSERSPROFILE%\drm\ryukreadme.html
%ALLUSERSPROFILE%\documents\my videos\ryukreadme.html
%ALLUSERSPROFILE%\documents\my pictures\sample pictures\ryukreadme.html
%ALLUSERSPROFILE%\documents\my music\sample playlists\00107ff6\ryukreadme.html
%ALLUSERSPROFILE%\start menu\programs\microsoft office\microsoft office tools\ryukreadme.html
%ALLUSERSPROFILE%\documents\my music\sample playlists\ryukreadme.html
%ALLUSERSPROFILE%\documents\my music\sample music\ryukreadme.html
%ALLUSERSPROFILE%\documents\my music\my playlists\ryukreadme.html
%ALLUSERSPROFILE%\documents\my music\ryukreadme.html
%ALLUSERSPROFILE%\documents\ryukreadme.html
%ALLUSERSPROFILE%\desktop\ryukreadme.html
%ALLUSERSPROFILE%\application data\sun\java\java update\ryukreadme.html
%ALLUSERSPROFILE%\application data\sun\java\ryukreadme.html
%ALLUSERSPROFILE%\application data\sun\ryukreadme.html
%ALLUSERSPROFILE%\application data\package cache\{f0080ca2-80ae-4958-b6eb-e8fa916d744a}\ryukreadme.html
%ALLUSERSPROFILE%\application data\package cache\{be960c1c-7bad-3de6-8b1a-2616fe532845}v14.0.23026\packages\vcruntimeadditional_x86\ryukreadme.html
%ALLUSERSPROFILE%\application data\package cache\{be960c1c-7bad-3de6-8b1a-2616fe532845}v14.0.23026\packages\ryukreadme.html
%ALLUSERSPROFILE%\application data\package cache\{be960c1c-7bad-3de6-8b1a-2616fe532845}v14.0.23026\ryukreadme.html
%ALLUSERSPROFILE%\documents\my pictures\ryukreadme.html
%ALLUSERSPROFILE%\application data\microsoft\network\connections\cm\ryukreadme.html
%ALLUSERSPROFILE%\start menu\programs\mirc\ryukreadme.html
C:\documents and settings\default user\local settings\<INETFILES>\content.ie5\h8mbgrq8\ryukreadme.html
C:\documents and settings\default user\local settings\<INETFILES>\content.ie5\etuaii8e\ryukreadme.html
C:\documents and settings\default user\local settings\<INETFILES>\content.ie5\ee7gwdg8\ryukreadme.html
C:\documents and settings\default user\local settings\<INETFILES>\content.ie5\ryukreadme.html
C:\documents and settings\default user\local settings\<INETFILES>\ryukreadme.html
C:\documents and settings\default user\local settings\temp\ryukreadme.html
C:\documents and settings\default user\local settings\history\history.ie5\ryukreadme.html
C:\documents and settings\default user\local settings\history\ryukreadme.html
C:\documents and settings\default user\local settings\application data\microsoft\windows media\9.0\ryukreadme.html
C:\documents and settings\default user\local settings\application data\microsoft\windows media\ryukreadme.html
C:\documents and settings\default user\local settings\application data\microsoft\media player\ryukreadme.html
C:\documents and settings\default user\local settings\application data\microsoft\ryukreadme.html
C:\documents and settings\default user\local settings\application data\ryukreadme.html
C:\documents and settings\default user\local settings\ryukreadme.html
%ALLUSERSPROFILE%\application data\package cache\{a2563e55-3bec-3828-8d67-e5e8b9e8b675}v14.0.23026\packages\vcruntimeminimum_x86\ryukreadme.html
%ALLUSERSPROFILE%\start menu\programs\microsoft office\ryukreadme.html
C:\documents and settings\default user\cookies\ryukreadme.html
C:\documents and settings\default user\application data\microsoft\systemcertificates\my\ctls\ryukreadme.html
C:\documents and settings\default user\application data\microsoft\systemcertificates\my\crls\ryukreadme.html
C:\documents and settings\default user\application data\microsoft\systemcertificates\my\certificates\ryukreadme.html
C:\documents and settings\default user\application data\microsoft\systemcertificates\my\ryukreadme.html
C:\documents and settings\default user\application data\microsoft\systemcertificates\ryukreadme.html
C:\documents and settings\default user\application data\microsoft\media player\ryukreadme.html
C:\documents and settings\default user\application data\microsoft\internet explorer\ryukreadme.html
C:\documents and settings\default user\application data\microsoft\ryukreadme.html
C:\documents and settings\default user\application data\ryukreadme.html
C:\documents and settings\default user\ryukreadme.html
%ALLUSERSPROFILE%\templates\ryukreadme.html
%ALLUSERSPROFILE%\start menu\programs\winrar\ryukreadme.html
%ALLUSERSPROFILE%\start menu\programs\steam\ryukreadme.html
C:\documents and settings\default user\desktop\ryukreadme.html
%ALLUSERSPROFILE%\start menu\programs\qip 2012\ryukreadme.html
%ALLUSERSPROFILE%\application data\package cache\{a2563e55-3bec-3828-8d67-e5e8b9e8b675}v14.0.23026\packages\ryukreadme.html
%ALLUSERSPROFILE%\application data\package cache\{a2563e55-3bec-3828-8d67-e5e8b9e8b675}v14.0.23026\ryukreadme.html
%ALLUSERSPROFILE%\application data\package cache\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\ryukreadme.html
%ALLUSERSPROFILE%\application data\adobe\setup\{ac76ba86-7ad7-1033-7b44-aa1000000001}\ryukreadme.html
%ALLUSERSPROFILE%\application data\microsoft\media player\ryukreadme.html
%ALLUSERSPROFILE%\application data\microsoft\media index\ryukreadme.html
%ALLUSERSPROFILE%\application data\microsoft\html help\ryukreadme.html
%ALLUSERSPROFILE%\application data\microsoft\dbgclr\7.1\1033\ryukreadme.html
%ALLUSERSPROFILE%\application data\microsoft\dbgclr\7.1\ryukreadme.html
%ALLUSERSPROFILE%\application data\microsoft\dbgclr\ryukreadme.html
%ALLUSERSPROFILE%\application data\microsoft\crypto\rsa\s-1-5-18\ryukreadme.html
%ALLUSERSPROFILE%\application data\microsoft\crypto\rsa\machinekeys\ryukreadme.html
%ALLUSERSPROFILE%\application data\microsoft\crypto\rsa\ryukreadme.html
%ALLUSERSPROFILE%\application data\microsoft\crypto\dss\machinekeys\ryukreadme.html
%ALLUSERSPROFILE%\application data\microsoft\crypto\dss\ryukreadme.html
%ALLUSERSPROFILE%\application data\microsoft\crypto\ryukreadme.html
%ALLUSERSPROFILE%\application data\microsoft\ryukreadme.html
C:\documents and settings\default user\local settings\<INETFILES>\content.ie5\z9pmdpek\ryukreadme.html
%ALLUSERSPROFILE%\application data\microsoft\msdaipp\offline\ryukreadme.html
%ALLUSERSPROFILE%\application data\adobe\setup\ryukreadme.html
%ALLUSERSPROFILE%\application data\adobe\arm\ryukreadme.html
%ALLUSERSPROFILE%\application data\adobe\acrobat\10.0\replicate\security\ryukreadme.html
%ALLUSERSPROFILE%\application data\adobe\acrobat\10.0\replicate\ryukreadme.html
%ALLUSERSPROFILE%\application data\adobe\acrobat\10.0\ryukreadme.html
%ALLUSERSPROFILE%\application data\adobe\acrobat\ryukreadme.html
%ALLUSERSPROFILE%\application data\adobe\ryukreadme.html
%ALLUSERSPROFILE%\application data\ryukreadme.html
%ALLUSERSPROFILE%\ryukreadme.html
C:\documents and settings\ryukreadme.html
C:\ryukreadme.html
D:\ryukreadme.html
%TEMP%\ryukreadme.html
%ALLUSERSPROFILE%\application data\microsoft\crypto\rsa\machinekeys\08e575673cce10c72090304839888e02_5f9fe710-99e6-4c04-be62-a7f1b8b321d1
%ALLUSERSPROFILE%\application data\adobe\updater6\ryukreadme.html
C:\documents and settings\default user\favorites\ryukreadme.html
%ALLUSERSPROFILE%\application data\microsoft\msdn\ryukreadme.html
%ALLUSERSPROFILE%\application data\microsoft\msdn\7.0\1031\ryukreadme.html
%ALLUSERSPROFILE%\application data\microsoft\msdn\7.0\ryukreadme.html
%ALLUSERSPROFILE%\application data\package cache\{615bc16d-60f5-482e-91b3-b51d8130963b}\ryukreadme.html
%ALLUSERSPROFILE%\application data\package cache\{2af972c7-13b0-4978-92a8-fee26a4fb4e9}\ryukreadme.html
%ALLUSERSPROFILE%\application data\package cache\{01db25f3-1b76-4d97-88c8-1c90634d88fb}\ryukreadme.html
%ALLUSERSPROFILE%\application data\package cache\ryukreadme.html
%ALLUSERSPROFILE%\application data\oracle\java\installcache\ryukreadme.html
%ALLUSERSPROFILE%\application data\oracle\java\ryukreadme.html
%ALLUSERSPROFILE%\application data\oracle\ryukreadme.html
%ALLUSERSPROFILE%\application data\microsoft help\ryukreadme.html
%ALLUSERSPROFILE%\application data\microsoft\user account pictures\default pictures\ryukreadme.html
%ALLUSERSPROFILE%\application data\microsoft\user account pictures\ryukreadme.html
%ALLUSERSPROFILE%\application data\microsoft\office\groove\ryukreadme.html
%ALLUSERSPROFILE%\application data\microsoft\office\data\ryukreadme.html
%ALLUSERSPROFILE%\application data\microsoft\office\ryukreadme.html
%ALLUSERSPROFILE%\application data\microsoft\msdn\7.0\1028\ryukreadme.html
%ALLUSERSPROFILE%\application data\microsoft\network\downloader\ryukreadme.html
%ALLUSERSPROFILE%\application data\microsoft\msdaipp\ryukreadme.html
%ALLUSERSPROFILE%\application data\microsoft\network\connections\ryukreadme.html
%ALLUSERSPROFILE%\application data\microsoft\network\ryukreadme.html
%ALLUSERSPROFILE%\application data\microsoft\msdn\8.0\ryukreadme.html
%ALLUSERSPROFILE%\application data\microsoft\msdn\7.0\3082\ryukreadme.html
%ALLUSERSPROFILE%\application data\microsoft\msdn\7.0\2052\ryukreadme.html
%ALLUSERSPROFILE%\application data\microsoft\msdn\7.0\1050\ryukreadme.html
%ALLUSERSPROFILE%\application data\microsoft\msdn\7.0\1049\ryukreadme.html
%ALLUSERSPROFILE%\application data\microsoft\msdn\7.0\1046\ryukreadme.html
%ALLUSERSPROFILE%\application data\microsoft\msdn\7.0\1042\ryukreadme.html
%ALLUSERSPROFILE%\application data\microsoft\msdn\7.0\1041\ryukreadme.html
%ALLUSERSPROFILE%\application data\microsoft\msdn\7.0\1040\ryukreadme.html
%ALLUSERSPROFILE%\application data\microsoft\msdn\7.0\1036\ryukreadme.html
%ALLUSERSPROFILE%\application data\microsoft\msdn\7.0\1033\ryukreadme.html
%ALLUSERSPROFILE%\application data\microsoft\network\connections\pbk\ryukreadme.html
C:\documents and settings\networkservice\application data\microsoft\systemcertificates\my\ctls\ryukreadme.html
%APPDATA%\icqm\icq\html\pt\loading\ryukreadme.html
C:\documents and settings\default user\printhood\ryukreadme.html
%APPDATA%\icq-profile\ryukreadme.html
%APPDATA%\adobe\logtransport2\ryukreadme.html
%APPDATA%\adobe\linguistics\dictionaries\adobe custom dictionary\eng\ryukreadme.html
%APPDATA%\adobe\linguistics\dictionaries\adobe custom dictionary\can\ryukreadme.html
%APPDATA%\adobe\linguistics\dictionaries\adobe custom dictionary\brt\ryukreadme.html
%APPDATA%\adobe\linguistics\dictionaries\adobe custom dictionary\all\ryukreadme.html
%APPDATA%\adobe\linguistics\dictionaries\adobe custom dictionary\ryukreadme.html
%APPDATA%\adobe\linguistics\dictionaries\ryukreadme.html
%APPDATA%\adobe\linguistics\ryukreadme.html
%APPDATA%\adobe\headlights\ryukreadme.html
%APPDATA%\adobe\flash player\assetcache\mc4yk349\ryukreadme.html
%APPDATA%\adobe\flash player\assetcache\ryukreadme.html
%APPDATA%\adobe\flash player\ryukreadme.html
%APPDATA%\adobe\acrobat\9.0\javascripts\ryukreadme.html
%APPDATA%\adobe\acrobat\9.0\ryukreadme.html
%APPDATA%\icq-profile\update\ryukreadme.html
%APPDATA%\adobe\acrobat\10.0\security\crlcache\ryukreadme.html
%APPDATA%\adobe\acrobat\10.0\security\ryukreadme.html
%APPDATA%\adobe\acrobat\10.0\javascripts\ryukreadme.html
%APPDATA%\adobe\acrobat\10.0\forms\ryukreadme.html
%APPDATA%\adobe\acrobat\10.0\collab\ryukreadme.html
%APPDATA%\adobe\acrobat\10.0\ryukreadme.html
%APPDATA%\adobe\acrobat\ryukreadme.html
%APPDATA%\adobe\ryukreadme.html
%APPDATA%\.purple\smileys\ryukreadme.html
%APPDATA%\.purple\certificates\x509\tls_peers\ryukreadme.html
%APPDATA%\.purple\certificates\x509\ryukreadme.html
%APPDATA%\.purple\certificates\ryukreadme.html
%APPDATA%\.purple\ryukreadme.html
%APPDATA%\adobe\acrobat\9.0\forms\ryukreadme.html
C:\documents and settings\default user\my documents\ryukreadme.html
%APPDATA%\icq-profile\update\splash_banner\ryukreadme.html
%APPDATA%\icqm\icq\html\pt\jabber\ryukreadme.html
%APPDATA%\icqm\icq\html\pt\error\ryukreadme.html
%APPDATA%\icqm\icq\html\pt\ryukreadme.html
%APPDATA%\icqm\icq\html\kz\loading\ryukreadme.html
%APPDATA%\icqm\icq\html\kz\jabber\ryukreadme.html
%APPDATA%\icqm\icq\html\kz\error\ryukreadme.html
%APPDATA%\icqm\icq\html\kz\ryukreadme.html
%APPDATA%\icqm\icq\html\en\loading\ryukreadme.html
%APPDATA%\icqm\icq\html\en\jabber\ryukreadme.html
%APPDATA%\icqm\icq\html\en\error\ryukreadme.html
%APPDATA%\icqm\icq\html\en\ryukreadme.html
%APPDATA%\icqm\icq\html\de\loading\ryukreadme.html
%APPDATA%\icqm\icq\html\de\jabber\ryukreadme.html
%APPDATA%\icqm\icq\html\de\error\ryukreadme.html
%APPDATA%\ryukreadme.html
%APPDATA%\icq-profile\base\ryukreadme.html
%APPDATA%\icqm\icq\html\cz\jabber\ryukreadme.html
%APPDATA%\icqm\icq\html\cz\error\ryukreadme.html
%APPDATA%\icqm\icq\html\cz\ryukreadme.html
%APPDATA%\icqm\icq\html\bg\loading\ryukreadme.html
%APPDATA%\icqm\icq\html\bg\jabber\ryukreadme.html
%APPDATA%\icqm\icq\html\bg\error\ryukreadme.html
%APPDATA%\icqm\icq\html\bg\ryukreadme.html
%APPDATA%\icqm\icq\html\ryukreadme.html
%APPDATA%\icqm\icq\graphics\phone\ryukreadme.html
%APPDATA%\icqm\icq\graphics\ryukreadme.html
%APPDATA%\icqm\icq\fonts\ryukreadme.html
%APPDATA%\icqm\icq\dll\ryukreadme.html
%APPDATA%\icqm\icq\database\ryukreadme.html
%APPDATA%\icqm\icq\ryukreadme.html
%APPDATA%\icqm\icq\html\cz\loading\ryukreadme.html
%APPDATA%\icqm\ryukreadme.html
%HOMEPATH%\.oracle_jre_usage\ryukreadme.html
%HOMEPATH%\ryukreadme.html
C:\documents and settings\networkservice\local settings\<INETFILES>\content.ie5\z9pmdpek\ryukreadme.html
C:\documents and settings\localservice\application data\microsoft\internet explorer\ryukreadme.html
C:\documents and settings\localservice\local settings\history\ryukreadme.html
C:\documents and settings\localservice\local settings\application data\microsoft\windows\ryukreadme.html
C:\documents and settings\localservice\local settings\application data\microsoft\credentials\s-1-5-19\ryukreadme.html
C:\documents and settings\localservice\local settings\application data\microsoft\credentials\ryukreadme.html
C:\documents and settings\localservice\local settings\application data\microsoft\ryukreadme.html
C:\documents and settings\localservice\local settings\application data\ryukreadme.html
C:\documents and settings\localservice\local settings\ryukreadme.html
C:\documents and settings\localservice\cookies\ryukreadme.html
C:\documents and settings\localservice\application data\microsoft\systemcertificates\my\ctls\ryukreadme.html
C:\documents and settings\localservice\application data\microsoft\systemcertificates\my\crls\ryukreadme.html
C:\documents and settings\localservice\application data\microsoft\systemcertificates\my\certificates\ryukreadme.html
C:\documents and settings\localservice\application data\microsoft\systemcertificates\my\ryukreadme.html
C:\documents and settings\localservice\application data\microsoft\systemcertificates\ryukreadme.html
C:\documents and settings\default user\nethood\ryukreadme.html
C:\documents and settings\localservice\local settings\temp\ryukreadme.html
C:\documents and settings\localservice\application data\microsoft\credentials\s-1-5-19\ryukreadme.html
C:\documents and settings\localservice\application data\microsoft\credentials\ryukreadme.html
C:\documents and settings\localservice\application data\microsoft\ryukreadme.html
C:\documents and settings\localservice\application data\ryukreadme.html
C:\documents and settings\localservice\ryukreadme.html
C:\documents and settings\default user\templates\ryukreadme.html
C:\documents and settings\default user\start menu\programs\startup\ryukreadme.html
C:\documents and settings\default user\start menu\programs\accessories\entertainment\ryukreadme.html
C:\documents and settings\default user\start menu\programs\accessories\accessibility\ryukreadme.html
C:\documents and settings\default user\start menu\programs\accessories\ryukreadme.html
C:\documents and settings\default user\start menu\programs\ryukreadme.html
C:\documents and settings\default user\start menu\ryukreadme.html
C:\documents and settings\default user\sendto\ryukreadme.html
C:\documents and settings\default user\recent\ryukreadme.html
C:\documents and settings\localservice\application data\microsoft\media player\ryukreadme.html
%APPDATA%\icqm\icq\html\ru\ryukreadme.html
C:\documents and settings\localservice\local settings\<INETFILES>\ryukreadme.html
C:\documents and settings\localservice\local settings\<INETFILES>\content.ie5\mqraz07n\ryukreadme.html
C:\documents and settings\localservice\local settings\<INETFILES>\content.ie5\ryukreadme.html
C:\documents and settings\networkservice\local settings\<INETFILES>\content.ie5\h8mbgrq8\ryukreadme.html
C:\documents and settings\networkservice\local settings\<INETFILES>\content.ie5\etuaii8e\ryukreadme.html
C:\documents and settings\networkservice\local settings\<INETFILES>\content.ie5\ee7gwdg8\ryukreadme.html
C:\documents and settings\networkservice\local settings\<INETFILES>\content.ie5\ryukreadme.html
C:\documents and settings\networkservice\local settings\<INETFILES>\ryukreadme.html
C:\documents and settings\networkservice\local settings\temp\ryukreadme.html
C:\documents and settings\networkservice\local settings\history\history.ie5\ryukreadme.html
C:\documents and settings\networkservice\local settings\history\ryukreadme.html
C:\documents and settings\networkservice\local settings\application data\microsoft\windows\ryukreadme.html
C:\documents and settings\networkservice\local settings\application data\microsoft\credentials\s-1-5-20\ryukreadme.html
C:\documents and settings\networkservice\local settings\application data\microsoft\credentials\ryukreadme.html
C:\documents and settings\networkservice\local settings\application data\microsoft\ryukreadme.html
C:\documents and settings\networkservice\local settings\application data\ryukreadme.html
C:\documents and settings\localservice\local settings\<INETFILES>\content.ie5\9stcdn6y\ryukreadme.html
C:\documents and settings\networkservice\local settings\ryukreadme.html
C:\documents and settings\localservice\local settings\history\history.ie5\ryukreadme.html
C:\documents and settings\networkservice\application data\microsoft\systemcertificates\my\crls\ryukreadme.html
C:\documents and settings\networkservice\application data\microsoft\systemcertificates\my\certificates\ryukreadme.html
C:\documents and settings\networkservice\application data\microsoft\systemcertificates\my\ryukreadme.html
C:\documents and settings\networkservice\application data\microsoft\systemcertificates\ryukreadme.html
C:\documents and settings\networkservice\application data\microsoft\media player\ryukreadme.html
C:\documents and settings\networkservice\application data\microsoft\internet explorer\ryukreadme.html
C:\documents and settings\networkservice\application data\microsoft\credentials\s-1-5-20\ryukreadme.html
C:\documents and settings\networkservice\application data\microsoft\credentials\ryukreadme.html
C:\documents and settings\networkservice\application data\microsoft\ryukreadme.html
C:\documents and settings\networkservice\application data\ryukreadme.html
C:\documents and settings\networkservice\ryukreadme.html
C:\documents and settings\localservice\local settings\<INETFILES>\content.ie5\qiszf4kx\ryukreadme.html
C:\documents and settings\localservice\local settings\<INETFILES>\content.ie5\o4q6sqop\ryukreadme.html
C:\documents and settings\networkservice\cookies\ryukreadme.html
<LS_APPDATA>\opera software\opera stable\ryukreadme.html

Moves the following files

from %ALLUSERSPROFILE%\application data\microsoft\crypto\rsa\machinekeys\08e575673cce10c72090304839888e02_5f9fe710-99e6-4c04-be62-a7f1b8b321d1 to %ALLUSERSPROFILE%\application data\microsoft\crypto\rsa\machinekeys\08e575673cce10c72090304839888e02_5f9fe710-99e6-4c04-be62-a7f1b8b321d1.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\89_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\89_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\90.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\90.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\90_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\90_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\91.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\91.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\93.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\93.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\92.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\92.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\92_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\92_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\91_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\91_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\93_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\93_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\94.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\94.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\94_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\94_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\95.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\95.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\96_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\96_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\96.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\96.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\95_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\95_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\97.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\97.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\97_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\97_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\98.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\98.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\98_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\98_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\99.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\99.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\99_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\99_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\89.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\89.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\75.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\75.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\88_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\88_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\87_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\87_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\77.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\77.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\77_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\77_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\78.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\78.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\78_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\78_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\81_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\81_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\81.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\81.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\80_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\80_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\80.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\80.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\79_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\79_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\79.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\79.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\82_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\82_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\82.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\82.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\83.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\83.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\83_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\83_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\84.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\84.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\85.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\85.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\85_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\85_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\86.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\86.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\86_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\86_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\84_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\84_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\88.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\88.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\87.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\87.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\76_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\76_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\belka.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\belka.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\chat_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\chat_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\rocket.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\rocket.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\splu.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\splu.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\seekfriends_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\seekfriends_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_29.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_29.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\seekfriends.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\seekfriends.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\splu_bit.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\splu_bit.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\star.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\star.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_30.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_30.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_33.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_33.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\76.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\76.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_34.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_34.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_36.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_36.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_37.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_37.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_40.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_40.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_41.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_41.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_38.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_38.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_42.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_42.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_49.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_49.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_43.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_43.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_44.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_44.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\rabotau.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\rabotau.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_32.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_32.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\boleu.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\boleu.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\chat.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\chat.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\pivo.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\pivo.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\dnd.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\dnd.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\gde_ia.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\gde_ia.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\em.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\em.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\doma.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\doma.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\dnd_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\dnd_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\gizn_gavno.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\gizn_gavno.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\gotovlu.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\gotovlu.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\gulau.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\gulau.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\ia_krivetko.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\ia_krivetko.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\ia_poteralsa.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\ia_poteralsa.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\ia_utko.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\ia_utko.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\igrau.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\igrau.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\ia_inoplanet_razum.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\ia_inoplanet_razum.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\ia_soshl_asuma.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\ia_soshl_asuma.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\kuru.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\kuru.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\kut.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\kut.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\music.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\music.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\na_rabote.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\na_rabote.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\na_vstreche.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\na_vstreche.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\pivo_bit.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\pivo_bit.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\cherep.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\cherep.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\pu_kofe.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\pu_kofe.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\75_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\75_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\74.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\74.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_50.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_50.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_wrong_data.ico to %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_wrong_data.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\icq\seekfriends_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\icq\seekfriends_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\icq\seekfriends.ico to %APPDATA%\icqm\icq\smiles\statuses\icq\seekfriends.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\icq\status_mobile.ico to %APPDATA%\icqm\icq\smiles\statuses\icq\status_mobile.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_odkl_online.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_odkl_online.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_odkl_offline.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_odkl_offline.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_odkl_gray.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_odkl_gray.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_odkl_connecting.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_odkl_connecting.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_odkl_wrong_data.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_odkl_wrong_data.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_chat.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_chat.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_away.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_away.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_online.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_online.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_offline.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_offline.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_gray.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_gray.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_dnd.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_dnd.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_invisible.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_invisible.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\jabber\seekfriends.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\seekfriends.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\100_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\100_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\101.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\101.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_invisible.ico to %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_invisible.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_offline.ico to %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_offline.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_online.ico to %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_online.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\102.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\102.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\100.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\100.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\101_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\101_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\smiles\valentine\in_love.gif to %APPDATA%\icqm\icq\smiles\smiles\valentine\in_love.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\valentine\undress.gif to %APPDATA%\icqm\icq\smiles\smiles\valentine\undress.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\valentine\on_wings.gif to %APPDATA%\icqm\icq\smiles\smiles\valentine\on_wings.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\valentine\kissed.gif to %APPDATA%\icqm\icq\smiles\smiles\valentine\kissed.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\valentine\kiss.gif to %APPDATA%\icqm\icq\smiles\smiles\valentine\kiss.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\valentine\want_you.gif to %APPDATA%\icqm\icq\smiles\smiles\valentine\want_you.gif.ryk
from %APPDATA%\icqm\icq\smiles\statuses\aim\aim_status_away.ico to %APPDATA%\icqm\icq\smiles\statuses\aim\aim_status_away.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\aim\aim_status_busy.ico to %APPDATA%\icqm\icq\smiles\statuses\aim\aim_status_busy.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\aim\aim_status_gray.ico to %APPDATA%\icqm\icq\smiles\statuses\aim\aim_status_gray.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\aim\aim_status_offline.ico to %APPDATA%\icqm\icq\smiles\statuses\aim\aim_status_offline.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\aim\aim_status_online.ico to %APPDATA%\icqm\icq\smiles\statuses\aim\aim_status_online.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\gtalk\gtalk_status_away.ico to %APPDATA%\icqm\icq\smiles\statuses\gtalk\gtalk_status_away.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\gtalk\gtalk_status_busy.ico to %APPDATA%\icqm\icq\smiles\statuses\gtalk\gtalk_status_busy.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\gtalk\gtalk_status_gray.ico to %APPDATA%\icqm\icq\smiles\statuses\gtalk\gtalk_status_gray.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\gtalk\gtalk_status_offline.ico to %APPDATA%\icqm\icq\smiles\statuses\gtalk\gtalk_status_offline.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\gtalk\gtalk_status_online.ico to %APPDATA%\icqm\icq\smiles\statuses\gtalk\gtalk_status_online.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_connecting.ico to %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_connecting.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_chat.ico to %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_chat.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\icq\24bit.ico to %APPDATA%\icqm\icq\smiles\statuses\icq\24bit.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_dnd.ico to %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_dnd.ico.ryk
from %APPDATA%\icqm\icq\smiles\smiles\valentine\lets_play.gif to %APPDATA%\icqm\icq\smiles\smiles\valentine\lets_play.gif.ryk
from %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_away.ico to %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_away.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\102_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\102_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\61.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\61.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\12.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\12.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\65_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\65_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\66_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\66_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\66.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\66.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\67.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\67.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\68.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\68.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\67_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\67_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\68_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\68_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\70.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\70.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_gray.ico to %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_gray.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\69.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\69.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\73_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\73_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\72.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\72.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\71.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\71.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\71_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\71_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\69_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\69_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\72_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\72_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\73.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\73.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\74_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\74_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\64_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\64_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\64.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\64.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\70_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\70_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\65.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\65.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\63.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\63.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\63_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\63_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\62_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\62_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\13.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\13.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\12_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\12_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\13_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\13_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\11.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\11.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\104.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\104.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\104_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\104_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\11_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\11_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_45.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_45.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\56_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\56_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\57_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\57_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_35.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_35.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\58.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\58.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\58_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\58_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\59.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\59.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\59_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\59_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\60.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\60.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\60_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\60_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\61_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\61_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\62.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\62.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\56.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\56.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\103_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\103_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\103.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\103.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\57.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\57.ico.ryk
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\46a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\46a.gif.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_away.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_away.ico.ryk
from %APPDATA%\opera software\opera stable\local storage\https_www.mozilla.org_0.localstorage-journal to %APPDATA%\opera software\opera stable\local storage\https_www.mozilla.org_0.localstorage-journal.ryk
from %APPDATA%\opera software\opera stable\local storage\http_qip.ru_0.localstorage-journal to %APPDATA%\opera software\opera stable\local storage\http_qip.ru_0.localstorage-journal.ryk
from %APPDATA%\opera software\opera stable\local storage\https_www.mozilla.org_0.localstorage to %APPDATA%\opera software\opera stable\local storage\https_www.mozilla.org_0.localstorage.ryk
from %APPDATA%\opera software\opera stable\local storage\http_sourceforge.net_0.localstorage-journal to %APPDATA%\opera software\opera stable\local storage\http_sourceforge.net_0.localstorage-journal.ryk
from %APPDATA%\opera software\opera stable\local storage\http_qip.ru_0.localstorage to %APPDATA%\opera software\opera stable\local storage\http_qip.ru_0.localstorage.ryk
from %APPDATA%\opera software\opera stable\local storage\http_sourceforge.net_0.localstorage to %APPDATA%\opera software\opera stable\local storage\http_sourceforge.net_0.localstorage.ryk
from %APPDATA%\opera software\opera stable\local storage\http_welcome.qip.ru_0.localstorage to %APPDATA%\opera software\opera stable\local storage\http_welcome.qip.ru_0.localstorage.ryk
from volume{6a9759b0-c6f5-11e6-92ae-0800279ec8ab}\system volume information\tracking.log.tmp to volume{6a9759b0-c6f5-11e6-92ae-0800279ec8ab}\system volume information\tracking.log
from %APPDATA%\opera software\opera stable\local storage\http_wlogin.icq.com_0.localstorage to %APPDATA%\opera software\opera stable\local storage\http_wlogin.icq.com_0.localstorage.ryk
from %APPDATA%\opera software\opera stable\local storage\http_www.icq.com_0.localstorage to %APPDATA%\opera software\opera stable\local storage\http_www.icq.com_0.localstorage.ryk
from %APPDATA%\opera software\opera stable\local storage\http_wlogin.icq.com_0.localstorage-journal to %APPDATA%\opera software\opera stable\local storage\http_wlogin.icq.com_0.localstorage-journal.ryk
from %APPDATA%\opera software\opera stable\local storage\http_www.icq.com_0.localstorage-journal to %APPDATA%\opera software\opera stable\local storage\http_www.icq.com_0.localstorage-journal.ryk
from %APPDATA%\opera software\opera stable\origin bound certs-journal to %APPDATA%\opera software\opera stable\origin bound certs-journal.ryk
from %APPDATA%\opera software\opera stable\login data-journal to %APPDATA%\opera software\opera stable\login data-journal.ryk
from %APPDATA%\opera software\opera stable\opera_autoupdate.log to %APPDATA%\opera software\opera stable\opera_autoupdate.log.ryk
from %APPDATA%\opera software\opera stable\opera_shutdown_ms.txt to %APPDATA%\opera software\opera stable\opera_shutdown_ms.txt.ryk
from %APPDATA%\opera software\opera stable\origin bound certs to %APPDATA%\opera software\opera stable\origin bound certs.ryk
from %APPDATA%\opera software\opera stable\network persistent state to %APPDATA%\opera software\opera stable\network persistent state.ryk
from %APPDATA%\opera software\opera stable\pepper data\shockwave flash\writableroot\#sharedobjects\bpfp7kkz\macromedia.com\support\flashplayer\sys\settings.sol to %APPDATA%\opera software\opera stable\pepper data\shockwave flash\writableroot\#sharedobjects\bpfp7kkz\macromedia.com\support\flashplayer\sys\settings.sol.ryk
from %APPDATA%\opera software\opera stable\login data to %APPDATA%\opera software\opera stable\login data.ryk
from %APPDATA%\opera software\opera stable\web data-journal to %APPDATA%\opera software\opera stable\web data-journal.ryk
from %APPDATA%\opera software\opera stable\local storage\https_mail.yandex.ru_0.localstorage to %APPDATA%\opera software\opera stable\local storage\https_mail.yandex.ru_0.localstorage.ryk
from %APPDATA%\opera software\opera stable\ssdfp1340.0.87089063 to %APPDATA%\opera software\opera stable\ssdfp1340.0.87089063.ryk
from %APPDATA%\opera software\opera stable\local storage\https_mail.yandex.ru_0.localstorage-journal to %APPDATA%\opera software\opera stable\local storage\https_mail.yandex.ru_0.localstorage-journal.ryk
from %APPDATA%\opera software\opera stable\local storage\chrome_startpage_0.localstorage to %APPDATA%\opera software\opera stable\local storage\chrome_startpage_0.localstorage.ryk
from %APPDATA%\opera software\opera stable\default_partner_content.json to %APPDATA%\opera software\opera stable\default_partner_content.json.ryk
from %APPDATA%\opera software\opera stable\extension state\current to %APPDATA%\opera software\opera stable\extension state\current.ryk
from %APPDATA%\opera software\opera stable\extension state\000003.log to %APPDATA%\opera software\opera stable\extension state\000003.log.ryk
from %APPDATA%\opera software\opera stable\extension state\lock to %APPDATA%\opera software\opera stable\extension state\lock.ryk
from %APPDATA%\opera software\opera stable\extension state\log to %APPDATA%\opera software\opera stable\extension state\log.ryk
from %APPDATA%\opera software\opera stable\extension state\manifest-000001 to %APPDATA%\opera software\opera stable\extension state\manifest-000001.ryk
from %APPDATA%\opera software\opera stable\extension state\log.old to %APPDATA%\opera software\opera stable\extension state\log.old.ryk
from %APPDATA%\opera software\opera stable\favorites.db-journal to %APPDATA%\opera software\opera stable\favorites.db-journal.ryk
from %APPDATA%\opera software\opera stable\local storage\browser_startpage_0.localstorage to %APPDATA%\opera software\opera stable\local storage\browser_startpage_0.localstorage.ryk
from %APPDATA%\opera software\opera stable\favicons-journal to %APPDATA%\opera software\opera stable\favicons-journal.ryk
from %APPDATA%\opera software\opera stable\history provider cache to %APPDATA%\opera software\opera stable\history provider cache.ryk
from %APPDATA%\opera software\opera stable\history-journal to %APPDATA%\opera software\opera stable\history-journal.ryk
from %APPDATA%\opera software\opera stable\history to %APPDATA%\opera software\opera stable\history.ryk
from %APPDATA%\opera software\opera stable\local state to %APPDATA%\opera software\opera stable\local state.ryk
from %APPDATA%\opera software\opera stable\favorites.db to %APPDATA%\opera software\opera stable\favorites.db.ryk
from %APPDATA%\opera software\opera stable\local storage\chrome-extension_knohfebhibeknbfioecpdmdkjkjdnjnl_0.localstorage to %APPDATA%\opera software\opera stable\local storage\chrome-extension_knohfebhibeknbfioecpdmdkjkjdnjnl_0.localstorage.ryk
from %APPDATA%\opera software\opera stable\last session to %APPDATA%\opera software\opera stable\last session.ryk
from %APPDATA%\opera software\opera stable\local storage\browser_startpage_0.localstorage-journal to %APPDATA%\opera software\opera stable\local storage\browser_startpage_0.localstorage-journal.ryk
from %APPDATA%\opera software\opera stable\favicons to %APPDATA%\opera software\opera stable\favicons.ryk
from %APPDATA%\opera software\opera stable\local storage\chrome-extension_knohfebhibeknbfioecpdmdkjkjdnjnl_0.localstorage-journal to %APPDATA%\opera software\opera stable\local storage\chrome-extension_knohfebhibeknbfioecpdmdkjkjdnjnl_0.localstorage-journal.ryk
from %APPDATA%\opera software\opera stable\local storage\chrome_startpage_0.localstorage-journal to %APPDATA%\opera software\opera stable\local storage\chrome_startpage_0.localstorage-journal.ryk
from %APPDATA%\opera software\opera stable\local storage\http_welcome.qip.ru_0.localstorage-journal to %APPDATA%\opera software\opera stable\local storage\http_welcome.qip.ru_0.localstorage-journal.ryk
from %APPDATA%\opera software\opera stable\siteprefs.json to %APPDATA%\opera software\opera stable\siteprefs.json.ryk
from %APPDATA%\opera software\opera stable\thumbnails.db-journal to %APPDATA%\opera software\opera stable\thumbnails.db-journal.ryk
from %APPDATA%\opera software\opera stable\update_prefs.json to %APPDATA%\opera software\opera stable\update_prefs.json.ryk
from %APPDATA%\thunderbird\profiles\cr5sc40q.default\key3.db to %APPDATA%\thunderbird\profiles\cr5sc40q.default\key3.db.ryk
from %APPDATA%\thunderbird\profiles\cr5sc40q.default\mailviews.dat to %APPDATA%\thunderbird\profiles\cr5sc40q.default\mailviews.dat.ryk
from %APPDATA%\thunderbird\profiles\cr5sc40q.default\extensions.json to %APPDATA%\thunderbird\profiles\cr5sc40q.default\extensions.json.ryk
from %APPDATA%\thunderbird\profiles\cr5sc40q.default\cert8.db to %APPDATA%\thunderbird\profiles\cr5sc40q.default\cert8.db.ryk
from %APPDATA%\thunderbird\profiles\cr5sc40q.default\blocklist.xml to %APPDATA%\thunderbird\profiles\cr5sc40q.default\blocklist.xml.ryk
from %APPDATA%\thunderbird\profiles\cr5sc40q.default\blist.sqlite to %APPDATA%\thunderbird\profiles\cr5sc40q.default\blist.sqlite.ryk
from %APPDATA%\thunderbird\profiles\cr5sc40q.default\parent.lock to %APPDATA%\thunderbird\profiles\cr5sc40q.default\parent.lock.ryk
from %APPDATA%\thunderbird\profiles\cr5sc40q.default\cookies.sqlite to %APPDATA%\thunderbird\profiles\cr5sc40q.default\cookies.sqlite.ryk
from %APPDATA%\thunderbird\profiles\cr5sc40q.default\prefs.js to %APPDATA%\thunderbird\profiles\cr5sc40q.default\prefs.js.ryk
from %APPDATA%\thunderbird\profiles\cr5sc40q.default\session.json to %APPDATA%\thunderbird\profiles\cr5sc40q.default\session.json.ryk
from %APPDATA%\opera software\opera stable\bookmarks_20150820125838.backup to %APPDATA%\opera software\opera stable\bookmarks_20150820125838.backup.ryk
from %APPDATA%\thunderbird\profiles\cr5sc40q.default\virtualfolders.dat to %APPDATA%\thunderbird\profiles\cr5sc40q.default\virtualfolders.dat.ryk
from %APPDATA%\thunderbird\profiles\cr5sc40q.default\permissions.sqlite to %APPDATA%\thunderbird\profiles\cr5sc40q.default\permissions.sqlite.ryk
from %APPDATA%\thunderbird\profiles\cr5sc40q.default\times.json to %APPDATA%\thunderbird\profiles\cr5sc40q.default\times.json.ryk
from %APPDATA%\thunderbird\profiles\cr5sc40q.default\secmod.db to %APPDATA%\thunderbird\profiles\cr5sc40q.default\secmod.db.ryk
from %APPDATA%\thunderbird\profiles\cr5sc40q.default\webappsstore.sqlite to %APPDATA%\thunderbird\profiles\cr5sc40q.default\webappsstore.sqlite.ryk
from %APPDATA%\winrar\version.dat to %APPDATA%\winrar\version.dat.ryk
from %APPDATA%\yandex\ui to %APPDATA%\yandex\ui.ryk
from %APPDATA%\thunderbird\profiles\cr5sc40q.default\global-messages-db.sqlite to %APPDATA%\thunderbird\profiles\cr5sc40q.default\global-messages-db.sqlite.ryk
from %APPDATA%\thunderbird\profiles\cr5sc40q.default\places.sqlite to %APPDATA%\thunderbird\profiles\cr5sc40q.default\places.sqlite.ryk
from %APPDATA%\thunderbird\profiles\cr5sc40q.default\history.mab to %APPDATA%\thunderbird\profiles\cr5sc40q.default\history.mab.ryk
from %APPDATA%\thunderbird\profiles\cr5sc40q.default\abook.mab to %APPDATA%\thunderbird\profiles\cr5sc40q.default\abook.mab.ryk
from %APPDATA%\thunderbird\profiles\cr5sc40q.default\foldertree.json to %APPDATA%\thunderbird\profiles\cr5sc40q.default\foldertree.json.ryk
from %APPDATA%\thunderbird\crash reports\installtime20150507114201 to %APPDATA%\thunderbird\crash reports\installtime20150507114201.ryk
from %APPDATA%\telegram desktop\tdata\shortcuts-default.json to %APPDATA%\telegram desktop\tdata\shortcuts-default.json.ryk
from %APPDATA%\opera software\opera stable\preferences to %APPDATA%\opera software\opera stable\preferences.ryk
from %APPDATA%\opera software\opera stable\ssdfp1428.4.150853156 to %APPDATA%\opera software\opera stable\ssdfp1428.4.150853156.ryk
from %APPDATA%\opera software\opera stable\transportsecurity to %APPDATA%\opera software\opera stable\transportsecurity.ryk
from %APPDATA%\opera software\opera stable\preferences_20150820130020.backup to %APPDATA%\opera software\opera stable\preferences_20150820130020.backup.ryk
from %APPDATA%\opera software\opera stable\web data_20150820130020.backup to %APPDATA%\opera software\opera stable\web data_20150820130020.backup.ryk
from %APPDATA%\opera software\opera stable\web data to %APPDATA%\opera software\opera stable\web data.ryk
from %APPDATA%\opera software\opera stable\visited links to %APPDATA%\opera software\opera stable\visited links.ryk
from %APPDATA%\opera software\opera stable\thumbnails.db to %APPDATA%\opera software\opera stable\thumbnails.db.ryk
from %APPDATA%\opera software\opera stable\web data_20150820125838.backup to %APPDATA%\opera software\opera stable\web data_20150820125838.backup.ryk
from %APPDATA%\opera software\opera stable\current session to %APPDATA%\opera software\opera stable\current session.ryk
from %APPDATA%\qipguard\cache to %APPDATA%\qipguard\cache.ryk
from %APPDATA%\icqm\icq\smiles\smiles\valentine\broken_heart.gif to %APPDATA%\icqm\icq\smiles\smiles\valentine\broken_heart.gif.ryk
from %APPDATA%\sun\java\au\au.cab to %APPDATA%\sun\java\au\au.cab.ryk
from %APPDATA%\telegram desktop\log.txt to %APPDATA%\telegram desktop\log.txt.ryk
from %APPDATA%\telegram desktop\tdata\d877f783d5d3ef8c\map0 to %APPDATA%\telegram desktop\tdata\d877f783d5d3ef8c\map0.ryk
from %APPDATA%\telegram desktop\tdata\d877f783d5d3ef8c1 to %APPDATA%\telegram desktop\tdata\d877f783d5d3ef8c1.ryk
from %APPDATA%\telegram desktop\tdata\8d0d68968d9bab800 to %APPDATA%\telegram desktop\tdata\8d0d68968d9bab800.ryk
from %APPDATA%\telegram desktop\tdata\usertag to %APPDATA%\telegram desktop\tdata\usertag.ryk
from %APPDATA%\telegram desktop\tdata\settings0 to %APPDATA%\telegram desktop\tdata\settings0.ryk
from %APPDATA%\telegram desktop\tdata\shortcuts-custom.json to %APPDATA%\telegram desktop\tdata\shortcuts-custom.json.ryk
from %APPDATA%\telegram desktop\unins000.dat to %APPDATA%\telegram desktop\unins000.dat.ryk
from %APPDATA%\sun\java\au\au.msi to %APPDATA%\sun\java\au\au.msi.ryk
from %APPDATA%\opera software\opera stable\preferences_20150820125838.backup to %APPDATA%\opera software\opera stable\preferences_20150820125838.backup.ryk
from %APPDATA%\sun\java\deployment\deployment.properties to %APPDATA%\sun\java\deployment\deployment.properties.ryk
from %APPDATA%\icqm\icq\smiles\smiles\valentine\dont_be_late.gif to %APPDATA%\icqm\icq\smiles\smiles\valentine\dont_be_late.gif.ryk
from %APPDATA%\opera software\opera stable\cookies to %APPDATA%\opera software\opera stable\cookies.ryk
from %APPDATA%\opera software\opera stable\dictionaries\dictionaries.xml to %APPDATA%\opera software\opera stable\dictionaries\dictionaries.xml.ryk
from %APPDATA%\icqm\icq\smiles\statuses\vk\vkontakte_online.ico to %APPDATA%\icqm\icq\smiles\statuses\vk\vkontakte_online.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\vk\vkontakte_offline.ico to %APPDATA%\icqm\icq\smiles\statuses\vk\vkontakte_offline.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\vk\vkontakte_gray.ico to %APPDATA%\icqm\icq\smiles\statuses\vk\vkontakte_gray.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\vk\vkontakte_busy.ico to %APPDATA%\icqm\icq\smiles\statuses\vk\vkontakte_busy.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\vk\vkontakte_away.ico to %APPDATA%\icqm\icq\smiles\statuses\vk\vkontakte_away.ico.ryk
from %APPDATA%\icqm\icq\sounds\busy.mp3 to %APPDATA%\icqm\icq\sounds\busy.mp3.ryk
from %APPDATA%\icqm\icq\translation\mralang_en.xml to %APPDATA%\icqm\icq\translation\mralang_en.xml.ryk
from %APPDATA%\icqm\icq\sounds\letter.wav to %APPDATA%\icqm\icq\sounds\letter.wav.ryk
from %APPDATA%\icqm\icq\sounds\otprav.mp3 to %APPDATA%\icqm\icq\sounds\otprav.mp3.ryk
from %APPDATA%\icqm\icq\sounds\error.wav to %APPDATA%\icqm\icq\sounds\error.wav.ryk
from %APPDATA%\icqm\icq\sounds\auth.mp3 to %APPDATA%\icqm\icq\sounds\auth.mp3.ryk
from %APPDATA%\icqm\icq\sounds\message.mp3 to %APPDATA%\icqm\icq\sounds\message.mp3.ryk
from %APPDATA%\icqm\icq\sounds\start.wav to %APPDATA%\icqm\icq\sounds\start.wav.ryk
from %APPDATA%\icqm\icq\sounds\test_sound.wav to %APPDATA%\icqm\icq\sounds\test_sound.wav.ryk
from %APPDATA%\icqm\icq\sounds\ring.mp3 to %APPDATA%\icqm\icq\sounds\ring.mp3.ryk
from %APPDATA%\icqm\icq\sounds\otprav.wav to %APPDATA%\icqm\icq\sounds\otprav.wav.ryk
from %APPDATA%\icqm\icq\sounds\conference.mp3 to %APPDATA%\icqm\icq\sounds\conference.mp3.ryk
from %APPDATA%\icqm\icq\translation\mralang_ua.xml to %APPDATA%\icqm\icq\translation\mralang_ua.xml.ryk
from %APPDATA%\icqm\icq\video\video.swf to %APPDATA%\icqm\icq\video\video.swf.ryk
from %APPDATA%\icqm\icq\translation\mralang_ru.xml to %APPDATA%\icqm\icq\translation\mralang_ru.xml.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\wrong_data.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\wrong_data.ico.ryk
from %APPDATA%\macromedia\flash player\macromedia.com\support\flashplayer\sys\settings.sol to %APPDATA%\macromedia\flash player\macromedia.com\support\flashplayer\sys\settings.sol.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\v_institute_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\v_institute_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\vi_oshiblis_nomerom_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\vi_oshiblis_nomerom_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_away_xp_big.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_away_xp_big.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_away_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_away_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_connecting.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_connecting.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_connecting_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_connecting_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_invisible_big.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_invisible_big.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_invisible.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_invisible.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_invisible_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_invisible_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_invisible_xp_big.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_invisible_xp_big.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_mobile.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_mobile.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_offline_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_offline_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_offline_big.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_offline_big.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_offline.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_offline.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_offline_xp_big.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_offline_xp_big.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_online.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_online.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_online_big.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_online_big.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_online_xp_big.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_online_xp_big.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_online_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_online_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\telefon.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\telefon.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\telefon_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\telefon_xp.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\vi_oshiblis_nomerom.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\vi_oshiblis_nomerom.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\v_institute.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\v_institute.ico.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\v_shkole.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\v_shkole.ico.ryk
from %APPDATA%\icqm\icq\translation\mralang_cz.xml to %APPDATA%\icqm\icq\translation\mralang_cz.xml.ryk
from %APPDATA%\icqm\icq\translation\mralang_de.xml to %APPDATA%\icqm\icq\translation\mralang_de.xml.ryk
from %APPDATA%\icqm\icq\translation\mralang_kz.xml to %APPDATA%\icqm\icq\translation\mralang_kz.xml.ryk
from %APPDATA%\microsoft\protect\s-1-5-21-1229272821-842925246-1060284298-1003\preferred to %APPDATA%\microsoft\protect\s-1-5-21-1229272821-842925246-1060284298-1003\preferred.ryk
from %APPDATA%\microsoft\protect\s-1-5-21-1229272821-842925246-1060284298-1003\240fa55d-6c5b-4886-9767-918cc4e6668e to %APPDATA%\microsoft\protect\s-1-5-21-1229272821-842925246-1060284298-1003\240fa55d-6c5b-4886-9767-918cc4e6668e.ryk
from %APPDATA%\microsoft\publisher\pubcmd12.dat to %APPDATA%\microsoft\publisher\pubcmd12.dat.ryk
from %APPDATA%\microsoft\templates\normal.dotm to %APPDATA%\microsoft\templates\normal.dotm.ryk
from %APPDATA%\microsoft\uproof\excludedictionaryen0809.lex to %APPDATA%\microsoft\uproof\excludedictionaryen0809.lex.ryk
from %APPDATA%\microsoft\uproof\custom.dic to %APPDATA%\microsoft\uproof\custom.dic.ryk
from %APPDATA%\microsoft\uproof\excludedictionaryen0409.lex to %APPDATA%\microsoft\uproof\excludedictionaryen0409.lex.ryk
from %APPDATA%\opera software\opera stable\bookmarks.bak to %APPDATA%\opera software\opera stable\bookmarks.bak.ryk
from %APPDATA%\opera software\opera stable\bookmarks to %APPDATA%\opera software\opera stable\bookmarks.ryk
from %APPDATA%\opera software\opera stable\cookies-journal to %APPDATA%\opera software\opera stable\cookies-journal.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\v_shkole_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\v_shkole_xp.ico.ryk
from %APPDATA%\opera software\opera stable\certificate revocation lists to %APPDATA%\opera software\opera stable\certificate revocation lists.ryk
from %APPDATA%\opera software\opera stable\bookmarks_20150820125841.backup to %APPDATA%\opera software\opera stable\bookmarks_20150820125841.backup.ryk
from %APPDATA%\opera software\opera stable\bookmarks_20150820130020.backup to %APPDATA%\opera software\opera stable\bookmarks_20150820130020.backup.ryk
from %APPDATA%\opera software\opera stable\bookmarks_20150820130021.backup to %APPDATA%\opera software\opera stable\bookmarks_20150820130021.backup.ryk
from %APPDATA%\opera software\opera stable\bookmarks_20150820130023.backup to %APPDATA%\opera software\opera stable\bookmarks_20150820130023.backup.ryk
from %APPDATA%\opera software\opera stable\browser.js to %APPDATA%\opera software\opera stable\browser.js.ryk
from %APPDATA%\opera software\opera stable\bookmarks_20150820125839.backup to %APPDATA%\opera software\opera stable\bookmarks_20150820125839.backup.ryk
from %APPDATA%\opera software\opera stable\bookmarks_20150820130022.backup to %APPDATA%\opera software\opera stable\bookmarks_20150820130022.backup.ryk
from %APPDATA%\opera software\opera stable\bookmarks_20150820125840.backup to %APPDATA%\opera software\opera stable\bookmarks_20150820125840.backup.ryk
from %APPDATA%\microsoft\outlook\outlook.xml to %APPDATA%\microsoft\outlook\outlook.xml.ryk
from %APPDATA%\microsoft\protect\s-1-5-21-1229272821-842925246-1060284298-1003\e8620780-7456-42b3-b97c-cd0078ac41a9 to %APPDATA%\microsoft\protect\s-1-5-21-1229272821-842925246-1060284298-1003\e8620780-7456-42b3-b97c-cd0078ac41a9.ryk
from %APPDATA%\microsoft\protect\s-1-5-21-1229272821-842925246-1060284298-1003\cde6672a-6181-439a-b47b-c3d2a3587ed7 to %APPDATA%\microsoft\protect\s-1-5-21-1229272821-842925246-1060284298-1003\cde6672a-6181-439a-b47b-c3d2a3587ed7.ryk
from %APPDATA%\microsoft\outlook\outcmd.dat to %APPDATA%\microsoft\outlook\outcmd.dat.ryk
from %APPDATA%\microsoft\office\word12.pip to %APPDATA%\microsoft\office\word12.pip.ryk
from %APPDATA%\icqm\icq\translation\mralang_tr.xml to %APPDATA%\icqm\icq\translation\mralang_tr.xml.ryk
from %APPDATA%\icqm\icq\translation\mralang_uz.xml to %APPDATA%\icqm\icq\translation\mralang_uz.xml.ryk
from %APPDATA%\microsoft\crypto\rsa\s-1-5-21-1229272821-842925246-1060284298-1003\f58155b4b1d5a524ca0261c3ee99fb50_5f9fe710-99e6-4c04-be62-a7f1b8b321d1 to %APPDATA%\microsoft\crypto\rsa\s-1-5-21-1229272821-842925246-1060284298-1003\f58155b4b1d5a524ca0261c3ee99fb50_5f9fe710-99e6-4c04-be62-a7f1b8b321d1.ryk
from %APPDATA%\microsoft\dbgclr\7.1\objbrow.dat to %APPDATA%\microsoft\dbgclr\7.1\objbrow.dat.ryk
from %APPDATA%\microsoft\crypto\rsa\s-1-5-21-1229272821-842925246-1060284298-1003\6b29ae44e85efac3c72ff4d1865d73f1_5f9fe710-99e6-4c04-be62-a7f1b8b321d1 to %APPDATA%\microsoft\crypto\rsa\s-1-5-21-1229272821-842925246-1060284298-1003\6b29ae44e85efac3c72ff4d1865d73f1_5f9fe710-99e6-4c04-be62-a7f1b8b321d1.ryk
from %APPDATA%\microsoft\internet explorer\desktop.htt to %APPDATA%\microsoft\internet explorer\desktop.htt.ryk
from %APPDATA%\microsoft\document building blocks\1033\building blocks.dotx to %APPDATA%\microsoft\document building blocks\1033\building blocks.dotx.ryk
from %APPDATA%\microsoft\internet explorer\brndlog.txt to %APPDATA%\microsoft\internet explorer\brndlog.txt.ryk
from %APPDATA%\microsoft\internet explorer\brndlog.bak to %APPDATA%\microsoft\internet explorer\brndlog.bak.ryk
from %APPDATA%\opera software\opera stable\bookmarksextras to %APPDATA%\opera software\opera stable\bookmarksextras.ryk
from %APPDATA%\microsoft\internet explorer\quick launch\show desktop.scf to %APPDATA%\microsoft\internet explorer\quick launch\show desktop.scf.ryk
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_away_big.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_away_big.ico.ryk
from %APPDATA%\microsoft\msdn\7.0\objbrow.dat to %APPDATA%\microsoft\msdn\7.0\objbrow.dat.ryk
from %APPDATA%\microsoft\office\msout12.pip to %APPDATA%\microsoft\office\msout12.pip.ryk
from %APPDATA%\microsoft\office\powerp12.pip to %APPDATA%\microsoft\office\powerp12.pip.ryk
from %APPDATA%\microsoft\office\publis12.pip to %APPDATA%\microsoft\office\publis12.pip.ryk
from %APPDATA%\microsoft\office\excel12.pip to %APPDATA%\microsoft\office\excel12.pip.ryk
from %APPDATA%\microsoft\office\mso1033.acl to %APPDATA%\microsoft\office\mso1033.acl.ryk
from %APPDATA%\microsoft\office\recent\index.dat to %APPDATA%\microsoft\office\recent\index.dat.ryk
from %APPDATA%\microsoft\protect\credhist to %APPDATA%\microsoft\protect\credhist.ryk
from %APPDATA%\microsoft\protect\s-1-5-21-1229272821-842925246-1060284298-1003\125a37f9-c9a7-4e5e-9432-ad1e2c70862c to %APPDATA%\microsoft\protect\s-1-5-21-1229272821-842925246-1060284298-1003\125a37f9-c9a7-4e5e-9432-ad1e2c70862c.ryk
from %APPDATA%\microsoft\media player\00320336.wpl to %APPDATA%\microsoft\media player\00320336.wpl.ryk
from %APPDATA%\icqm\icq\translation\mralang_pt.xml to %APPDATA%\icqm\icq\translation\mralang_pt.xml.ryk
from %APPDATA%\microsoft\office\groove12.pip to %APPDATA%\microsoft\office\groove12.pip.ryk
from %APPDATA%\icqm\icq\smiles\smiles\valentine\jealousy.gif to %APPDATA%\icqm\icq\smiles\smiles\valentine\jealousy.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\smiles\zloradstvo.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\zloradstvo.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\smiles\smile.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\smile.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\animated\fingal.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\fingal.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\animated\love.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\love.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\animated\pistolet.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\pistolet.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\animated\poison.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\poison.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\animated\rainbow.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\rainbow.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\animated\red.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\red.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\animated\kiss.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\kiss.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\animated\hungry.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\hungry.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\animated\history.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\history.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\animated\gift.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\gift.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\animated\skuka.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\skuka.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\animated\sad.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\sad.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\animated\sleep.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\sleep.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\animated\sing.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\sing.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\animated\tongue.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\tongue.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\animated\wonder.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\wonder.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\animated\victory.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\victory.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\animated\smile.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\smile.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\cat\cat_attack.gif to %APPDATA%\icqm\icq\smiles\smiles\cat\cat_attack.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\animated\fight.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\fight.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\animated\gg2.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\gg2.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\animated\gg.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\gg.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\cat\cat_mouse.gif to %APPDATA%\icqm\icq\smiles\smiles\cat\cat_mouse.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\cat\cat_lick.gif to %APPDATA%\icqm\icq\smiles\smiles\cat\cat_lick.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\cat\cat_paper.gif to %APPDATA%\icqm\icq\smiles\smiles\cat\cat_paper.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\8march\drink.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\drink.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\8march\cookie.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\cookie.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\8march\cat.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\cat.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\8march\flowers.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\flowers.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\8march\sunburn.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\sunburn.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\8march\mad.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\mad.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\animated\appl.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\appl.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\8march\perfume.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\perfume.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\8march\doll.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\doll.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\8march\car.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\car.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\8march\new_dress.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\new_dress.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\animated\beer.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\beer.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\animated\angel.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\angel.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\animated\beauty.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\beauty.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\animated\blew.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\blew.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\animated\book.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\book.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\animated\could.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\could.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\animated\cry.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\cry.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\animated\devil.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\devil.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\animated\dance.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\dance.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\8march\hug.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\hug.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\animated\eat.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\eat.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\cat\cat_meow.gif to %APPDATA%\icqm\icq\smiles\smiles\cat\cat_meow.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\laughing.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\laughing.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\blinking.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\blinking.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\smile.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\smile.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\bad.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\bad.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\biggrin.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\biggrin.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\blush.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\blush.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\blum1.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\blum1.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\listening to music.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\listening to music.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\bomb.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\bomb.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\cool.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\cool.gif.ryk
from %APPDATA%\icqm\icq\smiles\flash\joy.swf to %APPDATA%\icqm\icq\smiles\flash\joy.swf.ryk
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\crazy.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\crazy.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\dance.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\dance.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\diablo.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\diablo.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\give_heart.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\give_heart.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\drinks.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\drinks.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\good.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\good.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\give_rose.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\give_rose.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\girl_angel.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\girl_angel.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\gamer.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\gamer.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\nothing to say.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\nothing to say.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\laughing out loud (lol).gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\laughing out loud (lol).gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\cry.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\cry.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\thank you.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\thank you.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\bye2.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\bye2.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\mad.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\mad.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\scream.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\scream.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\angel.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\angel.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\bomb.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\bomb.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\cool.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\cool.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\crying.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\crying.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\devil.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\devil.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\drinking.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\drinking.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\can't say-shut up.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\can't say-shut up.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\8march\ring.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\ring.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\gross.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\gross.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\kissing.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\kissing.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\8march\love.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\love.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\kiss.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\kiss.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\air_kiss.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\air_kiss.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\kissed.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\kissed.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\surprised.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\surprised.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\sad.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\sad.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\tongue out.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\tongue out.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\thumbs up.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\thumbs up.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\stop.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\stop.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\falling asleep.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\falling asleep.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\blushing.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\blushing.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\cat\cat_hand.gif to %APPDATA%\icqm\icq\smiles\smiles\cat\cat_hand.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\in love.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\in love.gif.ryk
from %HOMEPATH%\favorites\links\почта.url to %HOMEPATH%\favorites\links\почта.url.ryk
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\hi.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\hi.gif.ryk
from %APPDATA%\icqm\icq\smiles\mrasmileslang_ru.xml to %APPDATA%\icqm\icq\smiles\mrasmileslang_ru.xml.ryk
from %APPDATA%\icqm\icq\dll\altergeo.msi to %APPDATA%\icqm\icq\dll\altergeo.msi.ryk
from %APPDATA%\icqm\icq\html\bg\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\bg\loading\progress_agent.gif.ryk
from %APPDATA%\icqm\icq\html\cz\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\cz\loading\progress_agent.gif.ryk
from %APPDATA%\icq-profile\update\languages.dict to %APPDATA%\icq-profile\update\languages.dict.ryk
from %APPDATA%\icqm\icq\html\de\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\de\loading\progress_agent.gif.ryk
from %APPDATA%\icq-profile\update\languages.hash to %APPDATA%\icq-profile\update\languages.hash.ryk
from %APPDATA%\icqm\icq\html\en\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\en\loading\progress_agent.gif.ryk
from %APPDATA%\icqm\icq\html\kz\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\kz\loading\progress_agent.gif.ryk
from %APPDATA%\icqm\icq\html\pt\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\pt\loading\progress_agent.gif.ryk
from %APPDATA%\icqm\icq\html\ru\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\ru\loading\progress_agent.gif.ryk
from %APPDATA%\icqm\icq\html\tr\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\tr\loading\progress_agent.gif.ryk
from %APPDATA%\icqm\icq\html\ua\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\ua\loading\progress_agent.gif.ryk
from %APPDATA%\icqm\icq\html\uz\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\uz\loading\progress_agent.gif.ryk
from %APPDATA%\icqm\icq\smiles\flash\akitaka.swf to %APPDATA%\icqm\icq\smiles\flash\akitaka.swf.ryk
from %APPDATA%\icqm\icq\smiles\flash\bad_cold.swf to %APPDATA%\icqm\icq\smiles\flash\bad_cold.swf.ryk
from %APPDATA%\icqm\icq\smiles\flash\boo.swf to %APPDATA%\icqm\icq\smiles\flash\boo.swf.ryk
from %APPDATA%\icqm\icq\smiles\flash\beback.swf to %APPDATA%\icqm\icq\smiles\flash\beback.swf.ryk
from %APPDATA%\icqm\icq\smiles\flash\bodun.swf to %APPDATA%\icqm\icq\smiles\flash\bodun.swf.ryk
from %APPDATA%\icqm\icq\smiles\flash\canthearu.swf to %APPDATA%\icqm\icq\smiles\flash\canthearu.swf.ryk
from %APPDATA%\icqm\icq\smiles\flash\beer.swf to %APPDATA%\icqm\icq\smiles\flash\beer.swf.ryk
from %APPDATA%\icq-profile\base\mra.dbs to %APPDATA%\icq-profile\base\mra.dbs.ryk
from %APPDATA%\icqm\icq\smiles\flash\chillout.swf to %APPDATA%\icqm\icq\smiles\flash\chillout.swf.ryk
from %APPDATA%\icqm\icq\database\citylist_ua.csv to %APPDATA%\icqm\icq\database\citylist_ua.csv.ryk
from %APPDATA%\icqm\icq\database\citylist_uz.csv to %APPDATA%\icqm\icq\database\citylist_uz.csv.ryk
from %APPDATA%\.purple\status.xml to %APPDATA%\.purple\status.xml.ryk
from %APPDATA%\.purple\prefs.xml to %APPDATA%\.purple\prefs.xml.ryk
from %APPDATA%\adobe\acrobat\10.0\javascripts\glob.settings.js to %APPDATA%\adobe\acrobat\10.0\javascripts\glob.settings.js.ryk
from %APPDATA%\adobe\acrobat\10.0\javascripts\glob.js to %APPDATA%\adobe\acrobat\10.0\javascripts\glob.js.ryk
from %APPDATA%\adobe\acrobat\10.0\readermessages to %APPDATA%\adobe\acrobat\10.0\readermessages.ryk
from %APPDATA%\adobe\acrobat\10.0\security\addressbook.acrodata to %APPDATA%\adobe\acrobat\10.0\security\addressbook.acrodata.ryk
from %APPDATA%\adobe\acrobat\10.0\security\crlcache\48b76449f3d5fefa1133aa805e420f0fca643651.crl to %APPDATA%\adobe\acrobat\10.0\security\crlcache\48b76449f3d5fefa1133aa805e420f0fca643651.crl.ryk
from %APPDATA%\adobe\acrobat\10.0\security\crlcache\a9b8213768adc68af64fcc6409e8be414726687f.crl to %APPDATA%\adobe\acrobat\10.0\security\crlcache\a9b8213768adc68af64fcc6409e8be414726687f.crl.ryk
from %APPDATA%\adobe\acrobat\10.0\tmgrpprm.sav to %APPDATA%\adobe\acrobat\10.0\tmgrpprm.sav.ryk
from %APPDATA%\adobe\acrobat\10.0\tmdocs.sav to %APPDATA%\adobe\acrobat\10.0\tmdocs.sav.ryk
from %APPDATA%\adobe\acrobat\9.0\javascripts\glob.settings.js to %APPDATA%\adobe\acrobat\9.0\javascripts\glob.settings.js.ryk
from %APPDATA%\adobe\acrobat\9.0\adobecmapfnt09.lst to %APPDATA%\adobe\acrobat\9.0\adobecmapfnt09.lst.ryk
from %APPDATA%\adobe\acrobat\9.0\javascripts\glob.js to %APPDATA%\adobe\acrobat\9.0\javascripts\glob.js.ryk
from %APPDATA%\adobe\acrobat\9.0\adobesysfnt09.lst to %APPDATA%\adobe\acrobat\9.0\adobesysfnt09.lst.ryk
from %APPDATA%\adobe\acrobat\9.0\shareddataevents to %APPDATA%\adobe\acrobat\9.0\shareddataevents.ryk
from %APPDATA%\adobe\acrobat\9.0\usercache.bin to %APPDATA%\adobe\acrobat\9.0\usercache.bin.ryk
from %APPDATA%\icq-profile\installerlang.xml to %APPDATA%\icq-profile\installerlang.xml.ryk
from %APPDATA%\icq-profile\update\languages.aff to %APPDATA%\icq-profile\update\languages.aff.ryk
from %APPDATA%\icqm\icq\database\citylist_en.csv to %APPDATA%\icqm\icq\database\citylist_en.csv.ryk
from %APPDATA%\icqm\icq\database\citylist_ru.csv to %APPDATA%\icqm\icq\database\citylist_ru.csv.ryk
from %APPDATA%\icqm\icq\database\citylist_tr.csv to %APPDATA%\icqm\icq\database\citylist_tr.csv.ryk
from %APPDATA%\icqm\icq\database\citylist_kz.csv to %APPDATA%\icqm\icq\database\citylist_kz.csv.ryk
from %APPDATA%\icqm\icq\smiles\flash\devochka.swf to %APPDATA%\icqm\icq\smiles\flash\devochka.swf.ryk
from %APPDATA%\icqm\icq\fonts\segoesc.ttf to %APPDATA%\icqm\icq\fonts\segoesc.ttf.ryk
from %APPDATA%\icqm\icq\smiles\flash\angel.swf to %APPDATA%\icqm\icq\smiles\flash\angel.swf.ryk
from %APPDATA%\icqm\icq\smiles\flash\serdze.swf to %APPDATA%\icqm\icq\smiles\flash\serdze.swf.ryk
from %APPDATA%\icqm\icq\smiles\flash\skratch.swf to %APPDATA%\icqm\icq\smiles\flash\skratch.swf.ryk
from %APPDATA%\icqm\icq\smiles\flash\sobaka.swf to %APPDATA%\icqm\icq\smiles\flash\sobaka.swf.ryk
from %APPDATA%\icqm\icq\smiles\flash\smeh.swf to %APPDATA%\icqm\icq\smiles\flash\smeh.swf.ryk
from %APPDATA%\icqm\icq\smiles\flash\sobaka_strelyaet.swf to %APPDATA%\icqm\icq\smiles\flash\sobaka_strelyaet.swf.ryk
from %APPDATA%\icqm\icq\smiles\flash\wf_love_sdaus.swf to %APPDATA%\icqm\icq\smiles\flash\wf_love_sdaus.swf.ryk
from %APPDATA%\icqm\icq\smiles\flash\wf_love_srazila.swf to %APPDATA%\icqm\icq\smiles\flash\wf_love_srazila.swf.ryk
from %APPDATA%\icqm\icq\smiles\flash\tank.swf to %APPDATA%\icqm\icq\smiles\flash\tank.swf.ryk
from %APPDATA%\icqm\icq\smiles\flash\sorry.swf to %APPDATA%\icqm\icq\smiles\flash\sorry.swf.ryk
from %APPDATA%\icqm\icq\smiles\mrasmileslang_en.xml to %APPDATA%\icqm\icq\smiles\mrasmileslang_en.xml.ryk
from %APPDATA%\icqm\icq\smiles\mrasmileslang_bg.xml to %APPDATA%\icqm\icq\smiles\mrasmileslang_bg.xml.ryk
from %APPDATA%\icqm\icq\smiles\mrasmileslang_de.xml to %APPDATA%\icqm\icq\smiles\mrasmileslang_de.xml.ryk
from %APPDATA%\icqm\icq\smiles\mrasmileslang_cz.xml to %APPDATA%\icqm\icq\smiles\mrasmileslang_cz.xml.ryk
from %APPDATA%\icqm\icq\smiles\flash\zadolbal.swf to %APPDATA%\icqm\icq\smiles\flash\zadolbal.swf.ryk
from %APPDATA%\icqm\icq\smiles\mrasmileslang_kz.xml to %APPDATA%\icqm\icq\smiles\mrasmileslang_kz.xml.ryk
from %APPDATA%\icqm\icq\smiles\skin.txt to %APPDATA%\icqm\icq\smiles\skin.txt.ryk
from %APPDATA%\icqm\icq\smiles\mrasmileslang_tr.xml to %APPDATA%\icqm\icq\smiles\mrasmileslang_tr.xml.ryk
from %APPDATA%\icqm\icq\smiles\mrasmileslang_ua.xml to %APPDATA%\icqm\icq\smiles\mrasmileslang_ua.xml.ryk
from %APPDATA%\icqm\icq\smiles\mrasmileslang_uz.xml to %APPDATA%\icqm\icq\smiles\mrasmileslang_uz.xml.ryk
from %APPDATA%\icqm\icq\smiles\mrasmileslang_pt.xml to %APPDATA%\icqm\icq\smiles\mrasmileslang_pt.xml.ryk
from %APPDATA%\icqm\icq\smiles\flash\rabotaet.swf to %APPDATA%\icqm\icq\smiles\flash\rabotaet.swf.ryk
from %APPDATA%\icqm\icq\smiles\flash\missyou.swf to %APPDATA%\icqm\icq\smiles\flash\missyou.swf.ryk
from %APPDATA%\icqm\icq\smiles\flash\rosy.swf to %APPDATA%\icqm\icq\smiles\flash\rosy.swf.ryk
from %APPDATA%\icqm\icq\smiles\flash\love_bear_rose.swf to %APPDATA%\icqm\icq\smiles\flash\love_bear_rose.swf.ryk
from %APPDATA%\icqm\icq\smiles\flash\mad dog.swf to %APPDATA%\icqm\icq\smiles\flash\mad dog.swf.ryk
from %APPDATA%\icqm\icq\smiles\flash\drako_koster.swf to %APPDATA%\icqm\icq\smiles\flash\drako_koster.swf.ryk
from %APPDATA%\icqm\icq\smiles\flash\drako_love.swf to %APPDATA%\icqm\icq\smiles\flash\drako_love.swf.ryk
from %APPDATA%\icqm\icq\smiles\flash\drako_opyatnica.swf to %APPDATA%\icqm\icq\smiles\flash\drako_opyatnica.swf.ryk
from %APPDATA%\icqm\icq\smiles\flash\drako_snegyrka.swf to %APPDATA%\icqm\icq\smiles\flash\drako_snegyrka.swf.ryk
from %APPDATA%\icqm\icq\smiles\flash\duh.swf to %APPDATA%\icqm\icq\smiles\flash\duh.swf.ryk
from %APPDATA%\icqm\icq\smiles\flash\drako_zombie.swf to %APPDATA%\icqm\icq\smiles\flash\drako_zombie.swf.ryk
from %APPDATA%\icqm\icq\smiles\flash\kot_goodbye.swf to %APPDATA%\icqm\icq\smiles\flash\kot_goodbye.swf.ryk
from %APPDATA%\icqm\icq\smiles\flash\kisses.swf to %APPDATA%\icqm\icq\smiles\flash\kisses.swf.ryk
from %APPDATA%\icqm\icq\smiles\flash\gangsta.swf to %APPDATA%\icqm\icq\smiles\flash\gangsta.swf.ryk
from %APPDATA%\icqm\icq\smiles\flash\kot_cool.swf to %APPDATA%\icqm\icq\smiles\flash\kot_cool.swf.ryk
from %APPDATA%\icqm\icq\smiles\smiles\8march\shoes.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\shoes.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\8march\joy.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\joy.gif.ryk
from %APPDATA%\icqm\icq\smiles\flash\kot_nedutza.swf to %APPDATA%\icqm\icq\smiles\flash\kot_nedutza.swf.ryk
from %APPDATA%\icqm\icq\smiles\flash\kot_obida.swf to %APPDATA%\icqm\icq\smiles\flash\kot_obida.swf.ryk
from %APPDATA%\icqm\icq\smiles\flash\guby.swf to %APPDATA%\icqm\icq\smiles\flash\guby.swf.ryk
from %APPDATA%\icqm\icq\smiles\flash\kot_spasibo.swf to %APPDATA%\icqm\icq\smiles\flash\kot_spasibo.swf.ryk
from %APPDATA%\icqm\icq\smiles\flash\kot_wow.swf to %APPDATA%\icqm\icq\smiles\flash\kot_wow.swf.ryk
from %APPDATA%\icqm\icq\smiles\flash\krizis.swf to %APPDATA%\icqm\icq\smiles\flash\krizis.swf.ryk
from %APPDATA%\icqm\icq\smiles\flash\laugh.swf to %APPDATA%\icqm\icq\smiles\flash\laugh.swf.ryk
from %APPDATA%\icqm\icq\smiles\flash\likeu.swf to %APPDATA%\icqm\icq\smiles\flash\likeu.swf.ryk
from %APPDATA%\icqm\icq\smiles\flash\love_bear_hugs.swf to %APPDATA%\icqm\icq\smiles\flash\love_bear_hugs.swf.ryk
from %APPDATA%\icqm\icq\smiles\flash\love_bear_kiss.swf to %APPDATA%\icqm\icq\smiles\flash\love_bear_kiss.swf.ryk
from %APPDATA%\icqm\icq\smiles\flash\drako_bolnoy.swf to %APPDATA%\icqm\icq\smiles\flash\drako_bolnoy.swf.ryk
from %APPDATA%\icqm\icq\smiles\flash\information.swf to %APPDATA%\icqm\icq\smiles\flash\information.swf.ryk
from %APPDATA%\thunderbird\profiles\cr5sc40q.default\sessioncheckpoints.json to %APPDATA%\thunderbird\profiles\cr5sc40q.default\sessioncheckpoints.json.ryk
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\scratch_one-s_head.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\scratch_one-s_head.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\pardon.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\pardon.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set05\s010.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s010.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set05\s009.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s009.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set05\s007.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s007.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set05\s011.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s011.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set05\s013.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s013.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set05\s012.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s012.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set05\s014.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s014.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set05\s015.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s015.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set05\s016.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s016.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set05\s018.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s018.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set05\s017.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s017.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set05\s020.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s020.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set05\s019.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s019.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set06\s001.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s001.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set06\s018.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s018.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\smiles\amazed.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\amazed.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\smiles\aaa.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\aaa.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set06\s015.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s015.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set06\s013.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s013.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set06\s012.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s012.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set06\s011.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s011.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set05\s008.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s008.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set06\s010.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s010.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set05\s003.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s003.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set05\s001.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s001.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set03\wacko2.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\wacko2.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set04\s004.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s004.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set03\yahoo.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\yahoo.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set04\s016.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s016.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set05\s002.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s002.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set04\s010.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s010.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set04\s008.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s008.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set04\s005.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s005.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set04\s001.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s001.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set04\s003.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s003.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set04\s009.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s009.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set04\s007.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s007.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set04\s006.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s006.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set04\s002.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s002.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set05\s006.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s006.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set04\s013.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s013.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set04\s015.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s015.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set04\s012.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s012.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set04\s011.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s011.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set04\s014.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s014.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set05\s004.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s004.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set05\s005.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s005.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set06\s002.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s002.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set06\s003.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s003.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set06\s008.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s008.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\smiles\fuck.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\fuck.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\smiles\detzl.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\detzl.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\smiles\devil.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\devil.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\smiles\kukes.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\kukes.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\smiles\ok.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\ok.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\smiles\plug.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\plug.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\smiles\sceptic.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\sceptic.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\smiles\really.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\really.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\sad.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\sad.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\smiles\pig.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\pig.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\smiles\rrr.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\rrr.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\smiles\live.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\live.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\smiles\laughter.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\laughter.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\smiles\sleepy.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\sleepy.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\smiles\tears.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\tears.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\smiles\vampire.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\vampire.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\smiles\shy.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\shy.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\smiles\think.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\think.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\smiles\victory.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\victory.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\smiles\fist.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\fist.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\smiles\oo.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\oo.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\smiles\disappointed.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\disappointed.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\smiles\die.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\die.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\smiles\heart.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\heart.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\smiles\hm.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\hm.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set06\s019.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s019.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set06\s006.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s006.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set06\s014.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s014.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set06\s020.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s020.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set06\s017.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s017.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set06\s009.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s009.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\smiles\biganger.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\biganger.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\smiles\biggrin.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\biggrin.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set03\unknw.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\unknw.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\smiles\ass.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\ass.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set03\wink.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\wink.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\smiles\bazilio.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\bazilio.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\smiles\bee.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\bee.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\smiles\blink.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\blink.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\smiles\bullshit.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\bullshit.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\smiles\coolguy.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\coolguy.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\smiles\crocodile.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\crocodile.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\smiles\koza_right.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\koza_right.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\smiles\koza_left.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\koza_left.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\smiles\cry.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\cry.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set06\s004.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s004.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\smiles\kiss.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\kiss.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\smiles\angry.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\angry.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\hang1.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\hang1.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set06\s016.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s016.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\animated\flowr.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\flowr.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\07a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\07a.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\03a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\03a.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\20a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\20a.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\16a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\16a.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\15a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\15a.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\10a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\10a.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\11a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\11a.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\13a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\13a.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\17a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\17a.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\09a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\09a.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\14a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\14a.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\19a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\19a.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\12a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\12a.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\32a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\32a.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\30a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\30a.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\23a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\23a.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\22a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\22a.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\29a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\29a.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\28a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\28a.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\27a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\27a.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\26a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\26a.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\04b.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\04b.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\21a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\21a.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\01.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\01.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\wacko1.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\wacko1.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\nea.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\nea.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\music.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\music.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\mocking.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\mocking.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\mad.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\mad.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\kiss3.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\kiss3.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\kiss.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\kiss.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\i_am_so_happy.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\i_am_so_happy.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\ireful.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\ireful.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\lol.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\lol.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\rofl.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\rofl.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\man_in_love.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\man_in_love.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\shout.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\shout.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\shok.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\shok.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\smile.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\smile.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\yes.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\yes.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\02.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\02.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\06a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\06a.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\08a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\08a.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\sorry.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\sorry.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\wink.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\wink.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\unknown.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\unknown.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\yahoo.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\yahoo.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\25a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\25a.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\24a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\24a.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\33a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\33a.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set03\dance.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\dance.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set03\give_rose.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\give_rose.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set03\cray.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\cray.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set03\sad.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\sad.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set03\crazy.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\crazy.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set03\rolleyes.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\rolleyes.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set03\man_in_love.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\man_in_love.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set03\drinks.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\drinks.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set03\scratch_one-s_head.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\scratch_one-s_head.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set03\facepalm.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\facepalm.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set03\rofl.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\rofl.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set03\pardon.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\pardon.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set03\nea.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\nea.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set03\music.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\music.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set03\mocking.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\mocking.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set03\kiss_mini.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\kiss_mini.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set03\good.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\good.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set03\dirol.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\dirol.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set03\shok.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\shok.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\52a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\52a.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set03\fool.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\fool.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set03\diablo.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\diablo.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\53a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\53a.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set03\bad.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\bad.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set03\blum.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\blum.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\38a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\38a.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\36a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\36a.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\34a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\34a.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\37.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\37.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\42a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\42a.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\50a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\50a.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\49a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\49a.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\48a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\48a.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set03\shout.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\shout.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\47a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\47a.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set03\smile.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\smile.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\44a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\44a.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\40a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\40a.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\45a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\45a.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\41b.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\41b.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set03\blush.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\blush.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set03\biggrin.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\biggrin.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\s008.gif to %APPDATA%\icqm\icq\smiles\smiles\s008.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\51a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\51a.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\39a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\39a.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\31a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\31a.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\set03\angel.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\angel.gif.ryk
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\43a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\43a.gif.ryk
from %HOMEPATH%\favorites\links\яндекс.url to %HOMEPATH%\favorites\links\яндекс.url.ryk

Substitutes the following files

%ALLUSERSPROFILE%\application data\microsoft\crypto\rsa\machinekeys\08e575673cce10c72090304839888e02_5f9fe710-99e6-4c04-be62-a7f1b8b321d1

Modifies user data files (Trojan.Encoder).

Changes user data files extensions (Trojan.Encoder).

Network activity

UDP

'<LOCALNET>.56.1':7

Miscellaneous

Creates and executes the following

'<Current directory>\upxholc.exe' 8 LAN
'<Current directory>\upxholc.exe' 8 LAN' (with hidden window)

Technologies

Terminology

Training and education

Myths

Technical Information

Curing recommendations

Free trial