Trojan.MulDrop18.41667

Technical Information

To ensure autorun and distribution

Modifies the following registry keys

[<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\] 'Client Server Runtime Subsystem' = '"%ALLUSERSPROFILE%\Windows\csrss.exe"'

Modifies file system

Creates the following files

%ALLUSERSPROFILE%\windows\csrss.exe
%TEMP%\6893a5~1\state.tmp
%TEMP%\6893a5~1\unverified-microdesc-consensus.tmp
%TEMP%\6893a5~1\cached-certs.tmp
%TEMP%\6893a5~1\cached-microdesc-consensus.tmp
%TEMP%\6893a5~1\cached-microdescs.new

Deletes the following files

%TEMP%\6893a5~1\unverified-microdesc-consensus
%TEMP%\6893a5~1\state

Moves the following files

from %TEMP%\6893a5~1\state.tmp to %TEMP%\6893a5~1\state
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\smiles_murmansk_33.bmp to %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\sptspq81j25vd9v+lcurzq3haybd4n0krnktnmd0ar0y7rvlwnlcgn+2anyubbmh.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\smiles_murmansk_34.bmp to %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\nup2oodlhjttmrh2a0smvy7+qjbttbfogo+alcgd1yrqfffcfxh2hgcp564f+r-w.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\smiles_murmansk_35.bmp to %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\t9agk6w8bc4svbc4vfuxb9itp-dm6-4alk75rvhueaunvrxspiu2rofs5oxq5k8z.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\smiles_murmansk_36.bmp to %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\hun1muriuwersafkomkv2vg8sfvmk1aul2bhrlybt61bf11drq4xthz7xrqllx-e.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\smiles_murmansk_37.bmp to %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\djzwmqhgwtx1vc7grsspb-q8wwvjynrsrxj3hxyrdc6qpkvq1z3ypmesha5-dmfo.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\smiles_murmansk_38.bmp to %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\kwaboty+fx-zhlopmuxdxg1qaktwfyhwxcmhlilqsjrulk72y3ag0mmfaxc64txq.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\smiles_murmansk_45.bmp to %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\iljvmfqd3aan1qjbi-gjvrqv+8lgxdqqvqaqoopkedm6yj5rhi9bgwkwacwompqy.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\smiles_murmansk_46.bmp to %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\qu6--3149endgbc8ghjscfgisuxqrinqkjkuq9w2e4hd6ntnp87nhizrueda62lj.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\smiles_murmansk_47.bmp to %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\oadfmn93wfsidoedks38mn+mm0vulv5n-cffb9ka5qtyruharhmvhvg2wrrhiykw.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\smiles_murmansk_48.bmp to %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\pimijyfpdvyubnyjl0sjhzh7debybladhtfcij57yeymgleu2cat8b8xrcqc8j--.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\smiles_murmansk_49.bmp to %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\ddhjsjzreax-fnmfjyzsmk+g9bvm2+zlboiuvwmz9chaayco8tuie331np8zb5sv.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\smiles_murmansk_50.bmp to %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\u1wfsm+lcg782x9lpaf63a+x-4ghzfhkfmuvyv1rxnyg3mkqxptwpw4n3qspfczg.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\smiles_murmansk_26.bmp to %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\vhoz3nrmqmpncc7oz-xwxacqkcp1+vrnbr9hwycs-ltzidm6dlte0u26v-byhchx.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\smiles_murmansk_57.bmp to %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\4fnyb7ztfxekjxar7amnosnvs3btjygi29n209ttceg+-t6wy64k1vrvutqjo9c8.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\smiles_murmansk_59.bmp to %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\5igulslz74brkdo65ggvotpimprmsbeho1etq1zuqyywqvmprj8x2lctshlsaala.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\smiles_murmansk_60.bmp to %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\tvmbbbhvtqwlcdl0b0rk42gubm9ct3ccvtl1wlvzfzjoyn3v5y1mksyyj+9hfytv.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\smiles_murmansk_61.bmp to %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\y2lb+flcxad6suvq1hemlut+xjxl48m2ijpadp5iufdappfv9xdqy4g33xzuzjj-.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\smiles_murmansk_62.bmp to %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\yne7rntjtaaerty8p3p3nafkqiuzbrtentldm8lv39a--lhpntcndshiitni65un.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\smiles_murmansk_69.bmp to %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\hftea85tk77tl6tln4ekv-ppzzdw7x17hetgk+dxrl8mygzpl8shrpdj+cn6fh9l.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\smiles_murmansk_70.bmp to %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\ei+a6+0h6kemrfsz0dijivaw4g5pztsnwvaus0glhd5elcpbxxpzs5cq3vn1lvie.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\broken_heart.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\sxmv60u1ipatgckrjexedshuv34dotf18fjd2gvtuog=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\dont_be_late.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\quvhjqih54gkgunfnalbel7gaejyvqbuctfpkzu+wjw=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\in_love.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\bk3pp16r0comjxpheujvgomih9gwcm3l9yixe7f7u-o=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\jealousy.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\wbdurbqgcl-6hz1ylgpf0872bhz9jes2t5rjkxkulzs=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\kiss.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\2yar3hdx+pjogasp3g9z6q==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\kissed.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\ldkgu7e0xdp5biomh6u6-pgsc9zfu5d4pz8kpj1uf50=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\smiles_murmansk_58.bmp to %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\efkfmzfmgwc4ocwgdmkq9fi4-sqm1lquk-qiepf5famz6r2gami+d8prx-8lqkv6.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\smiles_murmansk_25.bmp to %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\5dr-rsyurnmbsyxz7kaumjrstrf7e2kpb64khaytrivx+tnamhbmkr7kmy0d+ewd.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\smiles_murmansk_24.bmp to %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\noqrnscj5eaoed2+p+rpe-6cpajztia4ucxnwx9zmsdstegpd8ohpsaocwemouts.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\smiles_murmansk_23.bmp to %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\m0ycfzy2wnvspmeiqqkdvamv7fmo9jmu+vviiqgfa2dnkdk3+vjikbicrc7rhdnk.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\koza_right.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\rgixxkbbyuz61y5swj-511tuj1iht6osalyzjwu4ahq=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\kukes.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\3jwtmr-nq5st8fxyvx0tzicvev88nfyz5xgr6opfiba=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\laughter.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\cdn-cqbfmmz4sajokkcwf2afnin3yxchwr78k9gjh5w=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\live.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\ppn+sdoobwpac1t5kyqnza==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\ok.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\xehavggsvri9gfwkwuh+uw==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\oo.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\iodreh0jpwcovvmqvp8daw==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\pig.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\vltuvzh9bxwvwacbqit43q==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\plug.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\rfondhg0jb2cjzpmrs57ba==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\really.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\ekzjpfe3bogm9urpfz5suimxcvfi5x664dwm4p3iaau=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\rrr.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\1muwknafaritqnmlt09odw==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\sceptic.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\jsh5njzs8vfofj7mqauvp4bxdubrlqgf6xqbdh6hsvy=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\shy.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\znxsc4jukekhyz9el3vpda==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\sleepy.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\3fmeqvlltixddm5whlntkdti5ihko8qbj4cubiiicxu=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\smile.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\68+m-evuzsmhah9s3otoltmvhnopck5ck+owp2foapw=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\tears.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\saetmssevlmdov+8gn+vwbh56lbhirlffpv2eovlnqm=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\think.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\6g1s1+exwenudia8vqog0lapou4vk4ix0febbms8hiy=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\vampire.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\ds54ou-6dw1jv32ug2c1ar+ulglhffkhqtqzn0ummww=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\victory.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\d7vda1x-joi0qsvciryf0t+osmwonkitrxahznjtr6c=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\zloradstvo.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\jfvl5r5g8d4ijnlkqskpfijeycvvxnwtj23x4mt+mcg=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\smiles_murmansk_03.bmp to %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\cacuzyffb-9nzqqohvnzfv664qcsyb5vhf+-wypqco2qz7y1a88hrq99x62ivumt.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\smiles_murmansk_05.bmp to %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\mlobv8hpxvwt7bvdqbinhgfohhyqekryz0b8kny8ycftbgxrztywul--tgs9bszp.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\smiles_murmansk_07.bmp to %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\yvgmw8xqwkkpc6w61ueoo9vj894si5plxclgzqpdjwv3uzw7ul3nhjng21g6y5dg.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\smiles_murmansk_09.bmp to %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\ticg3pht3evp8svokbj-9uvw+on1o+luntvj-2+dwxerifb7hu5qbajzprq+ph2k.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\smiles_murmansk_11.bmp to %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\uincs5s9cmhag6ltdcamiainh5k5chb8fndmug6honmjup1z407nxni0qzkfcgxl.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\smiles_murmansk_13.bmp to %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\pgdagzxbwg-1lxs5l+-gyekilqrvq032nck-ofnfhtbees7umtoc-xmbfjwi+ha6.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\smiles_murmansk_21.bmp to %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\qz+6mvfqmxmgdgxzaxqelghdgypcg75x7fj0w72khxh-j2+zcrrgkti6byirp+sq.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\smiles_murmansk_22.bmp to %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\0juamelibmay4kchsybyeqawpk9tvv9satdpdq7goync4eswq5+1gofjwmddwd7n.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\lets_play.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\wir1iatmjnao0elzmn3sa2phohboag8ssweyzkxcbzy=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\koza_left.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\qn0tlsag-dgnvvngqkrw6mum+abnbqzyd-fi7hokwas=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\on_wings.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\q8c6zmxjbphvlkd4yaut20yeev6dcnosdkqsn6ixpwc=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\want_you.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\1glir25v6mkk7doxdyl2luln3xrmpnxghv1mwzwcrys=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\connecting.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\jtxichvqolmb0swa1hizuuae-xuc9jys+uzkpryo-ee=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\connecting_facebook.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\hufpsbunzgyn5puoqlo5ryuktc53toehhztm6+z1dp9yluw4is0ktynvh+7f14hu.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\connecting_gtalk.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\is6d3mgnhjrxh-szb8ml8drbgoc4s-foawfaptjb8wxmm-9rl9u+662jhlwpoqcd.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\connecting_qip.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\kv3piddwfgzxlgdwjwjk8+2odeb-6eqfugxtx0uke2jjivvzg1ft+d2aqsbdtdf3.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\connecting_vkontakte.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\p2adlaztnow4nnmuv41tnqwojowfszql+lg+sjlbwa0m6lf8jltgvsxu+nvehcic.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\connecting_yandex.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\ct34d5xrfh-jsrmxqtnn5gawpwxxbcat4n4fzdxapmhvpatwtbe-lbdwfdssblo5.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\dnd.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\rkhm+is9vnhzfix+fifpya==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\dnd_gtalk.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\esiwqozvgrxxpafvkpuuk0p55dookn9wwwmyu32yxgg=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\dnd_qip.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\dugttcyrbnuunw8ouz0kbbf25voqchxkybu53bgjivi=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\dnd_vkontakte.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\kymysz8o9kqqvg8cjx5aoayn4eoarmifuceg1zfugymgg9wax9joi6o2qdvy3chg.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\dnd_yandex.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\jiporx3dzto5x23a3d9uskatejwxtuhqyqxfvr3x-ja=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\gray.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\ygpi7brgg2erbil6a3kjhw==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\chat_yandex.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\ju5gmzhbyj1dvhb2izujdjpbzzkbldzay8zdglt4oxs=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\gray_gtalk.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\wjn1qvtb2jwbekuv4be7ogz9kuhddcppxcmi7pc04ao=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\gray_vkontakte.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\pmqsbfn8mmuv7gytmvc5w23whl5ns3npkogjoqcju-dio+nri+dbkxfhn9lghjbm.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\gray_yandex.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\-cmcswsrhzs8dc2skter+1gmdz7lu5xjc2j+d--4wlc=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\invisible.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\7grgqrvsiwsgof-hhfp7mqe2evxgc1sntd646qjxzys=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\invisible_gtalk.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\wfuqcqj3bv9+eqhsycaznzsslgsvulc9cs+fqisrqgzokl0e-o79zfppqc-nngp1.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\invisible_qip.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\tbyvaqgiw5wu43xzgs6btvx9kzw4zlui-qyx6udu2o598qpy3pzczdtynzakvk13.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\invisible_vkontakte.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\g4axdhqi-ure6lodpjpky+72-sqthnyahmksf4fmhoupdagnot+zbq7frv7n7icl.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\invisible_yandex.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\lpoyfd6e8-y64tnrzkn8gret6vqqrbbp+q+v6vmgzz7egzlrupvz0pevy1b4-zug.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\jabber_odkl_connecting.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\n732p9c-7w1lz-ppwsmxwnbbr0uizviniqj0xmtbdhub7obrj1e9ddmbdbvylzg5rnfn+jkncrwzctg+5d9jtg==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\jabber_odkl_gray.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\ixsn+v8dvae11ywoqtxznehdqrz7eys9ll3v1kjubtm0llb+dc6+vbacrhtiujwr.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\jabber_odkl_offline.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\+7udkf48pb+t5g8ftqxwm9uqsgz0obob-x6g-epj2hlslphjt9hnrhzkhhudcuxx.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\jabber_odkl_online.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\illaukhe75owtikta4kea+k9nhczchoueeoydrahl1qg4mqybdhpyzuh1nytvyfy.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\jabber_odkl_wrong_data.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\vkwkj1wippq7s0oe4na+6nhqvmdrvmlaojvausjwrfuzrsn1yh09djocdta2ujz0jjjycuwo-hmaodbbxezmaa==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\gray_qip.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\kv3jy9edbsaf5fnfu4beq7pdbwdor+kfp2xuhj0msmu=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\chat_vkontakte.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\6fohgm-zbobyi07ba6eh+nvqhvmuosco7kdlle5n9mfplglziefmbmmndytmorl4.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\chat_qip.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\kwo8pycvo0i7njgiht747jnjf16ve1zhhlwhwqho3cq=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\chat_gtalk.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\efwqjbzcrvhkohwa3vunthznwnry-65lweck-frh8gi=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\aim\aim_away.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\aim\qvtnut6a4b+c93czmpypypctvpoiycupkhx-vdzp6hk=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\aim\aim_busy.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\aim\soz5iiq5nogscss5csk1fldxkerw74bxwcdvd+psgxi=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\aim\aim_gray.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\aim\m7xuw5ybeus78g+kht2hxvyuiugdzoxsbwjycyayx0i=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\aim\aim_offline.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\aim\zic1pkhubfdzvgl86ten1lcs0cwyjtdwznmfpef0uzc=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\aim\aim_online.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\aim\l052+gsv3badzaopdvstmc0ws4i79l0hzfbhvqojudk=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\gtalk\gtalk_away.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\gtalk\z5dfhbvxqkqsbtcclvc7qezsy1gbfzxxyfee3ciy+8c=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\gtalk\gtalk_busy.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\gtalk\k0mdzzkwm5q2gzwwb1nbwl9yzqesjy314zbpllxpbeo=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\gtalk\gtalk_gray.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\gtalk\wvxtrf262pl9zrkgnkdx5zxxhjwmvcg-k-ylqktobzy=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\gtalk\gtalk_offline.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\gtalk\yzt4zulmmiqzfxcg5lu2kuyj1hwnsbly8kmftoggo9yztksfmoz68xfnkagjxc0p.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\gtalk\gtalk_online.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\gtalk\mmnyyapufueek0wufkryvv7gmadajbpqpg8fygfi4pc=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\icq\away.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\icq\nzma8zeauhq37swxa9zewg==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\icq\chat.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\icq\wkzlkihvyru5j2yzlrpuka==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\icq\connecting.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\icq\qhezkvvuhmjwrn7ajqtybaznjhu0ok9n5rhrlhiwdqs=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\icq\dnd.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\icq\ssfv4iwguqqozhrfbqegha==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\icq\gray.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\icq\u8n2czqumwmts96swelewg==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\icq\invisible.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\icq\fkcgv3jwedysg5adve49z4n6g+okussh2mjmz+ayyem=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\icq\offline.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\icq\7di0yqd0wzowjpnmiqeifgs-xkx040i8oftwqsuctuk=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\icq\online.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\icq\flrlf2d-gxqvth2phkhjdn-+q6rujdcvksgfbkml5de=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\icq\seekfriends.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\icq\in0euwjh465pdf6b0phqqf6qdxki5uq4rhm7emi77jm=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\icq\status_mobile.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\icq\e7w+80urt39hwi6si0nxfuvrpyn5ge8kguiacuu+ghhuydvlz+tzi-hwvk25k9e1.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\icq\wrong_data.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\icq\nb1sczpagxypqocqwksgveaqwzktqotybtgulzs1lqw=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\away.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\yawhggkre0qnvdtgsnrpca==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\away_gtalk.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\vdcz61yuazmg3gq4w7iasi2ys3avrf5ph8oi72szpiw=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\away_qip.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\g9ankvp5qa3mn5xc9xbtidn55b7qlpb-46xxc6hhfbg=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\away_vkontakte.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\sfdz62odp9ymuoh9birrhr8+hu1lmaejchethgw-4hhh53ilrtdjeqgbrn07hsur.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\away_yandex.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\bmmuqrewvgqmekyoqfxiwd3kr5xjjmzd0mfvicxkioy=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\chat.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\3r6jtda0gor9cqgzi0hqcq==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\undress.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\nsnnw3r54xjvvgj3wa0+ifg3pykyqczdduipiqubiuy=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\kiss.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\oxxrfxhcqotijuaomdaxgg==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\hm.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\n51iujjlya1ixl8-ttwsww==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\heart.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\g+vbbjmj2cqvseiakdl8s3rhzx1hzg-ze-rea57koxs=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\music.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\1boht3eo8cbe+551jgcikpv9p9vmmgyn0m6rilqgq50=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\nea.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\ydrtumv4nd53oyuulggi5q==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\pardon.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\-7263sagghkuhjp5dqccada3vxi9qetk7suyejos6t0=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\rofl.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\moha2x4jmmpy05zf8sij9a==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\rolleyes.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\v6fkdyqcekztgdn0r33xbzd+jr7ood-nunpyd-njwg8=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\sad.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\2pb9ohqt9kwpsgq5a4bkuw==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\scratch_one-s_head.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\tciou-ya1y7eipzeavakjsidfwenfswaothlhupqykqhth1vgfllu+8tlbawacgh.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\shok.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\rwybkgdnzgt+ewqjzuwjga==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\shout.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\+k3tbecjmvjp+gc8nruorv1ssiulzs02rzu+4gub0-a=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\smile.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\xhq5bfc6l6xkqzfjiwipnv4ltjiijic7u9q8w8xscay=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\smile.png to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\d81ch8y0mmr1wdftsywdcem1nxewqgrxpuxojpldxxi=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\unknw.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\rgmr-+07ypwndcflhyv+7flbwrxlumut7ljrr9khquu=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\man_in_love.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\ditlhiun-zcqxa0d+gryxej0dxqusqe0dzpjhjvo1jo=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\mocking.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\lu3kmrlmvx0o6tpz6jebbv0meqnysu1ynsa3bc6hrsw=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\yahoo.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\65ohel-pyrj37zpxcisxci7wh7jhd07hbkywocdudxe=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\s001.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\4mcbxlcb8obcytuc7tvqcq==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\s002.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\dhjtp38vkdzw2yges8xbzg==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\s003.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\mchbqniakpkm+ztydclbrw==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\s004.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\8ki9qp0tzgkwd31brsgdsa==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\s005.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\51dof22npor62sqelejcfw==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\s006.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\iy3ghiwuqm+mqf69fisduq==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\s007.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\jb8zhg-+0xsedhsriksshq==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\s008.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\s49t6gfdug+y1dr9kkrckw==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\s009.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\hthfk56hlyma18qfew5wdw==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\s010.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\k9epibiyh2rd+9thhwrhqw==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\s011.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\+d4gpldjkt3scwcjuobcdw==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\wacko2.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\ahcux8hyuzc9bnxz4pr2t9kng3zdoaan7izj1moelwo=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\42a.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\khgl-vuydeb8s3nbb6rbew==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\kut.bmp to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\ktlujrgueunnlwtjjci1hq==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\43a.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\l02zmtjuumczn9gob+g04w==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\44a.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\y9eg3jdmeq+9hsnk7bxr0q==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\45a.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\hwwpylcy-xqkqxshp1byca==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\46a.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\gqgimgknoq9e3q7xwkzw1q==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\47a.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\kasbo7k9sz5nudlasimomg==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\48a.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\2uhcr6v9rqfwwqito-mqlw==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\49a.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\palpqfyxxqzxacbck1r+rq==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\50a.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\q8o6ltnh-f7k79k0ordwbq==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\51a.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\7p0ehgrr2moq9ra3chjpfa==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\52a.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\l63syyp-xolp3apkdyib9w==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\53a.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\o2qlacksjf3lvi3t5v-wjg==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\angel.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\xqehc6+v2ce0rvo-wpuilef6437whpr-xykncqiymfu=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\bad.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\8rjzwcg7e6cp2zxma9tg7w==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\biggrin.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\bconelnsan2klyaqzrrpb2giqwsmnja+rqahgqonjns=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\blum.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\6vzmmaafufk+d5r94bko-a==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\blush.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\hbhebb2yalmjc77eym8nzymcfrficoz0gpy+1fxwbn4=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\boian.bmp to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\lwx+jnwb-l9b1aqgbff5bryvpf6eeoisnk1az0barhu=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\cray.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\nmgrrao5-zebfkomxrs6xg==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\crazy.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\fd80bmsxuoauklnstkhba75c2bishcjj-eufsmjxxi8=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\dance.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\wxf5ah5pbhdf48wt6ejmv5dlp1zjrk+pz0bd27idykm=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\diablo.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\pjgxsfvn-qgoqgqx25opw1jwj1eksrimk2mtfmu+gju=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\dirol.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\du+0odh6vwvuoaythy+guikk92-mwkm3lmfjnphp+li=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\drinks.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\cn32qk9kevariipqsrd09wxbvexp7b5b7xitif2fmkg=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\facepalm.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\mr5sjy9hnwcxirtzsmfdfuqz6y1tcz4sixsps54czh8=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\fool.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\h8md8w72q51elg2qm4hmpw==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\give_rose.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\huqqtesdisucmcj1-y2besnmphequt6zmqhs7wuteoa=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\good.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\zwndwt0-hdbfaafnif9guw==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\s012.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\d92yk2ruq2dyfdln6dsh+g==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\wink.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\kymcyxsmfzrbibobyy3+ia==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\s013.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\u4vnyu6kkvisdbqddbvqaq==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\s014.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\isjhrqjugiboq+p4er10ea==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\s015.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\ep4v4hdak3vlstf8teobba==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\bee.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\050xhwvago7ygj7cqyjwaw==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s014.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\cgv5x1x5bvt4jvlm-y0ksq==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s015.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\vnfh1gb-domu1c-hnaxrua==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s016.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\veexk+09mpdw780jokq3zg==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s017.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\p2zqavvgbobzugqovmpu7a==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s018.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\k00ceeltbjq0jnzeqe7ogq==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s019.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\6k63xnypje3gnsv9fkzfka==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s020.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\wgtjdimbg0qxpx+bqzuyuw==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\aaa.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\pkht-a1cxh7xxlwvlxj+gw==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\amazed.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\eqdqpnei3ximbgtztd-mmit5u9xw2prpz36qamoz8lo=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\angry.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\-3j5u2wn+pgno-pzbrckebkfzcjybaiq3c1bz36fenu=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\ass.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\xryz5gwvnpk2g7pxma8rlw==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\bazilio.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\4j9tnikrboib6v7bl1zetbjyd3jg6sal3fmaysii78i=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\biganger.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\wup2tjlqcq4u15cxyool8rl7ug8nf0rkbyxjfxnsiyu=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s012.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\-mlqlkemwy7hb4cskc--tg==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\biggrin.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\w8a-dssmwjhk7oo0csk6lzq6dre+9oalwh97ny7zpcs=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\blink.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\v8sppqbins6zi6f-a8klzl5kensvmfngw+ojkc3u0uy=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\bullshit.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\-kvepruwzuoy9hrpa7crzc3kmnjkoathyrjjhs+1ue8=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\coolguy.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\atkvld-1xf8czp1pdxvacgekseheibphfltcq9c89r4=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\crocodile.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\agja0npftinmozvkbkzkdgwcpxlvrwalqoxpzwopkaw=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\cry.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\wnfsl17empbuzjq7guddla==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\detzl.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\wnhr+v298hyey8hj1gwaxylfhn1zs3-w3cqknm9ooay=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\devil.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\zac2hyyxhhs5fpkldzfrnlibys+5gaotj+-n6goxl-q=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\die.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\bqdzkrdlwu7i+clt0isefw==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\disappointed.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\jueefmwyukn+7tfyo5wrbgzmpxbrrxfrqshysnaz0gm=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\fist.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\eqkbxgr8ey3a8qkywgknfg==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\fuck.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\g-4u74l4ajm+f9ra2ug5wg==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\offline.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\baah1hygrbv9vtbmyv1fasjsyd-r9nkuaplmcycqd1i=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s010.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\w1txtedqbbqxfzypjghczg==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s011.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\y4edc6f57mndpjxxbjot3q==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s008.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\kfdwpxlavdq8sljjzd0oaa==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s013.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\xisoox94wgrzeur8el9shq==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\s016.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\119k4uhbr6zpzetfgoq9sq==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s001.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\bmayfn+tdcfrgrj621fcgq==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s002.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\unhmv3qdakguy+ecfuvbeg==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s003.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\6b7qnxhqo5-fqvkt8bifgq==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s004.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\j5gnuzebdcopym69o4liqa==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s005.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\5fo2esi476okzajxys7o1w==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s006.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\5cwerf5l8tozbleyub3+-q==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s007.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\afknhxu+fqm+jqv2pfq9ea==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s008.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\iex8xoyafh2ucglgzsdapg==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s009.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\edmrqa8mti5v-gammeo15g==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s010.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\bkaizcislcaszcskoco0xw==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s011.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\slxxvvsdmzinigpbxlqzbw==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s012.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\z9jkktrejl1odiw5sh9gtq==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s013.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\gpetflbrhpn5lvx6bo3vsw==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s014.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\erouhhgxzy74ht+fhrpk2w==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s015.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\5uuf6w0ajlemgzkuxfveya==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s016.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\sm6is8ph4uytfh6q+6+qca==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s017.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\7rkt1kpbaxgoimanhx+v6w==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s018.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\niz7mv1avxvbyiwc+maubq==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s019.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\dagzdjbs4hnzr6rxejtybw==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s020.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\hehfoqy5k5gmxfzgbql6ra==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s001.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\i6ves4vj+ratfhx+yniepg==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s002.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\n5cbou5aohm08zeolldf9q==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s003.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\or3kfbwyeo+qbrpqrvlcbq==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s004.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\suno2o1cuvsz24xk19mrkw==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s006.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\17thobfj8bziy6z7j4x+qw==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s009.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\ii3ksz9gypxikwa2kkdhsw==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\kiss_mini.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\7zlsqqdvtfe6qvsc+vkki9q8pxkp+frtzu29g5sa4e8=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\offline_facebook.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\c6drod6-hk1ilxybpq3ucztl3t6erztmlw57btvbb8cvajq-iq4fegkmx5gtxcup.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\56.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\coqvxxd-le0vxcymrqhjsw==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\sounds\voiceend.wav to %APPDATA%\mail.ru\agent\mra\sounds\2za5vjd7zqetnsqnqtqb+kq+2vaicct1zj9ilubg8ps=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\translation\mralang_cz.xml to %APPDATA%\mail.ru\agent\mra\translation\sa2ktupi4v2lsg8et3jmou6zdy+guzxacj76sl5lv80=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\translation\mralang_de.xml to %APPDATA%\mail.ru\agent\mra\translation\5qhdcfp6aua24e6lgvzdymvl3aoav4-b0mlcfxcu9+w=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\translation\mralang_en.xml to %APPDATA%\mail.ru\agent\mra\translation\uqeffqwruh3qwzznaxwfgethjm9xkxhkoen-s0vnp2y=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\translation\mralang_kz.xml to %APPDATA%\mail.ru\agent\mra\translation\mv0a2hcpgelhdgfaxt9o+lulnmnv70ix1-xlzaroxxu=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\translation\mralang_pt.xml to %APPDATA%\mail.ru\agent\mra\translation\ytvdfwrnmm9pedg0lanmoy-c8vi9yci-eltpes0od4e=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\translation\mralang_ru.xml to %APPDATA%\mail.ru\agent\mra\translation\uttc+9ijo1vzhycksmn4xgoy-e-b6xurob2ghpbqc80=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\translation\mralang_tr.xml to %APPDATA%\mail.ru\agent\mra\translation\3y1szjhbznevlqcyd4j6vl0rp+nnd79z8w05umzq6fs=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\translation\mralang_ua.xml to %APPDATA%\mail.ru\agent\mra\translation\etbznipkpett7sexhj4ctnvkpknyqi1rxgjebddl8ia=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\translation\mralang_uz.xml to %APPDATA%\mail.ru\agent\mra\translation\asod7ulbgxqrolloseennpflmnjdrd8inydvqqvlsao=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\video\video.swf to %APPDATA%\mail.ru\agent\mra\video\qpqpkf6cpzbo69sordl-n7rxbsznkrx3wzwupsoxw3w=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\microsoft\dbgclr\7.1\objbrow.dat to %APPDATA%\microsoft\dbgclr\7.1\ctzec8wkw86ds3kuxxlewzdaky3viu0yha1hogvyx5m=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\sounds\test_sound.wav to %APPDATA%\mail.ru\agent\mra\sounds\h0wjfpaghgje1vr-5lt67-rpirvamo+ngksjfbecwlw=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\microsoft\document building blocks\1033\14\built-in building blocks.dotx to %APPDATA%\microsoft\document building blocks\1033\14\szq9uq6bm1rrsgfat5uakkw7caetx96xegy5bmejstpcbdqmhy4xn91yvgap4lvgr8mqdxmcwidopg1wzgxdpg==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\microsoft\office\recent\index.dat to %APPDATA%\microsoft\office\recent\axu1m-yhi+fo4xcyqgid-mcvpovfjohmnncys5c1y+g=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\microsoft\publisher building blocks\contentstore.xml to %APPDATA%\microsoft\publisher building blocks\fh7vz9wm09cq4d6oyea5+dluvvaj6gw-tbnzsp52cfo=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\microsoft\templates\normal.dotm to %APPDATA%\microsoft\templates\1fiemiqvwjwnf9h9fyy6rer3plsjzgbgjoivpdh4wce=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\microsoft\uproof\custom.dic to %APPDATA%\microsoft\uproof\0gf1ik4jzbw523uywf0n6qixcfpwzhsy4kepbm7d4fa=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mirc\mirc.ini to %APPDATA%\mirc\09-xs0mya7ibms0s-oaf7a==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mirc\servers.ini to %APPDATA%\mirc\1fsynace4kq1bgjzp3m4ucuidenm3fapihwieg4qvce=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mirc\urls.ini to %APPDATA%\mirc\pkkytscca-roul4pbditpg==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mirc\scripts\aliases.ini to %APPDATA%\mirc\scripts\hdli-s0xmpmfdgzww6oclmblfmjmsxug1oy0sf-u28q=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mirc\scripts\popups.ini to %APPDATA%\mirc\scripts\nvlfzwiblns58ucqvhkxdo0yvojcmh5vifuoooxdd8s=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mozilla\firefox\profiles.ini to %APPDATA%\mozilla\firefox\jrvl5lgaw458imc-rko6oog4kdk0vtd80x2cdv4l0lk=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\addons.json to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\ycpirtcmteocbxvtunlgrznaf-ux1tyamchuzl0fe0w=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\blocklist.xml to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\rsgwpivmm1vmxr8cqpnnudf+b27wwga1bxlvkmwe1kq=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\microsoft\msdn\7.0\objbrow.dat to %APPDATA%\microsoft\msdn\7.0\f8+jjl4rghkaezg-9z4xnnfcengqrbs7jd1rxfamtak=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\sounds\start.wav to %APPDATA%\mail.ru\agent\mra\sounds\dvtogdpesepimb+qqijqtazejervfaq96r0+271c1ak=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\sounds\ring.wav to %APPDATA%\mail.ru\agent\mra\sounds\qjcyzzc8n5obewlwstov5w==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\sounds\otprav.wav to %APPDATA%\mail.ru\agent\mra\sounds\v+k1ld+mbo7xdytyprvxe4uyz4hk1ckoerwwtmuhb8s=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_invisible.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\vmnjqu2xjtumz5mcocke8bz++bft1u1pdwpiaev75trq-zbdioiwqz6mioegibbc.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_invisible_title.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\jca40jquuwszgiqb3nfcpa+qy6koztgu8svs5iavcw3cpm3meugh79zu2bs7woh7jskfndne6jqnmfuf8joy6g==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_mobile.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\se5kbjtmtadmhauf3ixpdsq+2sz-ejnc+j9fzidug4mc43ffleeht9txj9n3trcm.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_offline.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\vcziqxywgi9dfqpqk3bkwsenfyxdvhdfr-xyvklamy0vaanswkxyjlzaftq9nr-8.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_offline_title.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\+4ev+ed7isqzbsssl43kndanmwlejmhd2rpcddaghaqp-c5byfhsesvlgtom2j-0.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_online.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\4zsvjervnh6moxyfsh8xecvpxw4g-uvhypg2ji6qask3n-simxl86x-wqijfutml.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_online_title.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\tvlogfzj3hq9umezxppv2g+e2sbk-ftsdzwnu-+7yppjyzhokqz1cyzsxc1um-i4.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_phone.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\tbml4pufwpm0+rnoyxekoioxsmg68g1h1nuuw5+alrm=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\telefon.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\wtsln+vofe+ktyzzx5lldbbpjhz8kg48otnia86l8+k=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\vi_oshiblis_nomerom.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\facycz+mbkmgbmwwgimpkufmd3aebzealy1zotlpskrb-1mxlika1cwzstyynawx.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\v_institute.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\woldnhnxeu3ldq4jrtptiiwadjflycx-9qx6wvccdqs=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\v_shkole.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\-8ciqsxep6xiwvxdutvg5agdkgqqnldqa7jau0jppmc=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\wrong_data.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\9lmqt0ddefr-trlqxrih63ishm+wbnwd8atgkzmvdte=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\vk\vkontakte_away.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\vk\2pah5q-wetztzwgr3qscootvr2cuwwy+v7poeva3kbzhhxmmafrim0zfpmro052m.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\vk\vkontakte_busy.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\vk\apvka6h6ejotb1b5mbqhxgk0uwhnic-losftdwy8hyw6yzfpp4ccpa6rwoos0sry.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\vk\vkontakte_gray.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\vk\qizeqtkexj3x79mj00clqebyy1hyktdpbqgp72a-t52a-w9zoymqxktqez0h7la8.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\vk\vkontakte_offline.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\vk\rphn6qt3+tctse-tmfn6hhmqlfwmiv-sbja1yxns7atrvp0mmwg9gnxs1dftap4j.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\vk\vkontakte_online.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\vk\d10vmu+xhrmn9whq8gz00jw9ey7-u2y0vlhekqywxgrce5whxxpfwq6bogaynpa+.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\sounds\auth.wav to %APPDATA%\mail.ru\agent\mra\sounds\mg-6mjredfln4yxb0fnieg==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\sounds\busy.wav to %APPDATA%\mail.ru\agent\mra\sounds\r7vpn+wojzxogzr8efwt7a==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\sounds\call_in.wav to %APPDATA%\mail.ru\agent\mra\sounds\lbk3sz9swpryaw5-inawvrd1u+ftxs9hkyv7wbtoa-e=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\sounds\call_waiting.wav to %APPDATA%\mail.ru\agent\mra\sounds\kzarxmmqjdtgfty4z4gwchob9epi06uzrkd+dskfsqo=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\sounds\conference.wav to %APPDATA%\mail.ru\agent\mra\sounds\z4gf0hg-i4yhxpjjgc82rslcrcqgis1g8xzl1ysxx-c=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\sounds\error.wav to %APPDATA%\mail.ru\agent\mra\sounds\qzldsr6drbayfr4penm9cmmh+yqaqkxfx2pejqovhz0=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\sounds\letter.wav to %APPDATA%\mail.ru\agent\mra\sounds\gddsmocuynqokldceol+pnbu5j12b09gmgjdxpnzkvo=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\sounds\message.wav to %APPDATA%\mail.ru\agent\mra\sounds\qaps9wrzc3mce8bzxnx69dwe2qrmqvchtz0o-wyhfua=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\sounds\no_answer.wav to %APPDATA%\mail.ru\agent\mra\sounds\f766-atpqbcxu1d4dq8wm1wzlpzpblltu7o4bbekfla=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\sessioncheckpoints.json to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\1clpaytaxuw68+9yu259u25twz+h1futj+lomqbsg1jsc6+xgfmm+h28pswextxr.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_gray_title.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\h9hik5aroztvuqhe6bh2epdyvu95htvlnh8hiqz5wayijdachdgvh34gdu2fs-6l.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\compatibility.ini to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\gtzdjsg1s2ka+lapznesqe3ia3bfzjk-wkzz4gxoiyof-lb4x23isyjlwejxduud.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\times.json to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\zpcowpmrmuthhk-qbaqumaeelh0xblu1d6-xpria9mk=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\telegram desktop\tdata\shortcuts-custom.json to %APPDATA%\telegram desktop\tdata\ofz1iwewzvekg-dl+kpfw3dx0qkz8qs3m48utejkmvjrpqj-0flyuk5nd4uhoy-i.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\telegram desktop\tdata\shortcuts-default.json to %APPDATA%\telegram desktop\tdata\i1rwlamsnghcucbqltq-rze82ybakilrhkblprssnq4hah89glrz4bldabqb8r4s.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\thunderbird\profiles.ini to %APPDATA%\thunderbird\8j0w424j5sl9iywedhc0vr9xy248sfj4x9hqaanj2kg=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\thunderbird\profiles\wjj9aet2.default\blocklist.xml to %APPDATA%\thunderbird\profiles\wjj9aet2.default\5movradtgx1ena0e4z625nolwkptxezlv2ut0rjfdkg=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\thunderbird\profiles\wjj9aet2.default\cert8.db to %APPDATA%\thunderbird\profiles\wjj9aet2.default\mp89pwtn-pkingg8m81lsg==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\thunderbird\profiles\wjj9aet2.default\compatibility.ini to %APPDATA%\thunderbird\profiles\wjj9aet2.default\ockxayo1ot2bzxcfzy1a0jglwobbvqtw46wgixfqk03ka+xzyi1dgltkxmsvl3bh.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\thunderbird\profiles\wjj9aet2.default\extensions.ini to %APPDATA%\thunderbird\profiles\wjj9aet2.default\kn4m9yrbmhyenupxg52bvs4na3jzscr2fwmx6ir+zyi=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\thunderbird\profiles\wjj9aet2.default\extensions.json to %APPDATA%\thunderbird\profiles\wjj9aet2.default\lg7funnersvwenbm+nqv3b8xl-hrjjig6nlc5c9bdqq=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\thunderbird\profiles\wjj9aet2.default\foldertree.json to %APPDATA%\thunderbird\profiles\wjj9aet2.default\y0rlt1b98pczevj8iuz+rf3x-s-ivmqekavyizgjbzw=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\thunderbird\profiles\wjj9aet2.default\key3.db to %APPDATA%\thunderbird\profiles\wjj9aet2.default\wlbllvdozpojqyu7rcip3w==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\thunderbird\profiles\wjj9aet2.default\localstore.rdf to %APPDATA%\thunderbird\profiles\wjj9aet2.default\pwdhczdnkcnoxw7yugjqzrnu3q-z2n1gc1j-quwzdim=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\thunderbird\profiles\wjj9aet2.default\mailviews.dat to %APPDATA%\thunderbird\profiles\wjj9aet2.default\5sbxh3tjj0ow2yw8n+dema1a7oaxoht1xyakixaqj-q=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\telegram desktop\unins000.dat to %APPDATA%\telegram desktop\oieyevfv1xerftysjd46e8utzpdyx+kfyikgh7dkzni=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\thunderbird\profiles\wjj9aet2.default\prefs.js to %APPDATA%\thunderbird\profiles\wjj9aet2.default\qnrgqmam4kc8yyfcr8a4bq==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\thunderbird\profiles\wjj9aet2.default\session.json to %APPDATA%\thunderbird\profiles\wjj9aet2.default\i8qd8bzyyca5rndzyxqswbgeahdufhebe7rgstz7eo0=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\thunderbird\profiles\wjj9aet2.default\sessioncheckpoints.json to %APPDATA%\thunderbird\profiles\wjj9aet2.default\lxfjlwrpj1ukd+8aa6xprpxwanhjxiv7nhq-trm3wind3tpyngutslv+rdfmgzjn.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\thunderbird\profiles\wjj9aet2.default\times.json to %APPDATA%\thunderbird\profiles\wjj9aet2.default\tgmrawhl26a3asyf62nmjpdhtdalcbxkzwb3buarwco=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\thunderbird\profiles\wjj9aet2.default\virtualfolders.dat to %APPDATA%\thunderbird\profiles\wjj9aet2.default\tpupc+dqhai38kqj1tkz-vsw8gjklybjedsv5zvpyrv+fvl1pap4gw79h7vbtwta.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\winamp\demo.mp3 to %APPDATA%\winamp\h6t+qvqso6oogr7vkkoabw==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\winamp\links.xml to %APPDATA%\winamp\3+gzzrhmeqmqutj4rbihyue1r6tkuzoqzahrvfcemxa=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\winamp\winamp.ini to %APPDATA%\winamp\fy4goo0cu2a99jbwettykwe69rcn0z2x95kbxvdqq-s=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\winamp\plugins\milkdrop2\milk2_img.ini to %APPDATA%\winamp\plugins\milkdrop2\fxh1ekrj6dvm6hh4zflhioooxq+tfqw6dklzdzedefw=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\winamp\plugins\milkdrop2\milk2_msg.ini to %APPDATA%\winamp\plugins\milkdrop2\ihnnbs8mhalypff-ygtinlmv5dlzbwvcllhvth38xc0=.b34c419eebc7dd8b9de9.crypted000007
from %TEMP%\6893a5~1\cached-microdesc-consensus.tmp to %TEMP%\6893a5~1\cached-microdesc-consensus
from %TEMP%\6893a5~1\cached-certs.tmp to %TEMP%\6893a5~1\cached-certs
from %TEMP%\6893a5~1\unverified-microdesc-consensus.tmp to %TEMP%\6893a5~1\unverified-microdesc-consensus
from %APPDATA%\thunderbird\profiles\wjj9aet2.default\secmod.db to %APPDATA%\thunderbird\profiles\wjj9aet2.default\ghq9ymhsnnnnyyqvfh9j3lku74shce7ydnzfgtlu9cg=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\telegram desktop\log.txt to %APPDATA%\telegram desktop\jshweg+gzpsjlkffjtgtia==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\opera software\opera stable\storage\ext\sync-login\def\databases\databases.db to %APPDATA%\opera software\opera stable\storage\ext\sync-login\def\databases\2+sls85o0s9vcqdx7h-nfy7iumv8nas8twktbntaiii=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\opera software\opera stable\extension state\000007.log to %APPDATA%\opera software\opera stable\extension state\tmhyjqpe4sijml6oenjenpi0maxyq4pqp5b-tz-bgp0=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions.ini to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\grkdjubwf+sjcc8wn6ix0mxkbcsverpsi005sjlmvzq=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions.json to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\2am6ggwhetr44vrbderh30qaijjkfbbpg2yy2chzoai=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\user.js to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\iowbbkuckamzwcnc3tr74w==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\mimetypes.rdf to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\uucxjjcqtvjekwz0u7e-y2mlpw4y2gqpvw1zh9b5lyi=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\xulstore.json to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\fzmhzaajdb9kpvr2wgmlloi1agmmltspgpithkcaf6o=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\pluginreg.dat to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\jucmgdekunzyzfazsgfyno5oiudfpf-dwf8dcytvo3e=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\prefs.js to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\m-f1djd761+cwd+ngdvn6q==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\revocations.txt to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\zzd9n7yq9t1v7irjkoxkrvcwtp7kwpfwuxod6g68v14=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\search.json to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\xty8fjl4lfvcizbaef08xxgg+ev3ue8jide1i10k5ig=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\secmod.db to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\xgwkcvbwfsrk2w19dxd2xynzlp5r9siumm2dzkalkfe=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\datareporting\state.json to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\datareporting\slgozanmraexoqk4yyydqr9ft4v0bawxq8+zulldyao=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\webapps\webapps.json to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\webapps\gyl0myg5fgdcitflxruu9vesen42v+9uhgeddbm13uw=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\sessionstore-backups\previous.js to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\sessionstore-backups\seqbk1dhvkpg-ajxmlty6dfeu0wjav-rfsys8kiisng=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\sessionstore-backups\recovery.js to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\sessionstore-backups\vjltdjuggtkx5hnwum-1z4unaikhchi8z5c345cl3k0=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mra\installerlang.xml to %APPDATA%\mra\memanuhoqvyxdnzlztoqlxidn1cw4llhheciikpzbbc9-7jht2skhaarbre54c+j.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mra\update\ver.txt to %APPDATA%\mra\update\3zhtbkheopsamn4-8ee8ww==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\opera software\opera stable\bookmarks.bak to %APPDATA%\opera software\opera stable\fmcrxiz9h06ykfnaboad1gied07ghq6uxayytg+b+um=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\opera software\opera stable\browser.js to %APPDATA%\opera software\opera stable\en9cugkyw2kmaouyn0sx4espg9ug7vari9glpc7pjr0=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\opera software\opera stable\update_prefs.json to %APPDATA%\opera software\opera stable\mns8vtfvx3qd7fudfymlzyxrzhkd1ojrepm4dbrqwlhgy8imcq9n4k0wkelppwad.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\opera software\opera stable\favorites.db to %APPDATA%\opera software\opera stable\xjljfuecofruain8il99yqbxbjfh8h+at6qx7eibb8q=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\opera software\opera stable\opera_autoupdate.log to %APPDATA%\opera software\opera stable\nfspoz-07-ugiaespipi4k6jqvsrvkcyhmg1rg0b75ojqj1mtmgi926yogb34tvk.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\opera software\opera stable\opera_shutdown_ms.txt to %APPDATA%\opera software\opera stable\yr+16qyxypmn+vwrjmivyrapgjlw3cklmr0kyvzj22rkwvmzkkotmnpgrjatypo4.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\opera software\opera stable\session.db to %APPDATA%\opera software\opera stable\vf+tcnvgroysm7kfl7pkxkyw6mkwbejavl3gkbskwuk=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\opera software\opera stable\siteprefs.json to %APPDATA%\opera software\opera stable\v-fmsixkapvwevwf1a20gdfg6shut5kjj2j5z6bux7c=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\opera software\opera stable\thumbnails.db to %APPDATA%\opera software\opera stable\sv6n09aaxwgfb+d1ybhycq5tnru4ggqwe8mo5qxgvkw=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\opera software\opera stable\databases\databases.db to %APPDATA%\opera software\opera stable\databases\gvre-3wmitjephisxzftuecd3pqotofq3xoxjhepaas=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\opera software\opera stable\dictionaries\dictionaries.xml to %APPDATA%\opera software\opera stable\dictionaries\ez5779xn2nv1mrbubirm4jq9lonlomwlqeaxl-u+wd4=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\sitesecurityservicestate.txt to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\rm6qiahkdilwzpwjdwcm74twus7hn8lydb0lvlym5dbtetlws5sxpeohkkgwf+vsyiku4jl5ljh-lcgse35rpw==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_gray.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\xg5gaf8x4hbgflilvbninkxbj4jzr9fkzmamf2zubje=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_connecting.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\tnrxfgetftcyzshocmxxxc0y0xlontcsxmy44f6htuvxzk5icim3jysvj5-ph2ww.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_away_title.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\rzcjuyxac9n-s+tvjpp6izyhr7dj5ximcrzfkuwszoy1dcjbgdx0srynp4f8x4c2.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\60.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\dsri1xkc3shpvd+l6q30lg==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\61.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\ipmhwkxx7uzeo6xjxqdvaa==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\62.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\azq7mvk7wvgcn8l1-o5oaa==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\63.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\kq7uo2vupichjwzqld0hgq==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\64.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\arh83shhlxhtezpuvztlna==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\65.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\29xqhebltrf1envxebexfg==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\66.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\hbati8ezpiwkdcuqfekbxa==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\67.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\qx61+5sjcqvreececrnz6a==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\68.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\trifz7v6pgaz2nn+vgp3nq==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\69.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\i7i3fb2+xwca-coffm85ba==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\70.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\lokofshpnilmamfqntaktg==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\71.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\mwrvln75r3+tvhdv3exuqg==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\58.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\rsbiq9fyjzubel5ldwszxq==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\59.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\oe-ehctdrobfmnz9ozsrdw==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\74.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\cpv-xtvhzcnbpzkb-7ypia==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\75.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\bvenaxjwqbdrj9x40fxtuw==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\76.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\nb7wbehqzpjccxfuyaa06q==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\77.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\op8e2aohlo8wnsn2l5y6aw==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\78.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\afzv4cc6c6olev8cpy9fsw==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\79.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\ucumij-ja701dwwknrxl5q==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\80.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\gsc5u19fkxoztvdk8eixpw==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\81.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\ff-k718easdbdvtfc97dza==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\82.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\ztma9wdpffynwmllhysaia==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\83.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\rxuaw50pl1s8phk-taqliw==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\84.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\fnqnd7s7oj2bopoz0rib3g==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\85.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\3bqzhmnf-xkwozel7g26dw==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\72.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\05jqkjlm8cwybj6m7unlyq==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\offline_qip.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\hg8z0z+wkn1a7viiu5yrfbwf57fri+voor4jegybqtg=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\57.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\amud-t3rfu1rwhfnwaqaew==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\offline_vkontakte.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\dox2e8j8wsyrgqv8s13+agph8h0dktpk9uuwdgsievufna2ti4sr4etjebpmkhoq.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\offline_yandex.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\oarcxw3yieye-0hczx5103e0txu8yeml2goge0kssp4v9tjz06tainwbz-jmjg1-.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\online.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\8j20ucfyazhyoli320iufsdv1gnpkhvqrno3l96ic1g=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\online_facebook.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\9jhz9clyjwvoag4gomz-1bi6maor2+tlkpt+iwayt7se7o611wwf+w+fdvl4e0gw.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\online_gtalk.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\ewz4mydg7us-mmhaw96gqo2gq6yc4dqpqmtggglwjrm=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\online_qip.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\qtgkmkpzgu5bi273bv97cjacxcgitfwmcrvfj3qvy7u=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\online_vkontakte.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\gk1oy-ki6lfha7aunuacytzs6bsocl4fuki2gfruqlifslmpkf4sbk94dtnbiium.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\online_yandex.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\5e5mvp9ifllzfrwazhqmtrqkdp-nmhxjjt4ho5wumhvcwguxi7hxaawd0jbze-qr.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\seekfriends.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\dq6ehoujdfd7itann4jatsaes8vcgi+srhl23m-oqhq=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\seekfriends_gtalk.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\jdgcsk5budjkcf+up-tp4ujggzcts2lbrfzoyjvirgnn-5qh9z+hwmtmmsfb3gbe.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\seekfriends_qip.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\bdefbsio6c-qpfhqfoomtkpje5roo-pki2bb4muclj82cbvzv1of2xx7detnrhxw.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\seekfriends_vkontakte.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\qzkb6+ty+m6p9uitkmpgjx0fza7rh8at6emrw7kigjx2l7rpzhjr-he7ybjadolg+jwwwgum4e1hseht+okqnq==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\seekfriends_yandex.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\pzvcdlxpldskytdhxt8se2naqkzxx0wsnbodyv+9jon32ked-amadrfayplmj4aq.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\wrong_data.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\tguhlwkrdmyhklca2vub3va6hzjyfnun-stgfecihmm=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\wrong_data_facebook.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\lc22-merndubzyxkg6cirgnvipmgq9jns8er-bu7fvfjnxdsycf6nmwmduppwtvf.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\wrong_data_gtalk.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\wftc9zoidmthhiyxt7rhtidf22xq-24ajiz8zckitmwx7r3ypljq1rkqxwcw-6sf.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\wrong_data_qip.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\hkhqgytinf7cmson13yddy84ud3g0kqjctgqeuizlsgytnqye-kweji8gn2rnksd.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\wrong_data_vkontakte.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\z7iftefyh9dds9oosr18dapubvoj3stkmv1sushm5d5gqvufcybzfusoybh9ii0t.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\wrong_data_yandex.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\mmg4mmjt-zzhexk29ywts0pie1vibhqvabeilcwfscj-c5jeyffzf3q0fb177z02.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\100.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\kdj73+taccmfbzqsbvnsyw==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\101.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\sysdtkvnyp3mikkbrvwiwa==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\102.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\reoy-li-faxz3it3kgoiua==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\103.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\sbsn9olvbtb67oy25tx5ka==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\104.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\fmpgykjj1nhy1ibqllnn1a==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\11.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\gcnviwaodsodnnbo9prbuw==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\12.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\tj8tb1kmrt51apyoveukka==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\13.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\uuoblj5jv38yh03wnjsakq==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\86.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\qyaecr7k9edwr8fk8id33q==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\73.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\mya3uqvbqfsidwcadta2yq==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\87.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\ue-hu58o0ryptccgmfou4w==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\88.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\qgn-bhb5btw957tumsk3tw==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\89.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\df9fvot1r4q4m1akbfdhdw==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_34.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\m0ct55kp3krtxj6r1btwqjlmt7axexeksk20eiqbx58=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\na_vstreche.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\2e0zgrs2hfgvpi4ld-6ams3sqaag35r2ijjmscsuyfu=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\pivo.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\ii-sqsqhw1jhvasy84sbgg==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\pu_kofe.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\k0w8pg+ltpmcma6olci9x6uu8obspiezfvxwsmody1s=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\rabotau.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\0dzcs1iodlnxk0u18bvgz0gtiey+idjwt2qiz8akxri=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\rocket.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\d0i6y26dne8xascgfuuhcqc2+umztu0cvweo8qvcryi=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\seekfriends.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\ffibnexfuow7sjaleh6gs-k9qrtgikrfcdmzft34b2g=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\splu.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\zx4kqnzl8lkdx+vzmmod+w==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\star.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\qv1mo5srhc6mbxveywjlca==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_29.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\lbieihbowwce12qac6on2h8eiymqitimi6qmv+vg+4e=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_30.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\jtlx4nozgqn5gdexlvugi3yrvmsuacv-h03zbrnkapo=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_32.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\uebmegzc7wkmig0uflb7+0ernl3uro5chcghdi4eale=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_33.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\y0xpec-46rbqirm67d4v8nxvwkr5fusnmab-8pymjwo=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_35.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\xzbclow-vdy3u4fodpmafqcnx9hkz4kreqdzbkp3sdo=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\music.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\bdp9in2rosgviz-p1o2xhwvstazzl+v--lqv+vnvtks=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_36.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\8cx2u3im+zdnto0vsnkwwysxnmv4cmufb3weh2whmna=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_37.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\qvnmyucvj+b8o3atbwl7-pg1rmaichhygx5o+wx+ojy=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_38.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\i7uzavtvj43pqjyzlro62cf0z7dn4+xtvkhnq5i9ps8=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_40.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\5-qqgs9l5oa-mfe849htuenpyh+qhd4whkfz11rznmu=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_41.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\qqzwinpntilgf42duzzk0vu8acgzs4lkgu-5i1gmwj0=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_42.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\nsz8sqj6odd8imp+pb-z+ilm4hkvrugdggaghlckmw4=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_43.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\eci4nr8uikitufp4uuu0tjkckdf2bfviaedwkinzqeq=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_44.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\e71e36mtls1crofxtoxli4qu51fxwzgnmfxc8s6gdza=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_45.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\1jujdivv-q4pbwkxbyzuvre-+himmxhemlwrb4rfdcy=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_49.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\fsuycb1tpnldrthn1hxjxeb4do3znvanviuze0qeofc=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_50.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\oclicwfwxqio03kod4fbbwmwdnwaxsc9tvf0xz51vwa=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_away.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\qjt6bpn5ekz2dikb371oxuc2zvrs4bpsg2egf7z9w5a=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\offline_gtalk.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\jc0xsxf2affjtlyy6fa3hs1+hblxbuvtja6bcw+bvijqn6-x3jpse8k5jthn3m7t.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\kuru.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\b2+axoab59ai7sj1eillsg==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\kut.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\flrrlg3s9bbcrgmktzi3nq==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\ia_utko.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\6-oik7ivgtpuqpug-ubdkbr00byeh2czxutwfgstrwe=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\na_rabote.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\7aewgwy9zf6gl4sfgseu73mpvx0wyjrkw-9i5orumws=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\90.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\z1gj5y1rpoaqgtgckndmfa==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\91.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\7ecc1mciuahmd-lclrq6yq==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\92.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\zsdjpeogll4w2hx-oofnkw==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\93.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\bnmlh1k97zmfcqyrodz5ww==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\94.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\12hy6jbwccolz4gyhpeqhq==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\95.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\cm4o9egrqd6rttxamvswjw==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\96.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\gxffejluhhp7lgpn+ummtw==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\97.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\swqjzo-t60-fz6lxfmacfq==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\98.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\xpyn0kq2uvf2l0h8zywnuq==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\99.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\fxscdocjwmk2ahl2ydkt4q==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\belka.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\icj1hmm1l-lfp1lwr66nndttf-ixgm3wk-+nlv04j3u=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\boleu.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\agjixoifu1ximtvppevgsealjuqjrujvxneb7ppju3e=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\chat.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\m7xuclkqqcrao9q4kuqp4q==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\cherep.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\6rptdbm24wask0e8y0yozcsfdaxd15pufla5fvokz6w=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\dnd.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\bev7v-tum9drr1j9utokog==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\doma.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\c1az0gxg8hcjp5ckk2om-w==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\em.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\regn-o2vjy0wqjmsdhhbia==.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\gde_ia.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\x5ytihhqt8m+flssysvx7bg9lygop7mis2waagwylvw=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\gizn_gavno.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\lat-qs3hbnzlw3yyy4z2naovurvkn-02sqyn9tieolg=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\gotovlu.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\3wlrzaj47n9tslmr8jkeqddrf-8t8mvycymrv7rtf2s=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\gulau.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\6ixha8ya0ymwh0w8ur3bbtisaepevkfr2h-lno5zd1m=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\gulau_title.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\etdebujhcm0owkiooakzhi7lw4vxr4jzkvpsmwnh0l0=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\ia_inoplanet_razum.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\fkdx03sfjdzxhamzr7f7smb32lx-v-5qwh6jejsvuyw7ucgxlkopi6of7aqm+nuc.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\ia_krivetko.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\6ze5wo-icdr2aay-fd9zseaf-fqmo9agonefy-ng1wo=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\ia_poteralsa.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\rvw+lkomqcsgizbltbpgkzg-zf9-jpzxfmthtmspnas=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\ia_soshl_asuma.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\8xitkhcapfepbfvge0gdgmyipxcyle9ybxpsvnl2rfw43hcnczu+nilxez95egu2.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\igrau.bmp to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\gegdpkrnr4zou-rpu4qgyvzlpmqkdtyvc70+jfp0pzc=.b34c419eebc7dd8b9de9.crypted000007
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\41b.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\xc3cjrm4od6vmx7y+ujqsw==.b34c419eebc7dd8b9de9.crypted000007

Substitutes the following files

%TEMP%\6893a5~1\state.tmp
%TEMP%\6893a5~1\state

Network activity

Connects to

'localhost':49175
'19#.#3.244.244':443
'76.##.17.194':9090
'20#.#3.223.34':80
'12#.31.0.39':9101
'51.##.143.172':9001
'14#.#35.4.38':9001
'11#.#02.102.243':443
'localhost':23882

TCP

Other

'19#.#3.244.244':443
'12#.31.0.39':9101
'11#.#02.102.243':443
'14#.#35.4.38':9001
'51.##.143.172':9001
'localhost':23882
'localhost':49184
'localhost':49185
'localhost':49186
'localhost':49187

Miscellaneous

Creates and executes the following

'<SYSTEM32>\vssadmin.exe' List Shadows' (with hidden window)

Executes the following

'<SYSTEM32>\vssadmin.exe' List Shadows

Technologies

Terminology

Training and education

Myths

Technical Information

Curing recommendations

Free trial