Library
My library

+ Add to library

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

Your tickets

Profile

Trojan.Encoder.35317

Added to the Dr.Web virus database: 2022-05-11

Virus description added:

Technical Information

To ensure autorun and distribution
Creates or modifies the following files
  • %APPDATA%\microsoft\excel\xlstart\r3adm3.txt
  • %APPDATA%\microsoft\word\startup\r3adm3.txt
Malicious functions
Reads files which store third party applications passwords
  • %HOMEPATH%\desktop\000814251_video_01.avi
  • %LOCALAPPDATA%\google\chrome\user data\default\cookies
  • %APPDATA%\opera software\opera stable\login data
  • %APPDATA%\mozilla\firefox\profiles.ini
  • %APPDATA%\thunderbird\profiles.ini
  • %HOMEPATH%\desktop\weeklysheet1215.doc
  • %HOMEPATH%\desktop\trivial-merge.htm
  • %HOMEPATH%\desktop\sdksampleunprivdeveloper.cer
  • %HOMEPATH%\desktop\ovp25012015.doc
  • %HOMEPATH%\desktop\issi2013_template_for_posters.docx
  • %HOMEPATH%\desktop\lisp_success.doc
  • %HOMEPATH%\desktop\iisstart.htm
  • %HOMEPATH%\desktop\glidescope_review_rev_010.docx
  • %HOMEPATH%\desktop\hadac_newsletter_july_2010_final.docx
  • %HOMEPATH%\desktop\february_catalogue__2015.doc
  • %HOMEPATH%\desktop\garden.htm
  • %HOMEPATH%\desktop\dialmap.bmp
  • %HOMEPATH%\desktop\delete.avi
  • %HOMEPATH%\desktop\dashborder_120.bmp
  • %HOMEPATH%\desktop\cveuropeo.doc
  • %HOMEPATH%\desktop\coffee.bmp
  • %HOMEPATH%\desktop\contoso_1.cer
  • %HOMEPATH%\desktop\contosoroot_1.cer
  • %HOMEPATH%\desktop\applicantform_en.doc
  • %HOMEPATH%\desktop\aoc_saq_d_v3_merchant.docx
  • %HOMEPATH%\desktop\advice_process.htm
  • %LOCALAPPDATA%\google\chrome\user data\default\login data
  • %LOCALAPPDATA%\google\chrome\user data\default\web data
Modifies file system
Creates the following files
  • C:\r3adm3.txt
  • %APPDATA%\icqm\icq\smiles\statuses\icq\r3adm3.txt
  • %APPDATA%\icqm\icq\smiles\statuses\jabber\r3adm3.txt
  • %APPDATA%\icqm\icq\smiles\statuses\set01\r3adm3.txt
  • %APPDATA%\icqm\icq\smiles\statuses\vk\r3adm3.txt
  • %APPDATA%\macromedia\flash player\#sharedobjects\gr8by44n\kiks.yandex.ru\r3adm3.txt
  • %APPDATA%\macromedia\flash player\#sharedobjects\gr8by44n\yastatic.net\r3adm3.txt
  • %APPDATA%\macromedia\flash player\macromedia.com\support\flashplayer\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\graphics\phone\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\html\bg\r3adm3.txt
  • %APPDATA%\icqm\icq\smiles\smiles\valentine\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\html\cz\r3adm3.txt
  • %APPDATA%\icqm\icq\smiles\statuses\gtalk\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\html\en\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\html\pt\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\html\ru\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\html\tr\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\html\ua\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\html\uz\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\smiles\flash\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\smiles\smiles\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\smiles\statuses\r3adm3.txt
  • %APPDATA%\microsoft\internet explorer\quick launch\user pinned\implicitappshortcuts\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\html\de\r3adm3.txt
  • %APPDATA%\icqm\icq\smiles\smiles\smiles\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\html\kz\r3adm3.txt
  • %APPDATA%\icqm\icq\smiles\statuses\aim\r3adm3.txt
  • %APPDATA%\icqm\icq\smiles\smiles\static_png\r3adm3.txt
  • %APPDATA%\icqm\icq\smiles\smiles\set06\r3adm3.txt
  • %APPDATA%\icqm\icq\html\ru\error\r3adm3.txt
  • %APPDATA%\icqm\icq\html\ru\jabber\r3adm3.txt
  • %APPDATA%\icqm\icq\html\ru\loading\r3adm3.txt
  • %APPDATA%\icqm\icq\html\tr\error\r3adm3.txt
  • %APPDATA%\icqm\icq\html\tr\jabber\r3adm3.txt
  • %APPDATA%\icqm\icq\html\tr\loading\r3adm3.txt
  • %APPDATA%\icqm\icq\html\ua\error\r3adm3.txt
  • %APPDATA%\icqm\icq\html\ua\jabber\r3adm3.txt
  • %APPDATA%\icqm\icq\html\ua\loading\r3adm3.txt
  • %APPDATA%\icqm\icq\html\uz\error\r3adm3.txt
  • %APPDATA%\icqm\icq\html\uz\jabber\r3adm3.txt
  • %APPDATA%\icqm\icq\html\uz\loading\r3adm3.txt
  • %APPDATA%\icqm\icq\smiles\smiles\8march\r3adm3.txt
  • %APPDATA%\icqm\icq\smiles\smiles\animated\r3adm3.txt
  • %APPDATA%\icqm\icq\smiles\smiles\cat\r3adm3.txt
  • %APPDATA%\icqm\icq\smiles\smiles\emoji\r3adm3.txt
  • %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\r3adm3.txt
  • %APPDATA%\icqm\icq\smiles\smiles\koloboks\r3adm3.txt
  • %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\r3adm3.txt
  • %APPDATA%\icqm\icq\smiles\smiles\set03\r3adm3.txt
  • %APPDATA%\icqm\icq\smiles\smiles\set04\r3adm3.txt
  • %APPDATA%\icqm\icq\smiles\smiles\set05\r3adm3.txt
  • %APPDATA%\microsoft\internet explorer\quick launch\user pinned\startmenu\r3adm3.txt
  • %APPDATA%\icqm\icq\html\pt\error\r3adm3.txt
  • %APPDATA%\microsoft\internet explorer\quick launch\user pinned\taskbar\r3adm3.txt
  • %LOCALAPPDATA%\thunderbird\profiles\wjj9aet2.default\cache\a\r3adm3.txt
  • %APPDATA%\microsoft\network\connections\pbk\_hiddenpbk\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\14\r3adm3.txt
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\datareporting\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\16\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\17\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\18\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\19\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\2\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\20\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\21\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\22\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\23\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\24\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\25\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\26\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\27\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\28\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\29\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\3\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\30\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\31\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\32\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\33\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\34\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\35\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\36\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\13\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\12\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\15\r3adm3.txt
  • %APPDATA%\icqm\icq\html\pt\loading\r3adm3.txt
  • %APPDATA%\icqm\icq\html\kz\loading\r3adm3.txt
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\bookmarkbackups\r3adm3.txt
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\gmp\r3adm3.txt
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\gmp-gmpopenh264\r3adm3.txt
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\healthreport\r3adm3.txt
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\minidumps\r3adm3.txt
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\sessionstore-backups\r3adm3.txt
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\storage\r3adm3.txt
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\webapps\r3adm3.txt
  • %APPDATA%\opera software\opera stable\storage\ext\sync-login\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\felcaaldnbdncclmgdcncolpebgiejap\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\storage\ext\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\web applications\_crx_aohghmighlieiainnegkcijnfilokake\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\web applications\_crx_coobgpohoikkiipiblmjeljniedjpjpf\r3adm3.txt
  • %LOCALAPPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\cache2\doomed\r3adm3.txt
  • %LOCALAPPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\cache2\entries\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\0\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\1\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\11\r3adm3.txt
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\crashes\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\10\r3adm3.txt
  • %APPDATA%\icqm\icq\html\pt\jabber\r3adm3.txt
  • %APPDATA%\icqm\icq\html\kz\jabber\r3adm3.txt
  • %APPDATA%\icqm\icq\html\kz\error\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\translation\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\video\r3adm3.txt
  • %APPDATA%\microsoft\crypto\rsa\s-1-5-21-1960123792-2022915161-3775307078-1001\r3adm3.txt
  • %APPDATA%\microsoft\document building blocks\1033\14\r3adm3.txt
  • %APPDATA%\microsoft\internet explorer\quick launch\user pinned\r3adm3.txt
  • %APPDATA%\microsoft\network\connections\pbk\r3adm3.txt
  • %APPDATA%\microsoft\systemcertificates\my\certificates\r3adm3.txt
  • %APPDATA%\microsoft\systemcertificates\my\crls\r3adm3.txt
  • %APPDATA%\microsoft\systemcertificates\my\ctls\r3adm3.txt
  • %APPDATA%\microsoft\systemcertificates\request\certificates\r3adm3.txt
  • %APPDATA%\microsoft\systemcertificates\request\crls\r3adm3.txt
  • %APPDATA%\microsoft\systemcertificates\request\ctls\r3adm3.txt
  • %APPDATA%\mozilla\firefox\crash reports\events\r3adm3.txt
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\r3adm3.txt
  • %APPDATA%\opera software\opera stable\storage\ext\r3adm3.txt
  • %APPDATA%\opera software\opera stable\sync extension settings\knohfebhibeknbfioecpdmdkjkjdnjnl\r3adm3.txt
  • %APPDATA%\thunderbird\profiles\wjj9aet2.default\crashes\r3adm3.txt
  • %APPDATA%\thunderbird\profiles\wjj9aet2.default\minidumps\r3adm3.txt
  • %LOCALAPPDATA%\adobe\acrocef\dc\acrobat\cache\r3adm3.txt
  • %LOCALAPPDATA%\adobe\acrocef\dc\acrobat\cookie\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\cache\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\databases\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\skin\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\graphics\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\37\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\sounds\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\smiles\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\html\r3adm3.txt
  • %APPDATA%\adobe\acrobat\dc\forms\r3adm3.txt
  • %APPDATA%\adobe\acrobat\dc\jscache\r3adm3.txt
  • %APPDATA%\adobe\acrobat\dc\preferences\r3adm3.txt
  • %APPDATA%\adobe\acrobat\dc\security\r3adm3.txt
  • %APPDATA%\adobe\flash player\assetcache\reehzff2\r3adm3.txt
  • %APPDATA%\icqm\icq\graphics\phone\r3adm3.txt
  • %APPDATA%\icqm\icq\html\bg\r3adm3.txt
  • %APPDATA%\icqm\icq\html\cz\r3adm3.txt
  • %APPDATA%\icqm\icq\html\de\r3adm3.txt
  • %APPDATA%\icqm\icq\html\en\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\security\r3adm3.txt
  • %APPDATA%\icqm\icq\html\kz\r3adm3.txt
  • %APPDATA%\icqm\icq\html\ru\r3adm3.txt
  • %APPDATA%\icqm\icq\html\tr\r3adm3.txt
  • %APPDATA%\icqm\icq\html\ua\r3adm3.txt
  • %APPDATA%\icqm\icq\html\uz\r3adm3.txt
  • %APPDATA%\icqm\icq\smiles\flash\r3adm3.txt
  • %APPDATA%\icqm\icq\smiles\smiles\r3adm3.txt
  • %APPDATA%\icqm\icq\smiles\statuses\r3adm3.txt
  • %APPDATA%\macromedia\flash player\#sharedobjects\gr8by44n\r3adm3.txt
  • %APPDATA%\macromedia\flash player\macromedia.com\support\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\database\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\dll\r3adm3.txt
  • %APPDATA%\icqm\icq\html\pt\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\fonts\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extension state\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\jumplisticons\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\local extension settings\r3adm3.txt
  • %LOCALAPPDATA%\thunderbird\profiles\wjj9aet2.default\cache\f\r3adm3.txt
  • %LOCALAPPDATA%\thunderbird\profiles\wjj9aet2.default\cache2\doomed\r3adm3.txt
  • %LOCALAPPDATA%\thunderbird\profiles\wjj9aet2.default\cache2\entries\r3adm3.txt
  • %LOCALAPPDATA%low\adobe\linguistics\userdictionaries\adobe custom dictionary\all\r3adm3.txt
  • %LOCALAPPDATA%low\adobe\linguistics\userdictionaries\adobe custom dictionary\de_ch\r3adm3.txt
  • %LOCALAPPDATA%low\adobe\linguistics\userdictionaries\adobe custom dictionary\de_de\r3adm3.txt
  • %LOCALAPPDATA%low\adobe\linguistics\userdictionaries\adobe custom dictionary\en_ca\r3adm3.txt
  • %LOCALAPPDATA%low\adobe\linguistics\userdictionaries\adobe custom dictionary\en_gb\r3adm3.txt
  • %LOCALAPPDATA%low\adobe\linguistics\userdictionaries\adobe custom dictionary\en_us\r3adm3.txt
  • %LOCALAPPDATA%low\adobe\linguistics\userdictionaries\adobe custom dictionary\nl_nl\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\r3adm3.txt
  • %APPDATA%\adobe\acrobat\dc\security\crlcache\r3adm3.txt
  • %APPDATA%\icqm\icq\html\bg\error\r3adm3.txt
  • %APPDATA%\icqm\icq\html\bg\jabber\r3adm3.txt
  • %APPDATA%\icqm\icq\html\bg\loading\r3adm3.txt
  • %APPDATA%\icqm\icq\html\cz\error\r3adm3.txt
  • %APPDATA%\icqm\icq\html\cz\jabber\r3adm3.txt
  • %APPDATA%\icqm\icq\html\cz\loading\r3adm3.txt
  • %APPDATA%\icqm\icq\html\de\error\r3adm3.txt
  • %APPDATA%\icqm\icq\html\de\jabber\r3adm3.txt
  • %APPDATA%\icqm\icq\html\de\loading\r3adm3.txt
  • %APPDATA%\icqm\icq\html\en\error\r3adm3.txt
  • %APPDATA%\icqm\icq\html\en\jabber\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\gcm store\r3adm3.txt
  • %APPDATA%\icqm\icq\html\en\loading\r3adm3.txt
  • %LOCALAPPDATA%\thunderbird\profiles\wjj9aet2.default\cache\e\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\jumplisticonsold\r3adm3.txt
  • %LOCALAPPDATA%\thunderbird\profiles\wjj9aet2.default\cache\d\r3adm3.txt
  • %LOCALAPPDATA%\thunderbird\profiles\wjj9aet2.default\cache\b\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\local storage\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\media cache\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\session storage\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\storage\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\web applications\r3adm3.txt
  • %LOCALAPPDATA%\microsoft\internet explorer\recovery\high\active\r3adm3.txt
  • %LOCALAPPDATA%\microsoft\internet explorer\recovery\high\last active\r3adm3.txt
  • %LOCALAPPDATA%\microsoft\media player\sync playlists\en-us\0005fdc0\r3adm3.txt
  • %LOCALAPPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\cache2\r3adm3.txt
  • %LOCALAPPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\offlinecache\r3adm3.txt
  • %LOCALAPPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\safebrowsing\r3adm3.txt
  • %LOCALAPPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\startupcache\r3adm3.txt
  • %LOCALAPPDATA%\mozilla\updates\e7cf176e110c211b\updates\0\r3adm3.txt
  • %LOCALAPPDATA%\thunderbird\profiles\wjj9aet2.default\cache\0\r3adm3.txt
  • %LOCALAPPDATA%\thunderbird\profiles\wjj9aet2.default\cache\1\r3adm3.txt
  • %LOCALAPPDATA%\thunderbird\profiles\wjj9aet2.default\cache\2\r3adm3.txt
  • %LOCALAPPDATA%\thunderbird\profiles\wjj9aet2.default\cache\3\r3adm3.txt
  • %LOCALAPPDATA%\thunderbird\profiles\wjj9aet2.default\cache\4\r3adm3.txt
  • %LOCALAPPDATA%\thunderbird\profiles\wjj9aet2.default\cache\5\r3adm3.txt
  • %LOCALAPPDATA%\thunderbird\profiles\wjj9aet2.default\cache\6\r3adm3.txt
  • %LOCALAPPDATA%\thunderbird\profiles\wjj9aet2.default\cache\7\r3adm3.txt
  • %LOCALAPPDATA%\thunderbird\profiles\wjj9aet2.default\cache\8\r3adm3.txt
  • %LOCALAPPDATA%\thunderbird\profiles\wjj9aet2.default\cache\9\r3adm3.txt
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\prefs.js
  • %APPDATA%\mail.ru\agent\mra\skin_cache\r3adm3.txt
  • %LOCALAPPDATA%\thunderbird\profiles\wjj9aet2.default\cache\c\r3adm3.txt
  • %APPDATA%\adobe\acrobat\dc\collab\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\38\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\41\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\lt\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\lv\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\ms\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\nl\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\no\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\pl\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\pt_br\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\pt_pt\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\ro\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\ru\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\ja\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\ko\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\sk\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\sv\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\th\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\tr\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\uk\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\vi\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\zh_cn\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\zh_tw\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\ar\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\bg\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\ca\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\sl\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\sr\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\it\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\hu\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\da\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_metadata\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_metadata\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\storage\ext\chrome-signin\def\r3adm3.txt
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\storage\permanent\moz-safe-about+home\idb\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\ar\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\bg\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\ca\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\cs\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\da\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\de\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\el\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\en_gb\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\en_us\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\es\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\es_419\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\et\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\fi\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\fil\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\fr\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\he\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\hi\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\cs\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\html\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\id\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\felcaaldnbdncclmgdcncolpebgiejap\1.1_0\_locales\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\de\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\th\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\tr\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\uk\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\vi\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\zh_cn\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\zh_tw\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\ar\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\bg\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\ca\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\cs\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\da\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\de\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\el\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\en_gb\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\en_us\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\es\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\es_419\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\et\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\eu\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\fi\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\fil\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\fr\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\he\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\hi\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\hr\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\sv\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\css\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\images\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\sk\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\en_gb\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\en_us\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\es\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\es_419\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\et\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\fi\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\fil\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\fr\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\he\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\hi\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\hu\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\id\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\it\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\ja\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\ko\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\lt\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\lv\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\ms\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\nl\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\no\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\pl\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\pt_br\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\pt_pt\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\ro\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\ru\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\sl\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\el\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\felcaaldnbdncclmgdcncolpebgiejap\1.1_0\_metadata\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.30_0\_metadata\r3adm3.txt
  • %APPDATA%\icqm\icq\r3adm3.txt
  • %APPDATA%\macromedia\flash player\macromedia.com\support\flashplayer\sys\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\html\bg\error\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\html\bg\jabber\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\html\bg\loading\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\html\cz\error\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\html\cz\jabber\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\html\cz\loading\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\html\de\error\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\html\de\jabber\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\html\de\loading\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\html\en\error\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\html\en\jabber\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\html\en\loading\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\html\kz\error\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\html\kz\jabber\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\html\kz\loading\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\html\pt\error\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\html\pt\jabber\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\html\pt\loading\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\html\ru\error\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\html\ru\jabber\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\html\ru\loading\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\html\tr\error\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\9\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\8\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\muffin\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\host\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\html\tr\jabber\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\39\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\42\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\43\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\44\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\45\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\46\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\47\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\48\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\49\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\5\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\50\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\51\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\52\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\53\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\54\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\55\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\56\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\57\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\58\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\59\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\6\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\60\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\61\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\62\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\7\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\40\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\63\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\4\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\html\tr\loading\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\html\uz\error\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.7_0\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.30_0\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\felcaaldnbdncclmgdcncolpebgiejap\1.1_0\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\storage\ext\chrome-signin\r3adm3.txt
  • %APPDATA%\macromedia\flash player\macromedia.com\support\flashplayer\sys\#kiks.yandex.ru\r3adm3.txt
  • %APPDATA%\macromedia\flash player\macromedia.com\support\flashplayer\sys\#yastatic.net\r3adm3.txt
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\storage\permanent\moz-safe-about+home\r3adm3.txt
  • %APPDATA%\opera software\opera stable\storage\ext\sync-login\def\databases\r3adm3.txt
  • %APPDATA%\opera software\opera stable\storage\ext\sync-login\def\gpucache\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_metadata\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_metadata\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_metadata\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.7_0\_locales\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.7_0\_metadata\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.30_0\_locales\r3adm3.txt
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\gmp-gmpopenh264\1.5.3\r3adm3.txt
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\gmp-gmpopenh264\1.3\r3adm3.txt
  • %APPDATA%\opera software\opera stable\storage\ext\sync-login\def\r3adm3.txt
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\storage\permanent\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\html\ua\error\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\html\ua\jabber\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\html\uz\jabber\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\html\uz\loading\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\smiles\smiles\8march\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\smiles\smiles\cat\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\smiles\smiles\emoji\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\smiles\smiles\icq6.0-emoticons\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\smiles\statuses\aim\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\smiles\statuses\gtalk\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\smiles\statuses\icq\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\web applications\_crx_aohghmighlieiainnegkcijnfilokake\документы google.ico
  • %LOCALAPPDATA%\google\chrome\user data\default\web applications\_crx_aohghmighlieiainnegkcijnfilokake\документы google.ico.md5
  • %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\r3adm3.txt
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\crashes\events\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\html\ua\loading\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\smiles\statuses\vk\r3adm3.txt
  • %LOCALAPPDATA%low\adobe\linguistics\userdictionaries\adobe custom dictionary\r3adm3.txt
  • %LOCALAPPDATA%low\adobe\acrobat\dc\search\r3adm3.txt
  • %LOCALAPPDATA%low\adobe\acrobat\dc\assets\r3adm3.txt
  • %HOMEPATH%\voip\r3adm3.txt
  • C:\far2\addons\colors\custom_highlighting\r3adm3.txt
  • C:\far2\addons\colors\default_highlighting\r3adm3.txt
  • C:\far2\addons\xlat\russian\r3adm3.txt
  • C:\far2\plugins\ftp\lib\r3adm3.txt
  • C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.en\r3adm3.txt
  • C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.es\r3adm3.txt
  • C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.fr\r3adm3.txt
  • C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\1033\r3adm3.txt
  • %HOMEPATH%\saved games\r3adm3.txt
  • C:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\r3adm3.txt
  • %HOMEPATH%\videos\r3adm3.txt
  • %ALLUSERSPROFILE%\adobe\arm\reader_15.008.20082\r3adm3.txt
  • %ALLUSERSPROFILE%\adobe\arm\{291aa914-a987-4ce9-bd63-ac0a92d435e5}\r3adm3.txt
  • %ALLUSERSPROFILE%\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\assistance\client\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\crypto\dss\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\crypto\keys\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\crypto\rsa\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\dbgclr\7.1\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\device stage\device\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\device stage\task\r3adm3.txt
  • %ALLUSERSPROFILE%\adobe\arm\reader_15.007.20033\r3adm3.txt
  • %HOMEPATH%\pictures\r3adm3.txt
  • %ALLUSERSPROFILE%\adobe\arm\s\r3adm3.txt
  • %HOMEPATH%\music\r3adm3.txt
  • C:\users\default\appdata\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\event viewer\views\r3adm3.txt
  • C:\users\default\downloads\r3adm3.txt
  • C:\users\default\favorites\r3adm3.txt
  • C:\users\default\links\r3adm3.txt
  • C:\users\default\music\r3adm3.txt
  • C:\users\default\pictures\r3adm3.txt
  • C:\users\default\saved games\r3adm3.txt
  • C:\users\default\videos\r3adm3.txt
  • C:\users\public\desktop\r3adm3.txt
  • C:\users\public\documents\r3adm3.txt
  • C:\users\public\downloads\r3adm3.txt
  • C:\users\public\favorites\r3adm3.txt
  • C:\users\public\libraries\r3adm3.txt
  • C:\users\public\music\r3adm3.txt
  • C:\users\public\pictures\r3adm3.txt
  • C:\users\public\recorded tv\r3adm3.txt
  • C:\users\public\videos\r3adm3.txt
  • %HOMEPATH%\appdata\r3adm3.txt
  • %HOMEPATH%\contacts\r3adm3.txt
  • %HOMEPATH%\desktop\r3adm3.txt
  • %HOMEPATH%\documents\r3adm3.txt
  • %HOMEPATH%\downloads\r3adm3.txt
  • %HOMEPATH%\favorites\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\drm\server\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\ehome\logs\r3adm3.txt
  • C:\users\default\desktop\r3adm3.txt
  • %HOMEPATH%\links\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\office\uicaptions\1036\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\msdn\7.0\r3adm3.txt
  • %HOMEPATH%\favorites\microsoft websites\r3adm3.txt
  • %HOMEPATH%\favorites\msn websites\r3adm3.txt
  • %ALLUSERSPROFILE%\adobe\arm\s\10428\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\assistance\client\1.0\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\crypto\dss\machinekeys\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\crypto\rsa\machinekeys\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\crypto\rsa\s-1-5-18\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\dbgclr\7.1\1033\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\device stage\device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\device stage\device\{8702d817-5aad-4674-9ef3-4d3decd87120}\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\device stage\task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\device stage\task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\event viewer\views\applicationviewsrootnode\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\msdn\7.0\1028\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\msdn\7.0\1031\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\msdn\7.0\1033\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\msdn\7.0\1036\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\msdn\7.0\1040\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\msdn\7.0\1041\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\msdn\7.0\1042\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\msdn\7.0\1046\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\msdn\7.0\1049\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\msdn\7.0\1050\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\msdn\7.0\2052\r3adm3.txt
  • %HOMEPATH%\favorites\links\r3adm3.txt
  • %ALLUSERSPROFILE%\sun\java\r3adm3.txt
  • %APPDATA%\r3adm3.txt
  • C:\users\default\documents\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\msdn\8.0\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\netframework\breadcrumbstore\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\network\connections\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\network\downloader\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\office\uicaptions\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\officesoftwareprotectionplatform\cache\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\rac\outbound\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\rac\publisheddata\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\rac\statedata\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\search\data\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\user account pictures\default pictures\r3adm3.txt
  • %ALLUSERSPROFILE%\oracle\java\installcache_x64\r3adm3.txt
  • %ALLUSERSPROFILE%\oracle\java\javapath\r3adm3.txt
  • %ALLUSERSPROFILE%\package cache\42d5bec7ddfbd49e76467529cbc2868987bf8460\packages\r3adm3.txt
  • %ALLUSERSPROFILE%\package cache\{0d3e9e15-de7a-300b-96f1-b4af12b96488}v14.0.23026\packages\r3adm3.txt
  • %ALLUSERSPROFILE%\package cache\{a2563e55-3bec-3828-8d67-e5e8b9e8b675}v14.0.23026\packages\r3adm3.txt
  • %ALLUSERSPROFILE%\package cache\{bc958bd2-5dac-3862-bb1a-c1be0790438d}v14.0.23026\packages\r3adm3.txt
  • %ALLUSERSPROFILE%\package cache\{be960c1c-7bad-3de6-8b1a-2616fe532845}v14.0.23026\packages\r3adm3.txt
  • %ALLUSERSPROFILE%\sun\java\java update\r3adm3.txt
  • C:\users\default\appdata\local\r3adm3.txt
  • C:\users\default\appdata\roaming\r3adm3.txt
  • C:\users\public\music\sample music\r3adm3.txt
  • C:\users\public\pictures\sample pictures\r3adm3.txt
  • C:\users\public\recorded tv\sample media\r3adm3.txt
  • C:\users\public\videos\sample videos\r3adm3.txt
  • %LOCALAPPDATA%low\r3adm3.txt
  • %ALLUSERSPROFILE%\package cache\{f65db027-aff3-4070-886a-0d87064aabb1}\r3adm3.txt
  • %HOMEPATH%\favorites\links for united states\r3adm3.txt
  • %ALLUSERSPROFILE%\package cache\{f0080ca2-80ae-4958-b6eb-e8fa916d744a}\r3adm3.txt
  • %ALLUSERSPROFILE%\package cache\{e46eca4f-393b-40df-9f49-076faf788d83}\r3adm3.txt
  • C:\far2\addons\colors\r3adm3.txt
  • C:\far2\addons\shell\r3adm3.txt
  • C:\far2\addons\xlat\r3adm3.txt
  • C:\far2\documentation\eng\r3adm3.txt
  • C:\far2\documentation\rus\r3adm3.txt
  • C:\far2\encyclopedia\tap\r3adm3.txt
  • C:\far2\plugins\align\r3adm3.txt
  • C:\far2\plugins\arclite\r3adm3.txt
  • C:\far2\plugins\autowrap\r3adm3.txt
  • C:\far2\plugins\brackets\r3adm3.txt
  • C:\far2\plugins\compare\r3adm3.txt
  • C:\far2\plugins\drawline\r3adm3.txt
  • C:\far2\plugins\editcase\r3adm3.txt
  • C:\far2\plugins\emenu\r3adm3.txt
  • C:\far2\plugins\farcmds\r3adm3.txt
  • C:\far2\plugins\filecase\r3adm3.txt
  • C:\far2\plugins\ftp\r3adm3.txt
  • C:\far2\plugins\hlfviewer\r3adm3.txt
  • C:\far2\plugins\macroview\r3adm3.txt
  • C:\far2\plugins\network\r3adm3.txt
  • C:\far2\plugins\proclist\r3adm3.txt
  • C:\far2\pluginsdk\headers.c\r3adm3.txt
  • C:\far2\pluginsdk\headers.pas\r3adm3.txt
  • %HOMEPATH%\r3adm3.txt
  • C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\msdn\7.0\3082\r3adm3.txt
  • C:\far2\addons\setup\r3adm3.txt
  • C:\msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\r3adm3.txt
  • C:\users\public\r3adm3.txt
  • <Current directory>\r3adm3.txt
  • C:\msocache\r3adm3.txt
  • C:\perflogs\r3adm3.txt
  • %ALLUSERSPROFILE%\r3adm3.txt
  • C:\recovery\r3adm3.txt
  • C:\totalcmd\r3adm3.txt
  • C:\users\r3adm3.txt
  • C:\far2\addons\r3adm3.txt
  • C:\far2\documentation\r3adm3.txt
  • C:\far2\encyclopedia\r3adm3.txt
  • C:\far2\fexcept\r3adm3.txt
  • C:\far2\plugins\r3adm3.txt
  • C:\far2\r3adm3.txt
  • C:\far2\pluginsdk\r3adm3.txt
  • C:\perflogs\admin\r3adm3.txt
  • %ALLUSERSPROFILE%\adobe\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft help\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft toolkit\r3adm3.txt
  • %ALLUSERSPROFILE%\mozilla\r3adm3.txt
  • %ALLUSERSPROFILE%\oracle\r3adm3.txt
  • %ALLUSERSPROFILE%\package cache\r3adm3.txt
  • %ALLUSERSPROFILE%\sun\r3adm3.txt
  • C:\recovery\1195d5a8-f371-11e4-9c00-dd3082671db2\r3adm3.txt
  • C:\users\default\r3adm3.txt
  • C:\msocache\all users\r3adm3.txt
  • C:\totalcmd\language\r3adm3.txt
  • %LOCALAPPDATA%\r3adm3.txt
  • C:\msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\r3adm3.txt
  • C:\msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\vault\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\wpd\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\wwansvc\r3adm3.txt
  • %ALLUSERSPROFILE%\mozilla\logs\r3adm3.txt
  • %ALLUSERSPROFILE%\oracle\java\r3adm3.txt
  • %ALLUSERSPROFILE%\package cache\42d5bec7ddfbd49e76467529cbc2868987bf8460\r3adm3.txt
  • %ALLUSERSPROFILE%\package cache\{01db25f3-1b76-4d97-88c8-1c90634d88fb}\r3adm3.txt
  • %ALLUSERSPROFILE%\package cache\{0d3e9e15-de7a-300b-96f1-b4af12b96488}v14.0.23026\r3adm3.txt
  • %ALLUSERSPROFILE%\package cache\{0f12c81f-93ef-46ec-bc94-d952c1a775d4}\r3adm3.txt
  • %ALLUSERSPROFILE%\package cache\{2af972c7-13b0-4978-92a8-fee26a4fb4e9}\r3adm3.txt
  • %ALLUSERSPROFILE%\package cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\r3adm3.txt
  • %ALLUSERSPROFILE%\package cache\{35459b22-19a6-44ec-8d34-27eb3131acac}\r3adm3.txt
  • %ALLUSERSPROFILE%\package cache\{51adbf11-493f-431c-a862-967a0fae2944}\r3adm3.txt
  • %ALLUSERSPROFILE%\package cache\{615bc16d-60f5-482e-91b3-b51d8130963b}\r3adm3.txt
  • %ALLUSERSPROFILE%\package cache\{6c95b50e-cb5a-4a1f-a7b4-8a6004f8dd6a}\r3adm3.txt
  • %ALLUSERSPROFILE%\package cache\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\r3adm3.txt
  • %ALLUSERSPROFILE%\package cache\{a2199617-3609-410f-a8e8-e8806c73545b}\r3adm3.txt
  • %ALLUSERSPROFILE%\package cache\{a2563e55-3bec-3828-8d67-e5e8b9e8b675}v14.0.23026\r3adm3.txt
  • %ALLUSERSPROFILE%\package cache\{b55f7208-e02b-4828-ac78-59c73ddf5bc7}\r3adm3.txt
  • %ALLUSERSPROFILE%\package cache\{bc958bd2-5dac-3862-bb1a-c1be0790438d}v14.0.23026\r3adm3.txt
  • %ALLUSERSPROFILE%\package cache\{be960c1c-7bad-3de6-8b1a-2616fe532845}v14.0.23026\r3adm3.txt
  • %ALLUSERSPROFILE%\package cache\{ce085a78-074e-4823-8dc1-8a721b94b76d}\r3adm3.txt
  • %ALLUSERSPROFILE%\package cache\{dde2682b-961a-41ea-8d44-6005991b7947}\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\rac\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\officesoftwareprotectionplatform\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\user account pictures\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\search\r3adm3.txt
  • C:\msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\r3adm3.txt
  • C:\far2\addons\macros\r3adm3.txt
  • C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\r3adm3.txt
  • C:\msocache\all users\{90140000-0043-0409-1000-0000000ff1ce}-c\r3adm3.txt
  • C:\msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\r3adm3.txt
  • C:\msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\r3adm3.txt
  • C:\msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\r3adm3.txt
  • C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\r3adm3.txt
  • C:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\r3adm3.txt
  • %ALLUSERSPROFILE%\adobe\arm\r3adm3.txt
  • %ALLUSERSPROFILE%\adobe\setup\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\assistance\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\crypto\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\dbgclr\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\device stage\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\devicesync\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\drm\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\ehome\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\event viewer\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\identitycrl\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\ilscache\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\media player\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\mf\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\msdn\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\netframework\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\office\r3adm3.txt
  • C:\msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\network\r3adm3.txt
  • %HOMEPATH%\searches\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\office\uicaptions\3082\r3adm3.txt
  • %LOCALAPPDATA%\mozilla\updates\e7cf176e110c211b\r3adm3.txt
  • %LOCALAPPDATA%\thunderbird\profiles\wjj9aet2.default\r3adm3.txt
  • %LOCALAPPDATA%\thunderbird\updates\8216c80c92c4e828\r3adm3.txt
  • %LOCALAPPDATA%low\adobe\acrobat\dc\r3adm3.txt
  • %LOCALAPPDATA%low\adobe\linguistics\userdictionaries\r3adm3.txt
  • %LOCALAPPDATA%low\microsoft\internet explorer\services\r3adm3.txt
  • %LOCALAPPDATA%low\oracle\java\au\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\deployment\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\jre1.8.0_45_x64\r3adm3.txt
  • %APPDATA%\adobe\acrobat\dc\r3adm3.txt
  • %APPDATA%\adobe\flash player\assetcache\r3adm3.txt
  • %APPDATA%\adobe\flash player\nativecache\r3adm3.txt
  • %APPDATA%\adobe\logtransport2\logs\r3adm3.txt
  • %APPDATA%\icq-profile\update\splash_banner\r3adm3.txt
  • %APPDATA%\icqm\icq\database\r3adm3.txt
  • %APPDATA%\icqm\icq\dll\r3adm3.txt
  • %APPDATA%\icqm\icq\fonts\r3adm3.txt
  • %APPDATA%\icqm\icq\graphics\r3adm3.txt
  • %APPDATA%\icqm\icq\html\r3adm3.txt
  • %APPDATA%\icqm\icq\skin\r3adm3.txt
  • %APPDATA%\icqm\icq\skin_cache\r3adm3.txt
  • %APPDATA%\icqm\icq\smiles\r3adm3.txt
  • %APPDATA%\icqm\icq\sounds\r3adm3.txt
  • %APPDATA%\icqm\icq\translation\r3adm3.txt
  • %LOCALAPPDATA%\mozilla\firefox\profiles\r3adm3.txt
  • %LOCALAPPDATA%\microsoft\office\onetconfig\r3adm3.txt
  • %LOCALAPPDATA%\opera software\opera stable\cache\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\search\data\applications\r3adm3.txt
  • %APPDATA%\icqm\icq\video\r3adm3.txt
  • %APPDATA%\telegram desktop\tdata\r3adm3.txt
  • %APPDATA%\winamp\plugins\r3adm3.txt
  • C:\users\default\appdata\roaming\microsoft\internet explorer\quick launch\r3adm3.txt
  • %LOCALAPPDATA%\adobe\acrobat\dc\r3adm3.txt
  • %LOCALAPPDATA%\adobe\acrocef\dc\r3adm3.txt
  • %LOCALAPPDATA%\adobe\color\profiles\r3adm3.txt
  • %LOCALAPPDATA%\cef\user data\dictionaries\r3adm3.txt
  • %LOCALAPPDATA%\cef\user data\widevinecdm\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\r3adm3.txt
  • %LOCALAPPDATA%\microsoft\dbgclr\7.1\r3adm3.txt
  • %LOCALAPPDATA%\microsoft\device metadata\dmrccache\r3adm3.txt
  • %LOCALAPPDATA%\microsoft\feeds\feeds for united states~\r3adm3.txt
  • %LOCALAPPDATA%\microsoft\feeds\microsoft feeds~\r3adm3.txt
  • %LOCALAPPDATA%\microsoft\feeds\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\r3adm3.txt
  • %LOCALAPPDATA%\microsoft\feeds cache\3v2zgiw9\r3adm3.txt
  • %LOCALAPPDATA%\microsoft\feeds cache\dp0qcmsh\r3adm3.txt
  • %LOCALAPPDATA%\microsoft\feeds cache\e6k79x6b\r3adm3.txt
  • %LOCALAPPDATA%\microsoft\feeds cache\evw7z7yu\r3adm3.txt
  • %LOCALAPPDATA%\microsoft\internet explorer\domstore\r3adm3.txt
  • %LOCALAPPDATA%\microsoft\internet explorer\recovery\r3adm3.txt
  • %LOCALAPPDATA%\microsoft\media player\art cache\r3adm3.txt
  • %LOCALAPPDATA%\microsoft\media player\sync playlists\r3adm3.txt
  • %LOCALAPPDATA%\microsoft\media player\transcoded files cache\r3adm3.txt
  • %LOCALAPPDATA%\microsoft\msdn\7.0\r3adm3.txt
  • %LOCALAPPDATA%\microsoft\office\groove\r3adm3.txt
  • %APPDATA%\thunderbird\crash reports\r3adm3.txt
  • %LOCALAPPDATA%\microsoft\office\14.0\r3adm3.txt
  • %APPDATA%\thunderbird\profiles\r3adm3.txt
  • %APPDATA%\macromedia\flash player\#sharedobjects\r3adm3.txt
  • %APPDATA%\microsoft\crypto\rsa\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\caps\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\evwhitelist\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\pepperflash\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\pnacl\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\swiftshader\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\widevinecdm\r3adm3.txt
  • %LOCALAPPDATA%\microsoft\device metadata\dmrccache\downloads\r3adm3.txt
  • %LOCALAPPDATA%\microsoft\feeds\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\webslices~\r3adm3.txt
  • %LOCALAPPDATA%\microsoft\internet explorer\domstore\1ilya49m\r3adm3.txt
  • %LOCALAPPDATA%\microsoft\internet explorer\domstore\g32ifqhj\r3adm3.txt
  • %LOCALAPPDATA%\microsoft\internet explorer\domstore\p4p79gg0\r3adm3.txt
  • %LOCALAPPDATA%\microsoft\internet explorer\domstore\w37zlxnl\r3adm3.txt
  • %LOCALAPPDATA%\microsoft\internet explorer\recovery\high\r3adm3.txt
  • %LOCALAPPDATA%\microsoft\media player\art cache\localmls\r3adm3.txt
  • %LOCALAPPDATA%\microsoft\media player\sync playlists\en-us\r3adm3.txt
  • %LOCALAPPDATA%\microsoft\office\groove\system\r3adm3.txt
  • %LOCALAPPDATA%\microsoft\office\groove\user\r3adm3.txt
  • %LOCALAPPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\r3adm3.txt
  • %LOCALAPPDATA%\mozilla\updates\e7cf176e110c211b\updates\r3adm3.txt
  • %LOCALAPPDATA%\thunderbird\profiles\wjj9aet2.default\cache\r3adm3.txt
  • %LOCALAPPDATA%\thunderbird\profiles\wjj9aet2.default\cache2\r3adm3.txt
  • %LOCALAPPDATA%\thunderbird\profiles\wjj9aet2.default\startupcache\r3adm3.txt
  • %LOCALAPPDATA%\adobe\acrobat\dc\cache\r3adm3.txt
  • %APPDATA%\winamp\plugins\ml\r3adm3.txt
  • %LOCALAPPDATA%\adobe\acrocef\dc\acrobat\r3adm3.txt
  • %LOCALAPPDATA%\adobe\acrobat\dc\toolssearchcacherdr\r3adm3.txt
  • %APPDATA%\macromedia\flash player\macromedia.com\r3adm3.txt
  • %APPDATA%\mail.ru\agent\mra\r3adm3.txt
  • %APPDATA%\microsoft\dbgclr\7.1\r3adm3.txt
  • %APPDATA%\microsoft\document building blocks\1033\r3adm3.txt
  • %APPDATA%\microsoft\internet explorer\quick launch\r3adm3.txt
  • %APPDATA%\microsoft\msdn\7.0\r3adm3.txt
  • %APPDATA%\microsoft\network\connections\r3adm3.txt
  • %APPDATA%\microsoft\office\recent\r3adm3.txt
  • %APPDATA%\microsoft\protect\s-1-5-21-1960123792-2022915161-3775307078-1001\r3adm3.txt
  • %APPDATA%\microsoft\systemcertificates\my\r3adm3.txt
  • %APPDATA%\microsoft\systemcertificates\request\r3adm3.txt
  • %APPDATA%\mozilla\firefox\crash reports\r3adm3.txt
  • %APPDATA%\mozilla\firefox\profiles\r3adm3.txt
  • %APPDATA%\mra\update\splash_banner\r3adm3.txt
  • %APPDATA%\opera software\opera stable\databases\r3adm3.txt
  • %APPDATA%\opera software\opera stable\dictionaries\r3adm3.txt
  • %APPDATA%\opera software\opera stable\extension state\r3adm3.txt
  • %APPDATA%\opera software\opera stable\jump list icons\r3adm3.txt
  • %APPDATA%\opera software\opera stable\jump list iconsold\r3adm3.txt
  • %APPDATA%\opera software\opera stable\local storage\r3adm3.txt
  • %APPDATA%\opera software\opera stable\storage\r3adm3.txt
  • %APPDATA%\opera software\opera stable\sync extension settings\r3adm3.txt
  • %APPDATA%\qip\profiles\logs\r3adm3.txt
  • %APPDATA%\telegram desktop\tdata\d877f783d5d3ef8c\r3adm3.txt
  • %APPDATA%\telegram desktop\tdata\dumps\r3adm3.txt
  • %APPDATA%\winamp\plugins\milkdrop2\r3adm3.txt
  • %APPDATA%\microsoft\crypto\keys\r3adm3.txt
  • %APPDATA%\thunderbird\profiles\wjj9aet2.default\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\sr\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\hu\r3adm3.txt
  • %APPDATA%\mra\update\r3adm3.txt
  • %APPDATA%\media center programs\r3adm3.txt
  • %APPDATA%\microsoft\r3adm3.txt
  • %APPDATA%\mirc\r3adm3.txt
  • %APPDATA%\mozilla\r3adm3.txt
  • %APPDATA%\mra\r3adm3.txt
  • %APPDATA%\opera software\r3adm3.txt
  • %APPDATA%\qip\r3adm3.txt
  • %APPDATA%\qipguard\r3adm3.txt
  • %APPDATA%\telegram desktop\r3adm3.txt
  • %APPDATA%\thunderbird\r3adm3.txt
  • %APPDATA%\winamp\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\assistance\client\1.0\en-us\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\device stage\task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\en-us\r3adm3.txt
  • %ALLUSERSPROFILE%\microsoft\device stage\task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\en-us\r3adm3.txt
  • %ALLUSERSPROFILE%\package cache\42d5bec7ddfbd49e76467529cbc2868987bf8460\packages\patch\x64\r3adm3.txt
  • C:\users\default\appdata\roaming\microsoft\internet explorer\r3adm3.txt
  • %LOCALAPPDATA%\adobe\acrobat\r3adm3.txt
  • %LOCALAPPDATA%\adobe\acrocef\r3adm3.txt
  • %LOCALAPPDATA%\adobe\color\r3adm3.txt
  • %LOCALAPPDATA%\cef\user data\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\r3adm3.txt
  • %LOCALAPPDATA%\google\crashreports\r3adm3.txt
  • %LOCALAPPDATA%\microsoft\credentials\r3adm3.txt
  • %APPDATA%\identities\r3adm3.txt
  • %APPDATA%\icq-profile\r3adm3.txt
  • %APPDATA%\mail.ru\r3adm3.txt
  • %APPDATA%\opera software\opera stable\r3adm3.txt
  • %LOCALAPPDATA%\microsoft\dbgclr\r3adm3.txt
  • %APPDATA%\ghisler\r3adm3.txt
  • %ALLUSERSPROFILE%\package cache\{0d3e9e15-de7a-300b-96f1-b4af12b96488}v14.0.23026\packages\vcruntimeminimum_amd64\r3adm3.txt
  • %ALLUSERSPROFILE%\package cache\{a2563e55-3bec-3828-8d67-e5e8b9e8b675}v14.0.23026\packages\vcruntimeminimum_x86\r3adm3.txt
  • %ALLUSERSPROFILE%\package cache\{bc958bd2-5dac-3862-bb1a-c1be0790438d}v14.0.23026\packages\vcruntimeadditional_amd64\r3adm3.txt
  • %ALLUSERSPROFILE%\package cache\{be960c1c-7bad-3de6-8b1a-2616fe532845}v14.0.23026\packages\vcruntimeadditional_x86\r3adm3.txt
  • C:\users\default\appdata\local\microsoft\r3adm3.txt
  • C:\users\default\appdata\roaming\media center programs\r3adm3.txt
  • C:\users\default\appdata\roaming\microsoft\r3adm3.txt
  • %LOCALAPPDATA%\adobe\r3adm3.txt
  • %LOCALAPPDATA%\applicationhistory\r3adm3.txt
  • %LOCALAPPDATA%\cef\r3adm3.txt
  • %LOCALAPPDATA%\google\r3adm3.txt
  • %ALLUSERSPROFILE%\package cache\42d5bec7ddfbd49e76467529cbc2868987bf8460\packages\patch\r3adm3.txt
  • %LOCALAPPDATA%\microsoft\r3adm3.txt
  • %LOCALAPPDATA%\mozilla\r3adm3.txt
  • %LOCALAPPDATA%\opera software\r3adm3.txt
  • %LOCALAPPDATA%\programs\r3adm3.txt
  • %LOCALAPPDATA%\steam\r3adm3.txt
  • %LOCALAPPDATA%\thunderbird\r3adm3.txt
  • %LOCALAPPDATA%\virtualstore\r3adm3.txt
  • %LOCALAPPDATA%low\adobe\r3adm3.txt
  • %LOCALAPPDATA%low\microsoft\r3adm3.txt
  • %LOCALAPPDATA%low\oracle\r3adm3.txt
  • %LOCALAPPDATA%low\sun\r3adm3.txt
  • %APPDATA%\adobe\r3adm3.txt
  • %LOCALAPPDATA%\microsoft help\r3adm3.txt
  • %APPDATA%\icqm\r3adm3.txt
  • %APPDATA%\qip\profiles\r3adm3.txt
  • %LOCALAPPDATA%\microsoft\device metadata\r3adm3.txt
  • %LOCALAPPDATA%\microsoft\feeds cache\r3adm3.txt
  • %APPDATA%\microsoft\addins\r3adm3.txt
  • %APPDATA%\microsoft\credentials\r3adm3.txt
  • %APPDATA%\microsoft\crypto\r3adm3.txt
  • %APPDATA%\microsoft\dbgclr\r3adm3.txt
  • %APPDATA%\microsoft\document building blocks\r3adm3.txt
  • %APPDATA%\microsoft\excel\r3adm3.txt
  • %APPDATA%\microsoft\internet explorer\r3adm3.txt
  • %APPDATA%\microsoft\mmc\r3adm3.txt
  • %APPDATA%\microsoft\msdn\r3adm3.txt
  • %APPDATA%\microsoft\network\r3adm3.txt
  • %APPDATA%\microsoft\office\r3adm3.txt
  • %APPDATA%\microsoft\powerpoint\r3adm3.txt
  • %APPDATA%\microsoft\proof\r3adm3.txt
  • %APPDATA%\microsoft\protect\r3adm3.txt
  • %APPDATA%\microsoft\publisher\r3adm3.txt
  • %APPDATA%\microsoft\publisher building blocks\r3adm3.txt
  • %APPDATA%\microsoft\speech\r3adm3.txt
  • %APPDATA%\microsoft\systemcertificates\r3adm3.txt
  • %APPDATA%\microsoft\uproof\r3adm3.txt
  • %APPDATA%\microsoft\word\r3adm3.txt
  • %APPDATA%\mirc\scripts\r3adm3.txt
  • %APPDATA%\mozilla\extensions\r3adm3.txt
  • %APPDATA%\mozilla\firefox\r3adm3.txt
  • %APPDATA%\mra\base\r3adm3.txt
  • %LOCALAPPDATA%\microsoft\event viewer\r3adm3.txt
  • %APPDATA%\mail.ru\agent\r3adm3.txt
  • %LOCALAPPDATA%\microsoft\feeds\r3adm3.txt
  • %APPDATA%\macromedia\flash player\r3adm3.txt
  • %APPDATA%\macromedia\r3adm3.txt
  • %LOCALAPPDATA%\microsoft\internet explorer\r3adm3.txt
  • %LOCALAPPDATA%\microsoft\media player\r3adm3.txt
  • %LOCALAPPDATA%\microsoft\msdn\r3adm3.txt
  • %LOCALAPPDATA%\microsoft\office\r3adm3.txt
  • %LOCALAPPDATA%\microsoft\publisher\r3adm3.txt
  • %LOCALAPPDATA%\microsoft\taskschedulerconfig\r3adm3.txt
  • %LOCALAPPDATA%\mozilla\firefox\r3adm3.txt
  • %LOCALAPPDATA%\mozilla\updates\r3adm3.txt
  • %LOCALAPPDATA%\opera software\opera stable\r3adm3.txt
  • %LOCALAPPDATA%\programs\common\r3adm3.txt
  • %LOCALAPPDATA%\steam\htmlcache\r3adm3.txt
  • %LOCALAPPDATA%\thunderbird\profiles\r3adm3.txt
  • %LOCALAPPDATA%\thunderbird\updates\r3adm3.txt
  • %LOCALAPPDATA%low\adobe\acrobat\r3adm3.txt
  • %LOCALAPPDATA%low\adobe\linguistics\r3adm3.txt
  • %LOCALAPPDATA%low\microsoft\internet explorer\r3adm3.txt
  • %LOCALAPPDATA%low\oracle\java\r3adm3.txt
  • %LOCALAPPDATA%low\sun\java\r3adm3.txt
  • %APPDATA%\adobe\acrobat\r3adm3.txt
  • %APPDATA%\adobe\flash player\r3adm3.txt
  • %APPDATA%\adobe\headlights\r3adm3.txt
  • %APPDATA%\adobe\linguistics\r3adm3.txt
  • %APPDATA%\adobe\logtransport2\r3adm3.txt
  • %APPDATA%\icq-profile\base\r3adm3.txt
  • %APPDATA%\icq-profile\update\r3adm3.txt
  • %APPDATA%\identities\{91255d00-95d9-49f5-8e84-7c027f5283b7}\r3adm3.txt
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\id\r3adm3.txt
Moves the following files
  • from %APPDATA%\ghisler\wincmd.ini to %APPDATA%\ghisler\wincmd.ini.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\victory.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\victory.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\zloradstvo.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\zloradstvo.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\valentine\broken_heart.gif to %APPDATA%\icqm\icq\smiles\smiles\valentine\broken_heart.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\valentine\in_love.gif to %APPDATA%\icqm\icq\smiles\smiles\valentine\in_love.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\valentine\dont_be_late.gif to %APPDATA%\icqm\icq\smiles\smiles\valentine\dont_be_late.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\valentine\kiss.gif to %APPDATA%\icqm\icq\smiles\smiles\valentine\kiss.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\valentine\jealousy.gif to %APPDATA%\icqm\icq\smiles\smiles\valentine\jealousy.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\valentine\kissed.gif to %APPDATA%\icqm\icq\smiles\smiles\valentine\kissed.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\valentine\on_wings.gif to %APPDATA%\icqm\icq\smiles\smiles\valentine\on_wings.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\valentine\lets_play.gif to %APPDATA%\icqm\icq\smiles\smiles\valentine\lets_play.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\kukes.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\kukes.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\valentine\undress.gif to %APPDATA%\icqm\icq\smiles\smiles\valentine\undress.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\aim\aim_status_busy.ico to %APPDATA%\icqm\icq\smiles\statuses\aim\aim_status_busy.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\aim\aim_status_away.ico to %APPDATA%\icqm\icq\smiles\statuses\aim\aim_status_away.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\aim\aim_status_offline.ico to %APPDATA%\icqm\icq\smiles\statuses\aim\aim_status_offline.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\aim\aim_status_online.ico to %APPDATA%\icqm\icq\smiles\statuses\aim\aim_status_online.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\aim\aim_status_gray.ico to %APPDATA%\icqm\icq\smiles\statuses\aim\aim_status_gray.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\gtalk\gtalk_status_away.ico to %APPDATA%\icqm\icq\smiles\statuses\gtalk\gtalk_status_away.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\gtalk\gtalk_status_gray.ico to %APPDATA%\icqm\icq\smiles\statuses\gtalk\gtalk_status_gray.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\gtalk\gtalk_status_busy.ico to %APPDATA%\icqm\icq\smiles\statuses\gtalk\gtalk_status_busy.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\gtalk\gtalk_status_offline.ico to %APPDATA%\icqm\icq\smiles\statuses\gtalk\gtalk_status_offline.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\gtalk\gtalk_status_online.ico to %APPDATA%\icqm\icq\smiles\statuses\gtalk\gtalk_status_online.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\vampire.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\vampire.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\think.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\think.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\sleepy.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\sleepy.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\tears.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\tears.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\smile.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\smile.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\cry.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\cry.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\detzl.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\detzl.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\devil.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\devil.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\disappointed.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\disappointed.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\die.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\die.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\fuck.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\fuck.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\heart.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\heart.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\fist.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\fist.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\hm.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\hm.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\kiss.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\kiss.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\icq\24bit.ico to %APPDATA%\icqm\icq\smiles\statuses\icq\24bit.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\valentine\want_you.gif to %APPDATA%\icqm\icq\smiles\smiles\valentine\want_you.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\koza_left.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\koza_left.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\laughter.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\laughter.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\live.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\live.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\ok.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\ok.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\oo.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\oo.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\plug.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\plug.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\pig.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\pig.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\really.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\really.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\rrr.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\rrr.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\sceptic.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\sceptic.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\shy.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\shy.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\crocodile.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\crocodile.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\koza_right.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\koza_right.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_odkl_online.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_odkl_online.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\62_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\62_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_connecting.ico to %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_connecting.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\103_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\103_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\104.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\104.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\104_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\104_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\11.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\11.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\11_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\11_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\12.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\12.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\12_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\12_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\13.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\13.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\13_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\13_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\56.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\56.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_away.ico to %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_away.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\56_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\56_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\57_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\57_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\58.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\58.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\58_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\58_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\59.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\59.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\59_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\59_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\60.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\60.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\60_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\60_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\61.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\61.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\61_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\61_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\62.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\62.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\102_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\102_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\103.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\103.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\102.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\102.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\101_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\101_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\101.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\101.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_invisible.ico to %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_invisible.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_gray.ico to %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_gray.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_online.ico to %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_online.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_wrong_data.ico to %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_wrong_data.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_offline.ico to %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_offline.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\icq\seekfriends.ico to %APPDATA%\icqm\icq\smiles\statuses\icq\seekfriends.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\icq\seekfriends_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\icq\seekfriends_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\icq\status_mobile.ico to %APPDATA%\icqm\icq\smiles\statuses\icq\status_mobile.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_odkl_connecting.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_odkl_connecting.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_odkl_gray.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_odkl_gray.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_chat.ico to %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_chat.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\coolguy.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\coolguy.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_odkl_offline.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_odkl_offline.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_away.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_away.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_dnd.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_dnd.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_chat.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_chat.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_gray.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_gray.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_invisible.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_invisible.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_offline.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_offline.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_online.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_online.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\jabber\seekfriends.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\seekfriends.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\100.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\100.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\100_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\100_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_dnd.ico to %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_dnd.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_odkl_wrong_data.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_odkl_wrong_data.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\57.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\57.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\bullshit.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\bullshit.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set06\s016.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s016.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\man_in_love.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\man_in_love.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\mocking.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\mocking.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\music.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\music.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\pardon.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\pardon.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\nea.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\nea.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\rofl.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\rofl.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\rolleyes.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\rolleyes.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\sad.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\sad.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\scratch_one-s_head.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\scratch_one-s_head.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\shok.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\shok.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\angel.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\angel.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\shout.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\shout.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\unknw.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\unknw.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\wacko2.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\wacko2.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\wink.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\wink.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\yahoo.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\yahoo.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set04\s001.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s001.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set04\s002.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s002.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set04\s003.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s003.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set04\s004.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s004.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set04\s005.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s005.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set04\s006.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s006.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\good.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\good.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\kiss_mini.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\kiss_mini.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\give_rose.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\give_rose.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\fool.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\fool.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\facepalm.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\facepalm.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\42a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\42a.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\44a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\44a.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\43a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\43a.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\46a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\46a.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\47a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\47a.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\48a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\48a.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\45a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\45a.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\49a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\49a.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\50a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\50a.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\52a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\52a.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set04\s007.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s007.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\smile.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\smile.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\51a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\51a.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\bad.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\bad.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\biggrin.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\biggrin.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\blum.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\blum.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\blush.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\blush.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\cray.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\cray.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\crazy.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\crazy.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\dance.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\dance.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\diablo.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\diablo.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\drinks.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\drinks.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\dirol.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\dirol.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\41b.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\41b.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\53a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\53a.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set05\s007.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s007.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\biggrin.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\biggrin.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set04\s011.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s011.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set06\s004.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s004.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set06\s006.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s006.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set06\s008.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s008.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set06\s009.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s009.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set06\s011.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s011.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set06\s010.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s010.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set06\s012.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s012.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set06\s013.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s013.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set06\s014.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s014.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set06\s015.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s015.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set04\s008.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s008.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set06\s017.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s017.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set06\s018.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s018.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set06\s019.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s019.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set06\s020.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s020.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\aaa.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\aaa.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\amazed.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\amazed.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\angry.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\angry.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\ass.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\ass.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\bazilio.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\bazilio.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\bee.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\bee.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\biganger.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\biganger.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set06\s002.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s002.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set06\s003.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s003.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set05\s020.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s020.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set06\s001.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s001.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set05\s019.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s019.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set04\s013.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s013.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set04\s012.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s012.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set04\s015.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s015.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set04\s014.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s014.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set05\s001.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s001.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set04\s016.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s016.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set05\s003.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s003.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set05\s002.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s002.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set05\s004.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s004.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set05\s006.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s006.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set04\s009.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s009.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\blink.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\blink.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set05\s005.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s005.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set05\s010.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s010.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set05\s009.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s009.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set05\s011.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s011.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set05\s012.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s012.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set05\s013.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s013.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set05\s014.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s014.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set05\s015.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s015.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set05\s016.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s016.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set05\s017.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s017.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set05\s018.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s018.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set04\s010.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s010.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\set05\s008.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s008.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\98.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\98.ico.guqxo
  • from %APPDATA%\mail.ru\agent\mra\html\cz\loading\progress_agent.gif to %APPDATA%\mail.ru\agent\mra\html\cz\loading\progress_agent.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\64.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\64.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\status_online_xp_big.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_online_xp_big.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\status_online_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_online_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\telefon_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\telefon_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\telefon.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\telefon.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\vi_oshiblis_nomerom.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\vi_oshiblis_nomerom.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\vi_oshiblis_nomerom_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\vi_oshiblis_nomerom_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\v_institute_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\v_institute_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\v_institute.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\v_institute.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\v_shkole.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\v_shkole.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\v_shkole_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\v_shkole_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\status_away.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_away.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\wrong_data.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\wrong_data.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\vk\vkontakte_busy.ico to %APPDATA%\icqm\icq\smiles\statuses\vk\vkontakte_busy.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\vk\vkontakte_gray.ico to %APPDATA%\icqm\icq\smiles\statuses\vk\vkontakte_gray.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\vk\vkontakte_online.ico to %APPDATA%\icqm\icq\smiles\statuses\vk\vkontakte_online.ico.guqxo
  • from %APPDATA%\macromedia\flash player\#sharedobjects\gr8by44n\kiks.yandex.ru\fuid01.sol to %APPDATA%\macromedia\flash player\#sharedobjects\gr8by44n\kiks.yandex.ru\fuid01.sol.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\vk\vkontakte_offline.ico to %APPDATA%\icqm\icq\smiles\statuses\vk\vkontakte_offline.ico.guqxo
  • from %APPDATA%\mail.ru\agent\mra\smiles\flash\akitaka.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\akitaka.swf.guqxo
  • from %APPDATA%\mail.ru\agent\mra\smiles\flash\angel.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\angel.swf.guqxo
  • from %APPDATA%\mail.ru\agent\mra\smiles\flash\bad_cold.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\bad_cold.swf.guqxo
  • from %APPDATA%\mail.ru\agent\mra\smiles\flash\beback.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\beback.swf.guqxo
  • from %APPDATA%\mail.ru\agent\mra\smiles\flash\beer.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\beer.swf.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\status_online.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_online.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\status_online_big.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_online_big.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\status_offline_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_offline_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\status_offline_xp_big.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_offline_xp_big.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\status_offline_big.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_offline_big.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\status_36.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_36.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\status_37.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_37.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\status_38.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_38.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\status_40.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_40.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\status_41.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_41.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\status_42.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_42.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\status_43.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_43.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\status_44.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_44.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\status_45.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_45.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\status_49.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_49.ico.guqxo
  • from %APPDATA%\mail.ru\agent\mra\smiles\flash\bodun.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\bodun.swf.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\vk\vkontakte_away.ico to %APPDATA%\icqm\icq\smiles\statuses\vk\vkontakte_away.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\status_50.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_50.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\status_away_xp_big.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_away_xp_big.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\status_away_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_away_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\status_connecting.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_connecting.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\status_connecting_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_connecting_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\status_invisible.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_invisible.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\status_invisible_big.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_invisible_big.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\status_invisible_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_invisible_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\status_invisible_xp_big.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_invisible_xp_big.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\status_mobile.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_mobile.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\status_offline.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_offline.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\status_35.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_35.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\status_away_big.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_away_big.ico.guqxo
  • from %APPDATA%\mail.ru\agent\mra\smiles\flash\kisses.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\kisses.swf.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\63.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\63.ico.guqxo
  • from %APPDATA%\mail.ru\agent\mra\smiles\flash\chillout.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\chillout.swf.guqxo
  • from %APPDATA%\mail.ru\agent\mra\smiles\flash\rosy.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\rosy.swf.guqxo
  • from %APPDATA%\mail.ru\agent\mra\smiles\flash\skratch.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\skratch.swf.guqxo
  • from %APPDATA%\mail.ru\agent\mra\smiles\flash\smeh.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\smeh.swf.guqxo
  • from %APPDATA%\mail.ru\agent\mra\smiles\flash\sobaka_strelyaet.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\sobaka_strelyaet.swf.guqxo
  • from %APPDATA%\mail.ru\agent\mra\smiles\flash\sobaka.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\sobaka.swf.guqxo
  • from %APPDATA%\mail.ru\agent\mra\smiles\flash\sorry.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\sorry.swf.guqxo
  • from %APPDATA%\mail.ru\agent\mra\smiles\flash\tank.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\tank.swf.guqxo
  • from %APPDATA%\mail.ru\agent\mra\smiles\flash\wf_love_sdaus.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\wf_love_sdaus.swf.guqxo
  • from %APPDATA%\mail.ru\agent\mra\smiles\flash\wf_love_srazila.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\wf_love_srazila.swf.guqxo
  • from %APPDATA%\mail.ru\agent\mra\smiles\flash\zadolbal.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\zadolbal.swf.guqxo
  • from %APPDATA%\mail.ru\agent\mra\smiles\flash\boo.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\boo.swf.guqxo
  • from %APPDATA%\mail.ru\agent\mra\smiles\smiles\s008.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\s008.gif.guqxo
  • from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\crashes\store.json.mozlz4 to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\crashes\store.json.mozlz4.guqxo
  • from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\bookmarkbackups\bookmarks-2021-10-20_14_x5qkry9yysawyostzmcdfa==.jsonlz4 to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\bookmarkbackups\bookmarks-2021-10-20_14_x5qkry9yysawyostzmcdfa==.jsonlz4.guqxo
  • from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\datareporting\state.json to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\datareporting\state.json.guqxo
  • from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\sessionstore-backups\previous.js to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\sessionstore-backups\previous.js.guqxo
  • from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\webapps\webapps.json to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\webapps\webapps.json.guqxo
  • from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\sessionstore-backups\upgrade.js-20150415140819 to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\sessionstore-backups\upgrade.js-20150415140819.guqxo
  • from %LOCALAPPDATA%\google\chrome\user data\default\web applications\_crx_aohghmighlieiainnegkcijnfilokake\документы google.ico to %LOCALAPPDATA%\google\chrome\user data\default\web applications\_crx_aohghmighlieiainnegkcijnfilokake\документы google.ico.guqxo
  • from %LOCALAPPDATA%\google\chrome\user data\default\web applications\_crx_aohghmighlieiainnegkcijnfilokake\документы google.ico.md5 to %LOCALAPPDATA%\google\chrome\user data\default\web applications\_crx_aohghmighlieiainnegkcijnfilokake\документы google.ico.md5.guqxo
  • from %APPDATA%\macromedia\flash player\macromedia.com\support\flashplayer\sys\settings.sol to %APPDATA%\macromedia\flash player\macromedia.com\support\flashplayer\sys\settings.sol.guqxo
  • from %APPDATA%\mail.ru\agent\mra\html\bg\loading\progress_agent.gif to %APPDATA%\mail.ru\agent\mra\html\bg\loading\progress_agent.gif.guqxo
  • from %APPDATA%\mail.ru\agent\mra\smiles\flash\rabotaet.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\rabotaet.swf.guqxo
  • from %APPDATA%\mail.ru\agent\mra\smiles\flash\serdze.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\serdze.swf.guqxo
  • from %APPDATA%\mail.ru\agent\mra\smiles\flash\missyou.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\missyou.swf.guqxo
  • from %APPDATA%\mail.ru\agent\mra\smiles\flash\mad dog.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\mad dog.swf.guqxo
  • from %APPDATA%\mail.ru\agent\mra\smiles\flash\love_bear_rose.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\love_bear_rose.swf.guqxo
  • from %APPDATA%\mail.ru\agent\mra\smiles\flash\drako_bolnoy.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\drako_bolnoy.swf.guqxo
  • from %APPDATA%\mail.ru\agent\mra\smiles\flash\drako_koster.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\drako_koster.swf.guqxo
  • from %APPDATA%\mail.ru\agent\mra\smiles\flash\drako_love.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\drako_love.swf.guqxo
  • from %APPDATA%\mail.ru\agent\mra\smiles\flash\drako_opyatnica.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\drako_opyatnica.swf.guqxo
  • from %APPDATA%\mail.ru\agent\mra\smiles\flash\drako_snegyrka.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\drako_snegyrka.swf.guqxo
  • from %APPDATA%\mail.ru\agent\mra\smiles\flash\drako_zombie.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\drako_zombie.swf.guqxo
  • from %APPDATA%\mail.ru\agent\mra\smiles\flash\duh.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\duh.swf.guqxo
  • from %APPDATA%\mail.ru\agent\mra\smiles\flash\gangsta.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\gangsta.swf.guqxo
  • from %APPDATA%\mail.ru\agent\mra\smiles\flash\guby.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\guby.swf.guqxo
  • from %APPDATA%\mail.ru\agent\mra\smiles\flash\information.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\information.swf.guqxo
  • from %APPDATA%\mail.ru\agent\mra\smiles\flash\canthearu.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\canthearu.swf.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\status_34.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_34.ico.guqxo
  • from %APPDATA%\mail.ru\agent\mra\smiles\flash\joy.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\joy.swf.guqxo
  • from %APPDATA%\mail.ru\agent\mra\smiles\flash\kot_goodbye.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\kot_goodbye.swf.guqxo
  • from %APPDATA%\mail.ru\agent\mra\smiles\flash\kot_nedutza.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\kot_nedutza.swf.guqxo
  • from %APPDATA%\mail.ru\agent\mra\smiles\flash\kot_obida.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\kot_obida.swf.guqxo
  • from %APPDATA%\mail.ru\agent\mra\smiles\flash\kot_spasibo.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\kot_spasibo.swf.guqxo
  • from %APPDATA%\mail.ru\agent\mra\smiles\flash\kot_wow.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\kot_wow.swf.guqxo
  • from %APPDATA%\mail.ru\agent\mra\smiles\flash\krizis.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\krizis.swf.guqxo
  • from %APPDATA%\mail.ru\agent\mra\smiles\flash\laugh.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\laugh.swf.guqxo
  • from %APPDATA%\mail.ru\agent\mra\smiles\flash\likeu.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\likeu.swf.guqxo
  • from %APPDATA%\mail.ru\agent\mra\smiles\flash\love_bear_hugs.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\love_bear_hugs.swf.guqxo
  • from %APPDATA%\mail.ru\agent\mra\smiles\flash\love_bear_kiss.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\love_bear_kiss.swf.guqxo
  • from %APPDATA%\mail.ru\agent\mra\smiles\flash\devochka.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\devochka.swf.guqxo
  • from %APPDATA%\mail.ru\agent\mra\smiles\flash\kot_cool.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\kot_cool.swf.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\40a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\40a.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\status_33.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_33.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\pivo_bit.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\pivo_bit.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\79.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\79.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\79_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\79_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\80.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\80.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\80_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\80_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\81.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\81.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\81_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\81_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\82.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\82.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\82_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\82_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\83.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\83.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\83_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\83_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\70_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\70_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\84.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\84.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\85.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\85.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\85_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\85_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\86.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\86.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\86_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\86_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\87.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\87.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\87_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\87_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\88.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\88.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\88_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\88_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\89.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\89.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\89_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\89_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\78.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\78.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\78_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\78_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\77_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\77_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\77.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\77.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\76_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\76_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\65_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\65_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\65.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\65.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\66.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\66.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\66_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\66_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\67.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\67.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\67_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\67_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\68.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\68.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\68_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\68_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\69_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\69_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\69.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\69.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\90.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\90.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\84_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\84_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\70.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\70.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\71.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\71.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\72_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\72_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\72.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\72.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\73_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\73_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\73.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\73.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\74_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\74_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\74.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\74.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\75.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\75.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\75_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\75_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\76.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\76.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\64_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\64_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\71_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\71_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\63_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\63_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\status_30.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_30.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\91_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\91_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\ia_inoplanet_razum.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\ia_inoplanet_razum.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\ia_krivetko.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\ia_krivetko.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\ia_poteralsa.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\ia_poteralsa.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\ia_soshl_asuma.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\ia_soshl_asuma.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\ia_utko.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\ia_utko.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\igrau.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\igrau.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\kuru.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\kuru.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\kut.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\kut.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\music.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\music.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\na_rabote.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\na_rabote.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\91.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\91.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\na_vstreche.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\na_vstreche.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\pivo.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\pivo.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\pu_kofe.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\pu_kofe.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\rabotau.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\rabotau.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\rocket.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\rocket.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\seekfriends.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\seekfriends.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\splu.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\splu.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\seekfriends_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\seekfriends_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\splu_bit.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\splu_bit.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\status_29.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_29.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\star.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\star.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\gotovlu.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\gotovlu.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\gulau.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\gulau.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\gizn_gavno.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\gizn_gavno.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\gde_ia.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\gde_ia.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\em.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\em.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\92_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\92_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\93_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\93_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\93.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\93.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\94_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\94_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\94.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\94.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\95.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\95.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\95_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\95_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\96.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\96.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\96_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\96_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\97_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\97_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\90_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\90_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\status_32.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_32.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\97.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\97.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\99_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\99_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\99.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\99.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\belka.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\belka.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\boleu.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\boleu.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\chat.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\chat.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\chat_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\chat_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\cherep.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\cherep.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\dnd.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\dnd.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\dnd_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\dnd_xp.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\doma.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\doma.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\92.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\92.ico.guqxo
  • from %APPDATA%\icqm\icq\smiles\statuses\set01\98_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\98_xp.ico.guqxo
  • from %APPDATA%\microsoft\internet explorer\quick launch\user pinned\taskbar\desktop.ini to %APPDATA%\microsoft\internet explorer\quick launch\user pinned\taskbar\desktop.ini.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\38a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\38a.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\25a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\25a.gif.guqxo
  • from %APPDATA%\opera software\opera stable\local storage\https_www.yandex.ru_0.localstorage-journal to %APPDATA%\opera software\opera stable\local storage\https_www.yandex.ru_0.localstorage-journal.guqxo
  • from %APPDATA%\opera software\opera stable\local storage\opera_startpage_0.localstorage to %APPDATA%\opera software\opera stable\local storage\opera_startpage_0.localstorage.guqxo
  • from %APPDATA%\opera software\opera stable\local storage\opera_startpage_0.localstorage-journal to %APPDATA%\opera software\opera stable\local storage\opera_startpage_0.localstorage-journal.guqxo
  • from %APPDATA%\telegram desktop\tdata\d877f783d5d3ef8c\map0 to %APPDATA%\telegram desktop\tdata\d877f783d5d3ef8c\map0.guqxo
  • from %APPDATA%\thunderbird\profiles\wjj9aet2.default\abook.mab to %APPDATA%\thunderbird\profiles\wjj9aet2.default\abook.mab.guqxo
  • from %APPDATA%\thunderbird\profiles\wjj9aet2.default\blist.sqlite to %APPDATA%\thunderbird\profiles\wjj9aet2.default\blist.sqlite.guqxo
  • from %APPDATA%\thunderbird\profiles\wjj9aet2.default\compatibility.ini to %APPDATA%\thunderbird\profiles\wjj9aet2.default\compatibility.ini.guqxo
  • from %APPDATA%\thunderbird\profiles\wjj9aet2.default\extensions.ini to %APPDATA%\thunderbird\profiles\wjj9aet2.default\extensions.ini.guqxo
  • from %APPDATA%\thunderbird\profiles\wjj9aet2.default\cookies.sqlite to %APPDATA%\thunderbird\profiles\wjj9aet2.default\cookies.sqlite.guqxo
  • from %APPDATA%\thunderbird\profiles\wjj9aet2.default\extensions.json to %APPDATA%\thunderbird\profiles\wjj9aet2.default\extensions.json.guqxo
  • from %APPDATA%\opera software\opera stable\jump list icons\50ed.tmp to %APPDATA%\opera software\opera stable\jump list icons\50ed.tmp.guqxo
  • from %APPDATA%\thunderbird\profiles\wjj9aet2.default\foldertree.json to %APPDATA%\thunderbird\profiles\wjj9aet2.default\foldertree.json.guqxo
  • from %APPDATA%\thunderbird\profiles\wjj9aet2.default\global-messages-db.sqlite to %APPDATA%\thunderbird\profiles\wjj9aet2.default\global-messages-db.sqlite.guqxo
  • from %APPDATA%\thunderbird\profiles\wjj9aet2.default\permissions.sqlite to %APPDATA%\thunderbird\profiles\wjj9aet2.default\permissions.sqlite.guqxo
  • from %APPDATA%\thunderbird\profiles\wjj9aet2.default\places.sqlite to %APPDATA%\thunderbird\profiles\wjj9aet2.default\places.sqlite.guqxo
  • from %APPDATA%\thunderbird\profiles\wjj9aet2.default\prefs.js to %APPDATA%\thunderbird\profiles\wjj9aet2.default\prefs.js.guqxo
  • from %APPDATA%\thunderbird\profiles\wjj9aet2.default\session.json to %APPDATA%\thunderbird\profiles\wjj9aet2.default\session.json.guqxo
  • from %APPDATA%\thunderbird\profiles\wjj9aet2.default\times.json to %APPDATA%\thunderbird\profiles\wjj9aet2.default\times.json.guqxo
  • from %APPDATA%\thunderbird\profiles\wjj9aet2.default\sessioncheckpoints.json to %APPDATA%\thunderbird\profiles\wjj9aet2.default\sessioncheckpoints.json.guqxo
  • from %APPDATA%\thunderbird\profiles\wjj9aet2.default\webappsstore.sqlite to %APPDATA%\thunderbird\profiles\wjj9aet2.default\webappsstore.sqlite.guqxo
  • from %APPDATA%\winamp\plugins\milkdrop2\milk2_img.ini to %APPDATA%\winamp\plugins\milkdrop2\milk2_img.ini.guqxo
  • from %APPDATA%\winamp\plugins\milkdrop2\milk2_msg.ini to %APPDATA%\winamp\plugins\milkdrop2\milk2_msg.ini.guqxo
  • from %APPDATA%\opera software\opera stable\local storage\chrome-extension_knohfebhibeknbfioecpdmdkjkjdnjnl_0.localstorage-journal to %APPDATA%\opera software\opera stable\local storage\chrome-extension_knohfebhibeknbfioecpdmdkjkjdnjnl_0.localstorage-journal.guqxo
  • from %APPDATA%\opera software\opera stable\local storage\https_www.yandex.ru_0.localstorage to %APPDATA%\opera software\opera stable\local storage\https_www.yandex.ru_0.localstorage.guqxo
  • from %APPDATA%\opera software\opera stable\jump list iconsold\3796.tmp to %APPDATA%\opera software\opera stable\jump list iconsold\3796.tmp.guqxo
  • from %APPDATA%\opera software\opera stable\local storage\chrome-extension_knohfebhibeknbfioecpdmdkjkjdnjnl_0.localstorage to %APPDATA%\opera software\opera stable\local storage\chrome-extension_knohfebhibeknbfioecpdmdkjkjdnjnl_0.localstorage.guqxo
  • from %APPDATA%\opera software\opera stable\jump list iconsold\3765.tmp to %APPDATA%\opera software\opera stable\jump list iconsold\3765.tmp.guqxo
  • from %APPDATA%\microsoft\protect\s-1-5-21-1960123792-2022915161-3775307078-1001\preferred to %APPDATA%\microsoft\protect\s-1-5-21-1960123792-2022915161-3775307078-1001\preferred.guqxo
  • from %APPDATA%\microsoft\protect\s-1-5-21-1960123792-2022915161-3775307078-1001\b9ed44f4-c00d-45f3-9d18-c556a9a58c43 to %APPDATA%\microsoft\protect\s-1-5-21-1960123792-2022915161-3775307078-1001\b9ed44f4-c00d-45f3-9d18-c556a9a58c43.guqxo
  • from %APPDATA%\mozilla\firefox\crash reports\installtime20150415140819 to %APPDATA%\mozilla\firefox\crash reports\installtime20150415140819.guqxo
  • from %APPDATA%\opera software\opera stable\databases\databases.db-journal to %APPDATA%\opera software\opera stable\databases\databases.db-journal.guqxo
  • from %APPDATA%\opera software\opera stable\extension state\000003.ldb to %APPDATA%\opera software\opera stable\extension state\000003.ldb.guqxo
  • from %APPDATA%\opera software\opera stable\extension state\000006.ldb to %APPDATA%\opera software\opera stable\extension state\000006.ldb.guqxo
  • from %APPDATA%\opera software\opera stable\extension state\000007.log to %APPDATA%\opera software\opera stable\extension state\000007.log.guqxo
  • from %APPDATA%\opera software\opera stable\extension state\current to %APPDATA%\opera software\opera stable\extension state\current.guqxo
  • from %APPDATA%\opera software\opera stable\extension state\log to %APPDATA%\opera software\opera stable\extension state\log.guqxo
  • from %APPDATA%\opera software\opera stable\extension state\log.old to %APPDATA%\opera software\opera stable\extension state\log.old.guqxo
  • from %APPDATA%\adobe\acrobat\dc\jscache\globdata to %APPDATA%\adobe\acrobat\dc\jscache\globdata.guqxo
  • from %APPDATA%\thunderbird\profiles\wjj9aet2.default\history.mab to %APPDATA%\thunderbird\profiles\wjj9aet2.default\history.mab.guqxo
  • from %APPDATA%\opera software\opera stable\extension state\manifest-000001 to %APPDATA%\opera software\opera stable\extension state\manifest-000001.guqxo
  • from %APPDATA%\opera software\opera stable\jump list icons\516e.tmp to %APPDATA%\opera software\opera stable\jump list icons\516e.tmp.guqxo
  • from %APPDATA%\opera software\opera stable\jump list icons\51ce.tmp to %APPDATA%\opera software\opera stable\jump list icons\51ce.tmp.guqxo
  • from %APPDATA%\opera software\opera stable\jump list icons\51ff.tmp to %APPDATA%\opera software\opera stable\jump list icons\51ff.tmp.guqxo
  • from %APPDATA%\opera software\opera stable\jump list icons\524f.tmp to %APPDATA%\opera software\opera stable\jump list icons\524f.tmp.guqxo
  • from %APPDATA%\opera software\opera stable\jump list icons\529f.tmp to %APPDATA%\opera software\opera stable\jump list icons\529f.tmp.guqxo
  • from %APPDATA%\opera software\opera stable\jump list iconsold\3651.tmp to %APPDATA%\opera software\opera stable\jump list iconsold\3651.tmp.guqxo
  • from %APPDATA%\opera software\opera stable\jump list iconsold\36a1.tmp to %APPDATA%\opera software\opera stable\jump list iconsold\36a1.tmp.guqxo
  • from %APPDATA%\opera software\opera stable\jump list iconsold\3703.tmp to %APPDATA%\opera software\opera stable\jump list iconsold\3703.tmp.guqxo
  • from %APPDATA%\opera software\opera stable\jump list iconsold\36c3.tmp to %APPDATA%\opera software\opera stable\jump list iconsold\36c3.tmp.guqxo
  • from %APPDATA%\opera software\opera stable\jump list iconsold\3724.tmp to %APPDATA%\opera software\opera stable\jump list iconsold\3724.tmp.guqxo
  • from %APPDATA%\microsoft\protect\s-1-5-21-1960123792-2022915161-3775307078-1001\f8401b27-0c7a-4d0f-80a5-9679c6328419 to %APPDATA%\microsoft\protect\s-1-5-21-1960123792-2022915161-3775307078-1001\f8401b27-0c7a-4d0f-80a5-9679c6328419.guqxo
  • from %APPDATA%\opera software\opera stable\jump list icons\514d.tmp to %APPDATA%\opera software\opera stable\jump list icons\514d.tmp.guqxo
  • from %APPDATA%\icqm\icq\smiles\flash\drako_opyatnica.swf to %APPDATA%\icqm\icq\smiles\flash\drako_opyatnica.swf.guqxo
  • from %APPDATA%\mail.ru\agent\mra\database\citylist_tr.csv to %APPDATA%\mail.ru\agent\mra\database\citylist_tr.csv.guqxo
  • from %APPDATA%\icqm\icq\smiles\flash\akitaka.swf to %APPDATA%\icqm\icq\smiles\flash\akitaka.swf.guqxo
  • from %APPDATA%\icqm\icq\smiles\flash\likeu.swf to %APPDATA%\icqm\icq\smiles\flash\likeu.swf.guqxo
  • from %APPDATA%\icqm\icq\smiles\flash\love_bear_hugs.swf to %APPDATA%\icqm\icq\smiles\flash\love_bear_hugs.swf.guqxo
  • from %APPDATA%\icqm\icq\smiles\flash\love_bear_kiss.swf to %APPDATA%\icqm\icq\smiles\flash\love_bear_kiss.swf.guqxo
  • from %APPDATA%\icqm\icq\smiles\flash\love_bear_rose.swf to %APPDATA%\icqm\icq\smiles\flash\love_bear_rose.swf.guqxo
  • from %APPDATA%\icqm\icq\smiles\flash\mad dog.swf to %APPDATA%\icqm\icq\smiles\flash\mad dog.swf.guqxo
  • from %APPDATA%\icqm\icq\smiles\flash\missyou.swf to %APPDATA%\icqm\icq\smiles\flash\missyou.swf.guqxo
  • from %APPDATA%\icqm\icq\smiles\flash\rabotaet.swf to %APPDATA%\icqm\icq\smiles\flash\rabotaet.swf.guqxo
  • from %APPDATA%\icqm\icq\smiles\flash\rosy.swf to %APPDATA%\icqm\icq\smiles\flash\rosy.swf.guqxo
  • from %APPDATA%\icqm\icq\smiles\flash\serdze.swf to %APPDATA%\icqm\icq\smiles\flash\serdze.swf.guqxo
  • from %APPDATA%\icqm\icq\smiles\flash\smeh.swf to %APPDATA%\icqm\icq\smiles\flash\smeh.swf.guqxo
  • from %APPDATA%\adobe\acrobat\dc\jscache\globsettings to %APPDATA%\adobe\acrobat\dc\jscache\globsettings.guqxo
  • from %APPDATA%\icqm\icq\smiles\flash\skratch.swf to %APPDATA%\icqm\icq\smiles\flash\skratch.swf.guqxo
  • from %APPDATA%\icqm\icq\smiles\flash\sobaka_strelyaet.swf to %APPDATA%\icqm\icq\smiles\flash\sobaka_strelyaet.swf.guqxo
  • from %APPDATA%\icqm\icq\smiles\flash\sorry.swf to %APPDATA%\icqm\icq\smiles\flash\sorry.swf.guqxo
  • from %APPDATA%\icqm\icq\smiles\flash\tank.swf to %APPDATA%\icqm\icq\smiles\flash\tank.swf.guqxo
  • from %APPDATA%\icqm\icq\smiles\flash\wf_love_sdaus.swf to %APPDATA%\icqm\icq\smiles\flash\wf_love_sdaus.swf.guqxo
  • from %APPDATA%\icqm\icq\smiles\flash\wf_love_srazila.swf to %APPDATA%\icqm\icq\smiles\flash\wf_love_srazila.swf.guqxo
  • from %APPDATA%\icqm\icq\smiles\flash\zadolbal.swf to %APPDATA%\icqm\icq\smiles\flash\zadolbal.swf.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\s008.gif to %APPDATA%\icqm\icq\smiles\smiles\s008.gif.guqxo
  • from %APPDATA%\mail.ru\agent\mra\database\citylist_kz.csv to %APPDATA%\mail.ru\agent\mra\database\citylist_kz.csv.guqxo
  • from %APPDATA%\mail.ru\agent\mra\database\citylist_en.csv to %APPDATA%\mail.ru\agent\mra\database\citylist_en.csv.guqxo
  • from %APPDATA%\mail.ru\agent\mra\database\citylist_ru.csv to %APPDATA%\mail.ru\agent\mra\database\citylist_ru.csv.guqxo
  • from %APPDATA%\icqm\icq\smiles\flash\krizis.swf to %APPDATA%\icqm\icq\smiles\flash\krizis.swf.guqxo
  • from %APPDATA%\icqm\icq\smiles\flash\laugh.swf to %APPDATA%\icqm\icq\smiles\flash\laugh.swf.guqxo
  • from %APPDATA%\icqm\icq\smiles\flash\kot_wow.swf to %APPDATA%\icqm\icq\smiles\flash\kot_wow.swf.guqxo
  • from %APPDATA%\icqm\icq\smiles\flash\kot_spasibo.swf to %APPDATA%\icqm\icq\smiles\flash\kot_spasibo.swf.guqxo
  • from %APPDATA%\icqm\icq\smiles\flash\kot_obida.swf to %APPDATA%\icqm\icq\smiles\flash\kot_obida.swf.guqxo
  • from %APPDATA%\icqm\icq\smiles\flash\bad_cold.swf to %APPDATA%\icqm\icq\smiles\flash\bad_cold.swf.guqxo
  • from %APPDATA%\icqm\icq\smiles\flash\beback.swf to %APPDATA%\icqm\icq\smiles\flash\beback.swf.guqxo
  • from %APPDATA%\icqm\icq\smiles\flash\bodun.swf to %APPDATA%\icqm\icq\smiles\flash\bodun.swf.guqxo
  • from %APPDATA%\icqm\icq\smiles\flash\beer.swf to %APPDATA%\icqm\icq\smiles\flash\beer.swf.guqxo
  • from %APPDATA%\icqm\icq\smiles\flash\boo.swf to %APPDATA%\icqm\icq\smiles\flash\boo.swf.guqxo
  • from %APPDATA%\icqm\icq\smiles\flash\canthearu.swf to %APPDATA%\icqm\icq\smiles\flash\canthearu.swf.guqxo
  • from %APPDATA%\icqm\icq\smiles\flash\chillout.swf to %APPDATA%\icqm\icq\smiles\flash\chillout.swf.guqxo
  • from %APPDATA%\icqm\icq\smiles\flash\devochka.swf to %APPDATA%\icqm\icq\smiles\flash\devochka.swf.guqxo
  • from %APPDATA%\icqm\icq\smiles\flash\drako_bolnoy.swf to %APPDATA%\icqm\icq\smiles\flash\drako_bolnoy.swf.guqxo
  • from %APPDATA%\icqm\icq\smiles\flash\drako_koster.swf to %APPDATA%\icqm\icq\smiles\flash\drako_koster.swf.guqxo
  • from %APPDATA%\adobe\acrobat\dc\security\addressbook.acrodata to %APPDATA%\adobe\acrobat\dc\security\addressbook.acrodata.guqxo
  • from %APPDATA%\microsoft\protect\s-1-5-21-1960123792-2022915161-3775307078-1001\d524265f-dddf-4bb6-9b50-623f924971ba to %APPDATA%\microsoft\protect\s-1-5-21-1960123792-2022915161-3775307078-1001\d524265f-dddf-4bb6-9b50-623f924971ba.guqxo
  • from %APPDATA%\icqm\icq\smiles\flash\drako_love.swf to %APPDATA%\icqm\icq\smiles\flash\drako_love.swf.guqxo
  • from %APPDATA%\icqm\icq\smiles\flash\drako_zombie.swf to %APPDATA%\icqm\icq\smiles\flash\drako_zombie.swf.guqxo
  • from %APPDATA%\icqm\icq\smiles\flash\gangsta.swf to %APPDATA%\icqm\icq\smiles\flash\gangsta.swf.guqxo
  • from %APPDATA%\icqm\icq\smiles\flash\duh.swf to %APPDATA%\icqm\icq\smiles\flash\duh.swf.guqxo
  • from %APPDATA%\icqm\icq\smiles\flash\information.swf to %APPDATA%\icqm\icq\smiles\flash\information.swf.guqxo
  • from %APPDATA%\icqm\icq\smiles\flash\guby.swf to %APPDATA%\icqm\icq\smiles\flash\guby.swf.guqxo
  • from %APPDATA%\icqm\icq\smiles\flash\joy.swf to %APPDATA%\icqm\icq\smiles\flash\joy.swf.guqxo
  • from %APPDATA%\icqm\icq\smiles\flash\kisses.swf to %APPDATA%\icqm\icq\smiles\flash\kisses.swf.guqxo
  • from %APPDATA%\icqm\icq\smiles\flash\kot_cool.swf to %APPDATA%\icqm\icq\smiles\flash\kot_cool.swf.guqxo
  • from %APPDATA%\icqm\icq\smiles\flash\kot_goodbye.swf to %APPDATA%\icqm\icq\smiles\flash\kot_goodbye.swf.guqxo
  • from %APPDATA%\icqm\icq\smiles\flash\kot_nedutza.swf to %APPDATA%\icqm\icq\smiles\flash\kot_nedutza.swf.guqxo
  • from %APPDATA%\icqm\icq\smiles\flash\angel.swf to %APPDATA%\icqm\icq\smiles\flash\angel.swf.guqxo
  • from %APPDATA%\icqm\icq\smiles\flash\drako_snegyrka.swf to %APPDATA%\icqm\icq\smiles\flash\drako_snegyrka.swf.guqxo
  • from %APPDATA%\icqm\icq\smiles\flash\sobaka.swf to %APPDATA%\icqm\icq\smiles\flash\sobaka.swf.guqxo
  • from %APPDATA%\microsoft\protect\s-1-5-21-1960123792-2022915161-3775307078-1001\bd5b067d-34b5-40ef-9a93-eff9fd1771a3 to %APPDATA%\microsoft\protect\s-1-5-21-1960123792-2022915161-3775307078-1001\bd5b067d-34b5-40ef-9a93-eff9fd1771a3.guqxo
  • from %APPDATA%\icqm\icq\sounds\ring.mp3 to %APPDATA%\icqm\icq\sounds\ring.mp3.guqxo
  • from %APPDATA%\mra\update\ver.txt to %APPDATA%\mra\update\ver.txt.guqxo
  • from %APPDATA%\opera software\opera stable\bookmarks to %APPDATA%\opera software\opera stable\bookmarks.guqxo
  • from %APPDATA%\opera software\opera stable\bookmarks.bak to %APPDATA%\opera software\opera stable\bookmarks.bak.guqxo
  • from %APPDATA%\opera software\opera stable\bookmarksextras to %APPDATA%\opera software\opera stable\bookmarksextras.guqxo
  • from %APPDATA%\mra\update\languages.hash to %APPDATA%\mra\update\languages.hash.guqxo
  • from %APPDATA%\opera software\opera stable\certificate revocation lists to %APPDATA%\opera software\opera stable\certificate revocation lists.guqxo
  • from %APPDATA%\opera software\opera stable\browser.js to %APPDATA%\opera software\opera stable\browser.js.guqxo
  • from %APPDATA%\opera software\opera stable\cookies-journal to %APPDATA%\opera software\opera stable\cookies-journal.guqxo
  • from %APPDATA%\opera software\opera stable\cookies to %APPDATA%\opera software\opera stable\cookies.guqxo
  • from %APPDATA%\opera software\opera stable\favicons to %APPDATA%\opera software\opera stable\favicons.guqxo
  • from %APPDATA%\icq-profile\update\languages.aff to %APPDATA%\icq-profile\update\languages.aff.guqxo
  • from %APPDATA%\opera software\opera stable\favicons-journal to %APPDATA%\opera software\opera stable\favicons-journal.guqxo
  • from %APPDATA%\opera software\opera stable\history to %APPDATA%\opera software\opera stable\history.guqxo
  • from %APPDATA%\opera software\opera stable\history provider cache to %APPDATA%\opera software\opera stable\history provider cache.guqxo
  • from %APPDATA%\opera software\opera stable\history-journal to %APPDATA%\opera software\opera stable\history-journal.guqxo
  • from %APPDATA%\opera software\opera stable\login data to %APPDATA%\opera software\opera stable\login data.guqxo
  • from %APPDATA%\opera software\opera stable\local state to %APPDATA%\opera software\opera stable\local state.guqxo
  • from %APPDATA%\opera software\opera stable\opera_autoupdate.log to %APPDATA%\opera software\opera stable\opera_autoupdate.log.guqxo
  • from %APPDATA%\opera software\opera stable\login data-journal to %APPDATA%\opera software\opera stable\login data-journal.guqxo
  • from %APPDATA%\opera software\opera stable\opera_shutdown_ms.txt to %APPDATA%\opera software\opera stable\opera_shutdown_ms.txt.guqxo
  • from %APPDATA%\opera software\opera stable\origin bound certs to %APPDATA%\opera software\opera stable\origin bound certs.guqxo
  • from %APPDATA%\opera software\opera stable\preferences to %APPDATA%\opera software\opera stable\preferences.guqxo
  • from %APPDATA%\mra\update\languages.aff to %APPDATA%\mra\update\languages.aff.guqxo
  • from %APPDATA%\mra\update\languages.dict to %APPDATA%\mra\update\languages.dict.guqxo
  • from %APPDATA%\mra\base\opt.dbs to %APPDATA%\mra\base\opt.dbs.guqxo
  • from %APPDATA%\mra\base\mra.dbs to %APPDATA%\mra\base\mra.dbs.guqxo
  • from %APPDATA%\mirc\scripts\popups.ini to %APPDATA%\mirc\scripts\popups.ini.guqxo
  • from %APPDATA%\mirc\urls.ini to %APPDATA%\mirc\urls.ini.guqxo
  • from %APPDATA%\mirc\servers.ini to %APPDATA%\mirc\servers.ini.guqxo
  • from %APPDATA%\qipguard\cache to %APPDATA%\qipguard\cache.guqxo
  • from %APPDATA%\thunderbird\profiles.ini to %APPDATA%\thunderbird\profiles.ini.guqxo
  • from %APPDATA%\telegram desktop\log.txt to %APPDATA%\telegram desktop\log.txt.guqxo
  • from %APPDATA%\winamp\demo.mp3 to %APPDATA%\winamp\demo.mp3.guqxo
  • from %APPDATA%\winamp\winamp.ini to %APPDATA%\winamp\winamp.ini.guqxo
  • from %APPDATA%\winamp\winamp.m3u8 to %APPDATA%\winamp\winamp.m3u8.guqxo
  • from %APPDATA%\adobe\logtransport2\logtransport2.cfg to %APPDATA%\adobe\logtransport2\logtransport2.cfg.guqxo
  • from %APPDATA%\icq-profile\base\mra.dbs to %APPDATA%\icq-profile\base\mra.dbs.guqxo
  • from %APPDATA%\opera software\opera stable\quotamanager to %APPDATA%\opera software\opera stable\quotamanager.guqxo
  • from %APPDATA%\opera software\opera stable\favorites.db-journal to %APPDATA%\opera software\opera stable\favorites.db-journal.guqxo
  • from %APPDATA%\icq-profile\base\opt.dbs to %APPDATA%\icq-profile\base\opt.dbs.guqxo
  • from %APPDATA%\icq-profile\update\languages.hash to %APPDATA%\icq-profile\update\languages.hash.guqxo
  • from %APPDATA%\icq-profile\update\ver.txt to %APPDATA%\icq-profile\update\ver.txt.guqxo
  • from %APPDATA%\microsoft\mmc\taskschd to %APPDATA%\microsoft\mmc\taskschd.guqxo
  • from %APPDATA%\microsoft\office\mso1033.acl to %APPDATA%\microsoft\office\mso1033.acl.guqxo
  • from %APPDATA%\microsoft\protect\credhist to %APPDATA%\microsoft\protect\credhist.guqxo
  • from %APPDATA%\microsoft\uproof\custom.dic to %APPDATA%\microsoft\uproof\custom.dic.guqxo
  • from %APPDATA%\microsoft\uproof\excludedictionaryen0409.lex to %APPDATA%\microsoft\uproof\excludedictionaryen0409.lex.guqxo
  • from %APPDATA%\microsoft\uproof\excludedictionaryen0809.lex to %APPDATA%\microsoft\uproof\excludedictionaryen0809.lex.guqxo
  • from %APPDATA%\mirc\scripts\aliases.ini to %APPDATA%\mirc\scripts\aliases.ini.guqxo
  • from %APPDATA%\mozilla\firefox\profiles.ini to %APPDATA%\mozilla\firefox\profiles.ini.guqxo
  • from %APPDATA%\mirc\mirc.ini to %APPDATA%\mirc\mirc.ini.guqxo
  • from %APPDATA%\icq-profile\update\languages.dict to %APPDATA%\icq-profile\update\languages.dict.guqxo
  • from %APPDATA%\telegram desktop\tdata\90ef50e22e92cb8c0 to %APPDATA%\telegram desktop\tdata\90ef50e22e92cb8c0.guqxo
  • from %APPDATA%\microsoft\protect\s-1-5-21-1960123792-2022915161-3775307078-1001\ae597e89-6b58-4713-b543-846c970a2b49 to %APPDATA%\microsoft\protect\s-1-5-21-1960123792-2022915161-3775307078-1001\ae597e89-6b58-4713-b543-846c970a2b49.guqxo
  • from %APPDATA%\opera software\opera stable\session.db-journal to %APPDATA%\opera software\opera stable\session.db-journal.guqxo
  • from %APPDATA%\icqm\icq\smiles\skin.txt to %APPDATA%\icqm\icq\smiles\skin.txt.guqxo
  • from %APPDATA%\icqm\icq\sounds\auth.mp3 to %APPDATA%\icqm\icq\sounds\auth.mp3.guqxo
  • from %APPDATA%\icqm\icq\sounds\busy.mp3 to %APPDATA%\icqm\icq\sounds\busy.mp3.guqxo
  • from %APPDATA%\icqm\icq\sounds\call_in.wav to %APPDATA%\icqm\icq\sounds\call_in.wav.guqxo
  • from %APPDATA%\icqm\icq\sounds\conference.mp3 to %APPDATA%\icqm\icq\sounds\conference.mp3.guqxo
  • from %APPDATA%\icqm\icq\sounds\error.wav to %APPDATA%\icqm\icq\sounds\error.wav.guqxo
  • from %APPDATA%\icqm\icq\sounds\letter.wav to %APPDATA%\icqm\icq\sounds\letter.wav.guqxo
  • from %APPDATA%\icqm\icq\sounds\message.mp3 to %APPDATA%\icqm\icq\sounds\message.mp3.guqxo
  • from %APPDATA%\icqm\icq\sounds\no_answer.wav to %APPDATA%\icqm\icq\sounds\no_answer.wav.guqxo
  • from %APPDATA%\icqm\icq\sounds\otprav.mp3 to %APPDATA%\icqm\icq\sounds\otprav.mp3.guqxo
  • from %APPDATA%\opera software\opera stable\origin bound certs-journal to %APPDATA%\opera software\opera stable\origin bound certs-journal.guqxo
  • from %APPDATA%\icqm\icq\sounds\otprav.wav to %APPDATA%\icqm\icq\sounds\otprav.wav.guqxo
  • from %APPDATA%\icqm\icq\sounds\start.wav to %APPDATA%\icqm\icq\sounds\start.wav.guqxo
  • from %APPDATA%\icqm\icq\sounds\voiceend.wav to %APPDATA%\icqm\icq\sounds\voiceend.wav.guqxo
  • from %APPDATA%\icqm\icq\sounds\test_sound.wav to %APPDATA%\icqm\icq\sounds\test_sound.wav.guqxo
  • from %APPDATA%\icqm\icq\video\video.swf to %APPDATA%\icqm\icq\video\video.swf.guqxo
  • from %APPDATA%\microsoft\internet explorer\quick launch\desktop.ini to %APPDATA%\microsoft\internet explorer\quick launch\desktop.ini.guqxo
  • from %APPDATA%\microsoft\protect\s-1-5-21-1960123792-2022915161-3775307078-1001\2365fd05-48cb-42f9-a388-5fd82ffd2512 to %APPDATA%\microsoft\protect\s-1-5-21-1960123792-2022915161-3775307078-1001\2365fd05-48cb-42f9-a388-5fd82ffd2512.guqxo
  • from %APPDATA%\microsoft\protect\s-1-5-21-1960123792-2022915161-3775307078-1001\24a81978-4594-42c5-80e9-bcd9abebab41 to %APPDATA%\microsoft\protect\s-1-5-21-1960123792-2022915161-3775307078-1001\24a81978-4594-42c5-80e9-bcd9abebab41.guqxo
  • from %APPDATA%\microsoft\protect\s-1-5-21-1960123792-2022915161-3775307078-1001\5fea2324-401c-4a67-adf5-81a4571f8b7d to %APPDATA%\microsoft\protect\s-1-5-21-1960123792-2022915161-3775307078-1001\5fea2324-401c-4a67-adf5-81a4571f8b7d.guqxo
  • from %APPDATA%\microsoft\protect\s-1-5-21-1960123792-2022915161-3775307078-1001\92f71877-063c-4360-8202-6a7ed34e0861 to %APPDATA%\microsoft\protect\s-1-5-21-1960123792-2022915161-3775307078-1001\92f71877-063c-4360-8202-6a7ed34e0861.guqxo
  • from %APPDATA%\microsoft\protect\s-1-5-21-1960123792-2022915161-3775307078-1001\857f1812-3b8b-41fd-99c5-09d06e6d1983 to %APPDATA%\microsoft\protect\s-1-5-21-1960123792-2022915161-3775307078-1001\857f1812-3b8b-41fd-99c5-09d06e6d1983.guqxo
  • from %APPDATA%\icqm\icq\database\citylist_uz.csv to %APPDATA%\icqm\icq\database\citylist_uz.csv.guqxo
  • from %APPDATA%\icqm\icq\fonts\segoesc.ttf to %APPDATA%\icqm\icq\fonts\segoesc.ttf.guqxo
  • from %APPDATA%\icqm\icq\database\citylist_tr.csv to %APPDATA%\icqm\icq\database\citylist_tr.csv.guqxo
  • from %APPDATA%\icqm\icq\database\citylist_ua.csv to %APPDATA%\icqm\icq\database\citylist_ua.csv.guqxo
  • from %APPDATA%\icqm\icq\database\citylist_kz.csv to %APPDATA%\icqm\icq\database\citylist_kz.csv.guqxo
  • from %APPDATA%\opera software\opera stable\siteprefs.json to %APPDATA%\opera software\opera stable\siteprefs.json.guqxo
  • from %APPDATA%\opera software\opera stable\ssdfp2216.0.2078311798 to %APPDATA%\opera software\opera stable\ssdfp2216.0.2078311798.guqxo
  • from %APPDATA%\opera software\opera stable\ssdfp1652.1.1724122967 to %APPDATA%\opera software\opera stable\ssdfp1652.1.1724122967.guqxo
  • from %APPDATA%\opera software\opera stable\ssdfp2512.4.1739910927 to %APPDATA%\opera software\opera stable\ssdfp2512.4.1739910927.guqxo
  • from %APPDATA%\opera software\opera stable\ssdfp2544.3.670597881 to %APPDATA%\opera software\opera stable\ssdfp2544.3.670597881.guqxo
  • from %APPDATA%\opera software\opera stable\thumbnails.db-journal to %APPDATA%\opera software\opera stable\thumbnails.db-journal.guqxo
  • from %APPDATA%\opera software\opera stable\transportsecurity to %APPDATA%\opera software\opera stable\transportsecurity.guqxo
  • from %APPDATA%\opera software\opera stable\update_prefs.json to %APPDATA%\opera software\opera stable\update_prefs.json.guqxo
  • from %APPDATA%\opera software\opera stable\visited links to %APPDATA%\opera software\opera stable\visited links.guqxo
  • from %APPDATA%\opera software\opera stable\web data to %APPDATA%\opera software\opera stable\web data.guqxo
  • from %APPDATA%\opera software\opera stable\quotamanager-journal to %APPDATA%\opera software\opera stable\quotamanager-journal.guqxo
  • from %APPDATA%\microsoft\protect\s-1-5-21-1960123792-2022915161-3775307078-1001\9a5de8c5-f1f1-4a14-bd2a-9a24fc199001 to %APPDATA%\microsoft\protect\s-1-5-21-1960123792-2022915161-3775307078-1001\9a5de8c5-f1f1-4a14-bd2a-9a24fc199001.guqxo
  • from %APPDATA%\opera software\opera stable\web data-journal to %APPDATA%\opera software\opera stable\web data-journal.guqxo
  • from %APPDATA%\telegram desktop\tdata\d877f783d5d3ef8c1 to %APPDATA%\telegram desktop\tdata\d877f783d5d3ef8c1.guqxo
  • from %APPDATA%\telegram desktop\tdata\settings0 to %APPDATA%\telegram desktop\tdata\settings0.guqxo
  • from %APPDATA%\telegram desktop\tdata\shortcuts-custom.json to %APPDATA%\telegram desktop\tdata\shortcuts-custom.json.guqxo
  • from %APPDATA%\telegram desktop\tdata\usertag to %APPDATA%\telegram desktop\tdata\usertag.guqxo
  • from %APPDATA%\thunderbird\crash reports\installtime20150330093429 to %APPDATA%\thunderbird\crash reports\installtime20150330093429.guqxo
  • from %APPDATA%\telegram desktop\tdata\shortcuts-default.json to %APPDATA%\telegram desktop\tdata\shortcuts-default.json.guqxo
  • from %APPDATA%\adobe\acrobat\dc\tmdocs.sav to %APPDATA%\adobe\acrobat\dc\tmdocs.sav.guqxo
  • from %APPDATA%\adobe\acrobat\dc\tmgrpprm.sav to %APPDATA%\adobe\acrobat\dc\tmgrpprm.sav.guqxo
  • from %APPDATA%\icqm\icq\database\citylist_en.csv to %APPDATA%\icqm\icq\database\citylist_en.csv.guqxo
  • from %APPDATA%\icqm\icq\database\citylist_ru.csv to %APPDATA%\icqm\icq\database\citylist_ru.csv.guqxo
  • from %APPDATA%\opera software\opera stable\session.dbak to %APPDATA%\opera software\opera stable\session.dbak.guqxo
  • from %APPDATA%\telegram desktop\tdata\prefix to %APPDATA%\telegram desktop\tdata\prefix.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\8march\mad.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\mad.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\37.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\37.gif.guqxo
  • from %APPDATA%\mail.ru\agent\mra\fonts\segoesc.ttf to %APPDATA%\mail.ru\agent\mra\fonts\segoesc.ttf.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\air_kiss.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\air_kiss.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\bad.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\bad.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\tongue out.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\tongue out.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\biggrin.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\biggrin.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\blum1.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\blum1.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\blush.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\blush.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\bomb.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\bomb.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\bye2.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\bye2.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\cool.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\cool.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\cry.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\cry.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\gross.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\gross.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\crazy.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\crazy.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\dance.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\dance.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\drinks.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\drinks.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\gamer.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\gamer.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\girl_angel.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\girl_angel.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\give_heart.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\give_heart.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\give_rose.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\give_rose.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\good.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\good.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\hi.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\hi.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\hang1.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\hang1.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\ireful.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\ireful.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\thank you.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\thank you.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\thumbs up.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\thumbs up.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\stop.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\stop.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\surprised.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\surprised.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\smile.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\smile.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\cat\cat_paper.gif to %APPDATA%\icqm\icq\smiles\smiles\cat\cat_paper.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\angel.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\angel.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\blushing.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\blushing.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\bomb.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\bomb.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\blinking.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\blinking.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\can't say-shut up.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\can't say-shut up.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\crying.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\crying.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\devil.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\devil.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\drinking.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\drinking.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\cool.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\cool.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\i_am_so_happy.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\i_am_so_happy.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\diablo.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\diablo.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\falling asleep.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\falling asleep.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\in love.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\in love.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\kissed.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\kissed.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\kissing.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\kissing.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\laughing.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\laughing.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\laughing out loud (lol).gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\laughing out loud (lol).gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\listening to music.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\listening to music.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\mad.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\mad.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\nothing to say.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\nothing to say.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\scream.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\scream.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\sad.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\sad.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\cat\cat_meow.gif to %APPDATA%\icqm\icq\smiles\smiles\cat\cat_meow.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\kiss.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\kiss.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\sorry.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\sorry.gif.guqxo
  • from %APPDATA%\mail.ru\agent\mra\database\citylist_uz.csv to %APPDATA%\mail.ru\agent\mra\database\citylist_uz.csv.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\lol.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\lol.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\13a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\13a.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\15a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\15a.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\14a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\14a.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\17a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\17a.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\16a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\16a.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\20a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\20a.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\21a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\21a.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\22a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\22a.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\23a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\23a.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\24a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\24a.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\kiss.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\kiss.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\19a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\19a.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\26a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\26a.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\27a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\27a.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\28a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\28a.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\29a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\29a.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\30a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\30a.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\32a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\32a.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\33a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\33a.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\31a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\31a.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\34a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\34a.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\36a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\36a.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\12a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\12a.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\11a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\11a.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\10a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\10a.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\09a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\09a.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\07a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\07a.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\man_in_love.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\man_in_love.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\mocking.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\mocking.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\music.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\music.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\nea.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\nea.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\pardon.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\pardon.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\rofl.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\rofl.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\sad.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\sad.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\scratch_one-s_head.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\scratch_one-s_head.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\shok.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\shok.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\shout.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\shout.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\kiss3.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\kiss3.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\cat\cat_mouse.gif to %APPDATA%\icqm\icq\smiles\smiles\cat\cat_mouse.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\smile.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\smile.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\wink.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\wink.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\wacko1.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\wacko1.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\yes.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\yes.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\01.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\01.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\yahoo.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\yahoo.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\03a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\03a.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\02.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\02.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\04b.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\04b.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\06a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\06a.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\08a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\08a.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\mad.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\mad.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\unknown.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\unknown.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\39a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\39a.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\cat\cat_hand.gif to %APPDATA%\icqm\icq\smiles\smiles\cat\cat_hand.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\poison.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\poison.gif.guqxo
  • from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\places.sqlite-wal to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\places.sqlite-wal.guqxo
  • from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\prefs.js to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\prefs.js.guqxo
  • from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\revocations.txt to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\revocations.txt.guqxo
  • from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\search.json to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\search.json.guqxo
  • from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\sessioncheckpoints.json to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\sessioncheckpoints.json.guqxo
  • from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\sitesecurityservicestate.txt to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\sitesecurityservicestate.txt.guqxo
  • from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\times.json to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\times.json.guqxo
  • from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\user.js to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\user.js.guqxo
  • from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\webappsstore.sqlite to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\webappsstore.sqlite.guqxo
  • from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\xulstore.json to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\xulstore.json.guqxo
  • from %APPDATA%\mail.ru\agent\mra\sounds\ring.wav to %APPDATA%\mail.ru\agent\mra\sounds\ring.wav.guqxo
  • from %APPDATA%\opera software\opera stable\sync extension settings\knohfebhibeknbfioecpdmdkjkjdnjnl\000003.ldb to %APPDATA%\opera software\opera stable\sync extension settings\knohfebhibeknbfioecpdmdkjkjdnjnl\000003.ldb.guqxo
  • from %APPDATA%\opera software\opera stable\sync extension settings\knohfebhibeknbfioecpdmdkjkjdnjnl\log to %APPDATA%\opera software\opera stable\sync extension settings\knohfebhibeknbfioecpdmdkjkjdnjnl\log.guqxo
  • from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\places.sqlite to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\places.sqlite.guqxo
  • from %APPDATA%\opera software\opera stable\sync extension settings\knohfebhibeknbfioecpdmdkjkjdnjnl\log.old to %APPDATA%\opera software\opera stable\sync extension settings\knohfebhibeknbfioecpdmdkjkjdnjnl\log.old.guqxo
  • from %APPDATA%\opera software\opera stable\sync extension settings\knohfebhibeknbfioecpdmdkjkjdnjnl\manifest-000001 to %APPDATA%\opera software\opera stable\sync extension settings\knohfebhibeknbfioecpdmdkjkjdnjnl\manifest-000001.guqxo
  • from %APPDATA%\thunderbird\profiles\wjj9aet2.default\crashes\store.json.mozlz4 to %APPDATA%\thunderbird\profiles\wjj9aet2.default\crashes\store.json.mozlz4.guqxo
  • from %APPDATA%\adobe\acrobat\dc\security\crlcache\0fded5ceb68c302b1cdb2bddd9d0000e76539cb0.crl to %APPDATA%\adobe\acrobat\dc\security\crlcache\0fded5ceb68c302b1cdb2bddd9d0000e76539cb0.crl.guqxo
  • from %APPDATA%\adobe\acrobat\dc\security\crlcache\ce338828149963dcea4cd26bb86f0363b4ca0ba5.crl to %APPDATA%\adobe\acrobat\dc\security\crlcache\ce338828149963dcea4cd26bb86f0363b4ca0ba5.crl.guqxo
  • from %APPDATA%\icqm\icq\html\bg\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\bg\loading\progress_agent.gif.guqxo
  • from %APPDATA%\icqm\icq\html\cz\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\cz\loading\progress_agent.gif.guqxo
  • from %APPDATA%\icqm\icq\html\de\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\de\loading\progress_agent.gif.guqxo
  • from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\permissions.sqlite to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\permissions.sqlite.guqxo
  • from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\places.sqlite-shm to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\places.sqlite-shm.guqxo
  • from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\healthreport.sqlite to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\healthreport.sqlite.guqxo
  • from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\formhistory.sqlite to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\formhistory.sqlite.guqxo
  • from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\cookies.sqlite to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\cookies.sqlite.guqxo
  • from %APPDATA%\mail.ru\agent\mra\smiles\skin.txt to %APPDATA%\mail.ru\agent\mra\smiles\skin.txt.guqxo
  • from %APPDATA%\mail.ru\agent\mra\sounds\busy.wav to %APPDATA%\mail.ru\agent\mra\sounds\busy.wav.guqxo
  • from %APPDATA%\mail.ru\agent\mra\sounds\call_waiting.wav to %APPDATA%\mail.ru\agent\mra\sounds\call_waiting.wav.guqxo
  • from %APPDATA%\mail.ru\agent\mra\sounds\call_in.wav to %APPDATA%\mail.ru\agent\mra\sounds\call_in.wav.guqxo
  • from %APPDATA%\mail.ru\agent\mra\sounds\conference.wav to %APPDATA%\mail.ru\agent\mra\sounds\conference.wav.guqxo
  • from %APPDATA%\mail.ru\agent\mra\sounds\error.wav to %APPDATA%\mail.ru\agent\mra\sounds\error.wav.guqxo
  • from %APPDATA%\mail.ru\agent\mra\sounds\letter.wav to %APPDATA%\mail.ru\agent\mra\sounds\letter.wav.guqxo
  • from %APPDATA%\mail.ru\agent\mra\sounds\message.wav to %APPDATA%\mail.ru\agent\mra\sounds\message.wav.guqxo
  • from %APPDATA%\mail.ru\agent\mra\sounds\no_answer.wav to %APPDATA%\mail.ru\agent\mra\sounds\no_answer.wav.guqxo
  • from %APPDATA%\mail.ru\agent\mra\sounds\otprav.wav to %APPDATA%\mail.ru\agent\mra\sounds\otprav.wav.guqxo
  • from %APPDATA%\icqm\icq\html\en\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\en\loading\progress_agent.gif.guqxo
  • from %APPDATA%\opera software\opera stable\sync extension settings\knohfebhibeknbfioecpdmdkjkjdnjnl\current to %APPDATA%\opera software\opera stable\sync extension settings\knohfebhibeknbfioecpdmdkjkjdnjnl\current.guqxo
  • from %APPDATA%\mail.ru\agent\mra\sounds\start.wav to %APPDATA%\mail.ru\agent\mra\sounds\start.wav.guqxo
  • from %APPDATA%\mail.ru\agent\mra\sounds\voiceend.wav to %APPDATA%\mail.ru\agent\mra\sounds\voiceend.wav.guqxo
  • from %APPDATA%\mail.ru\agent\mra\video\video.swf to %APPDATA%\mail.ru\agent\mra\video\video.swf.guqxo
  • from %APPDATA%\microsoft\crypto\rsa\s-1-5-21-1960123792-2022915161-3775307078-1001\83aa4cc77f591dfc2374580bbd95f6ba_36d1130a-ac2e-44f7-9dc1-e424fbcbe0ee to %APPDATA%\microsoft\crypto\rsa\s-1-5-21-1960123792-2022915161-3775307078-1001\83aa4cc77f591dfc2374580bbd95f6ba_36d1130a-ac2e-44f7-9dc1-e424fbcbe0ee.guqxo
  • from %APPDATA%\microsoft\crypto\rsa\s-1-5-21-1960123792-2022915161-3775307078-1001\f58155b4b1d5a524ca0261c3ee99fb50_36d1130a-ac2e-44f7-9dc1-e424fbcbe0ee to %APPDATA%\microsoft\crypto\rsa\s-1-5-21-1960123792-2022915161-3775307078-1001\f58155b4b1d5a524ca0261c3ee99fb50_36d1130a-ac2e-44f7-9dc1-e424fbcbe0ee.guqxo
  • from %APPDATA%\microsoft\document building blocks\1033\14\built-in building blocks.dotx to %APPDATA%\microsoft\document building blocks\1033\14\built-in building blocks.dotx.guqxo
  • from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\addons.json to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\addons.json.guqxo
  • from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\compatibility.ini to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\compatibility.ini.guqxo
  • from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\content-prefs.sqlite to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\content-prefs.sqlite.guqxo
  • from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions.ini to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions.ini.guqxo
  • from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions.json to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions.json.guqxo
  • from %APPDATA%\mail.ru\agent\mra\sounds\auth.wav to %APPDATA%\mail.ru\agent\mra\sounds\auth.wav.guqxo
  • from %APPDATA%\mail.ru\agent\mra\sounds\test_sound.wav to %APPDATA%\mail.ru\agent\mra\sounds\test_sound.wav.guqxo
  • from %APPDATA%\mail.ru\agent\mra\database\citylist_ua.csv to %APPDATA%\mail.ru\agent\mra\database\citylist_ua.csv.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\cat\cat_attack.gif to %APPDATA%\icqm\icq\smiles\smiles\cat\cat_attack.gif.guqxo
  • from %APPDATA%\icqm\icq\html\ru\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\ru\loading\progress_agent.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\fight.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\fight.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\fingal.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\fingal.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\flowr.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\flowr.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\gg.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\gg.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\gg2.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\gg2.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\gift.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\gift.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\history.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\history.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\hungry.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\hungry.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\kiss.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\kiss.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\love.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\love.gif.guqxo
  • from %APPDATA%\icqm\icq\html\kz\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\kz\loading\progress_agent.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\pistolet.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\pistolet.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\rainbow.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\rainbow.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\red.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\red.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\sad.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\sad.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\sing.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\sing.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\skuka.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\skuka.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\sleep.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\sleep.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\smile.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\smile.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\tongue.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\tongue.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\victory.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\victory.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\wonder.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\wonder.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\devil.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\devil.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\eat.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\eat.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\dance.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\dance.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\cry.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\cry.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\could.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\could.gif.guqxo
  • from %APPDATA%\icqm\icq\html\ua\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\ua\loading\progress_agent.gif.guqxo
  • from %APPDATA%\icqm\icq\html\uz\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\uz\loading\progress_agent.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\8march\car.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\car.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\8march\cat.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\cat.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\8march\cookie.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\cookie.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\8march\doll.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\doll.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\8march\drink.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\drink.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\8march\flowers.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\flowers.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\8march\hug.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\hug.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\8march\joy.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\joy.gif.guqxo
  • from %APPDATA%\icqm\icq\html\pt\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\pt\loading\progress_agent.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\cat\cat_lick.gif to %APPDATA%\icqm\icq\smiles\smiles\cat\cat_lick.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\8march\love.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\love.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\8march\perfume.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\perfume.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\8march\ring.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\ring.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\8march\shoes.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\shoes.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\8march\sunburn.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\sunburn.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\angel.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\angel.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\appl.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\appl.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\beauty.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\beauty.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\beer.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\beer.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\blew.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\blew.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\book.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\book.gif.guqxo
  • from %APPDATA%\icqm\icq\html\tr\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\tr\loading\progress_agent.gif.guqxo
  • from %APPDATA%\icqm\icq\smiles\smiles\8march\new_dress.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\new_dress.gif.guqxo
  • from %APPDATA%\mail.ru\agent\mra\html\de\loading\progress_agent.gif to %APPDATA%\mail.ru\agent\mra\html\de\loading\progress_agent.gif.guqxo
Modifies the following files
  • C:\far2\changelog
  • C:\totalcmd\totalcmd.inc
  • C:\totalcmd\tcunin64.wul
  • C:\totalcmd\tcuninst.wul
  • C:\totalcmd\size!.txt
  • C:\totalcmd\keyboard.txt
  • C:\totalcmd\register.rtf
  • C:\totalcmd\no.bar
  • C:\totalcmd\history.txt
  • C:\totalcmd\default.bar
  • C:\totalcmd\descript.ion
  • %ALLUSERSPROFILE%\ntuser.pol
  • C:\far2\savesettings.cmd
  • C:\far2\restoresettings.cmd
  • C:\far2\file_id.diz
  • C:\far2\farrus.lng
  • C:\far2\farspa.lng
  • C:\far2\farpol.lng
  • C:\far2\farrus.hlf
  • C:\far2\farhun.lng
  • C:\far2\farhun.hlf
  • C:\far2\farger.lng
  • C:\far2\fareng.lng
  • C:\far2\fareng.hlf
  • C:\far2\farcze.lng
  • C:\far2\far.map
  • C:\far2\clearpluginscache.cmd
  • C:\far2\changelog_eng
  • C:\totalcmd\totalcmd.chm
  • C:\totalcmd\wcmicons.inc
Modifies multiple files.
Substitutes the following files
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\sessioncheckpoints.json
Modifies user data files (Trojan.Encoder).
Changes user data files extensions (Trojan.Encoder).
Network activity
Connects to
  • '<LOCALNET>.10.0':445
  • '<LOCALNET>.10.161':445
  • '<LOCALNET>.10.162':445
  • '<LOCALNET>.10.163':445
  • '<LOCALNET>.10.164':445
  • '<LOCALNET>.10.165':445
  • '<LOCALNET>.10.166':445
  • '<LOCALNET>.10.167':445
  • '<LOCALNET>.10.168':445
  • '<LOCALNET>.10.169':445
  • '<LOCALNET>.10.170':445
  • '<LOCALNET>.10.171':445
  • '<LOCALNET>.10.172':445
  • '<LOCALNET>.10.173':445
  • '<LOCALNET>.10.175':445
  • '<LOCALNET>.10.189':445
  • '<LOCALNET>.10.176':445
  • '<LOCALNET>.10.177':445
  • '<LOCALNET>.10.178':445
  • '<LOCALNET>.10.179':445
  • '<LOCALNET>.10.180':445
  • '<LOCALNET>.10.181':445
  • '<LOCALNET>.10.182':445
  • '<LOCALNET>.10.183':445
  • '<LOCALNET>.10.184':445
  • '<LOCALNET>.10.185':445
  • '<LOCALNET>.10.186':445
  • '<LOCALNET>.10.187':445
  • '<LOCALNET>.10.188':445
  • '<LOCALNET>.10.160':445
  • '<LOCALNET>.10.174':445
  • '<LOCALNET>.10.159':445
  • '<LOCALNET>.10.142':445
  • '<LOCALNET>.10.129':445
  • '<LOCALNET>.10.130':445
  • '<LOCALNET>.10.131':445
  • '<LOCALNET>.10.132':445
  • '<LOCALNET>.10.133':445
  • '<LOCALNET>.10.134':445
  • '<LOCALNET>.10.135':445
  • '<LOCALNET>.10.136':445
  • '<LOCALNET>.10.137':445
  • '<LOCALNET>.10.138':445
  • '<LOCALNET>.10.139':445
  • '<LOCALNET>.10.140':445
  • '<LOCALNET>.10.141':445
  • '<LOCALNET>.10.143':445
  • '<LOCALNET>.10.157':445
  • '<LOCALNET>.10.144':445
  • '<LOCALNET>.10.145':445
  • '<LOCALNET>.10.146':445
  • '<LOCALNET>.10.147':445
  • '<LOCALNET>.10.148':445
  • '<LOCALNET>.10.149':445
  • '<LOCALNET>.10.150':445
  • '<LOCALNET>.10.151':445
  • '<LOCALNET>.10.152':445
  • '<LOCALNET>.10.153':445
  • '<LOCALNET>.10.154':445
  • '<LOCALNET>.10.155':445
  • '<LOCALNET>.10.156':445
  • '<LOCALNET>.10.158':445
  • '<LOCALNET>.10.207':445
  • '<LOCALNET>.10.253':445
  • '<LOCALNET>.10.192':445
  • '<LOCALNET>.10.225':445
  • '<LOCALNET>.10.226':445
  • '<LOCALNET>.10.227':445
  • '<LOCALNET>.10.228':445
  • '<LOCALNET>.10.229':445
  • '<LOCALNET>.10.230':445
  • '<LOCALNET>.10.231':445
  • '<LOCALNET>.10.232':445
  • '<LOCALNET>.10.233':445
  • '<LOCALNET>.10.234':445
  • '<LOCALNET>.10.235':445
  • '<LOCALNET>.10.236':445
  • '<LOCALNET>.10.237':445
  • '<LOCALNET>.10.239':445
  • '<LOCALNET>.10.191':445
  • '<LOCALNET>.10.240':445
  • '<LOCALNET>.10.241':445
  • '<LOCALNET>.10.242':445
  • '<LOCALNET>.10.243':445
  • '<LOCALNET>.10.244':445
  • '<LOCALNET>.10.245':445
  • '<LOCALNET>.10.246':445
  • '<LOCALNET>.10.247':445
  • '<LOCALNET>.10.248':445
  • '<LOCALNET>.10.249':445
  • '<LOCALNET>.10.250':445
  • '<LOCALNET>.10.251':445
  • '<LOCALNET>.10.252':445
  • '<LOCALNET>.10.224':445
  • '<LOCALNET>.10.128':445
  • '<LOCALNET>.10.223':445
  • '<LOCALNET>.10.206':445
  • '<LOCALNET>.10.193':445
  • '<LOCALNET>.10.194':445
  • '<LOCALNET>.10.195':445
  • '<LOCALNET>.10.196':445
  • '<LOCALNET>.10.197':445
  • '<LOCALNET>.10.198':445
  • '<LOCALNET>.10.199':445
  • '<LOCALNET>.10.200':445
  • '<LOCALNET>.10.201':445
  • '<LOCALNET>.10.202':445
  • '<LOCALNET>.10.203':445
  • '<LOCALNET>.10.204':445
  • '<LOCALNET>.10.205':445
  • '<LOCALNET>.10.190':445
  • '<LOCALNET>.10.221':445
  • '<LOCALNET>.10.208':445
  • '<LOCALNET>.10.209':445
  • '<LOCALNET>.10.210':445
  • '<LOCALNET>.10.211':445
  • '<LOCALNET>.10.212':445
  • '<LOCALNET>.10.213':445
  • '<LOCALNET>.10.214':445
  • '<LOCALNET>.10.215':445
  • '<LOCALNET>.10.216':445
  • '<LOCALNET>.10.217':445
  • '<LOCALNET>.10.218':445
  • '<LOCALNET>.10.219':445
  • '<LOCALNET>.10.220':445
  • '<LOCALNET>.10.222':445
  • '<LOCALNET>.10.238':445
  • '<LOCALNET>.10.127':445
  • '<LOCALNET>.10.110':445
  • '<LOCALNET>.10.33':445
  • '<LOCALNET>.10.34':445
  • '<LOCALNET>.10.35':445
  • '<LOCALNET>.10.36':445
  • '<LOCALNET>.10.37':445
  • '<LOCALNET>.10.38':445
  • '<LOCALNET>.10.39':445
  • '<LOCALNET>.10.40':445
  • '<LOCALNET>.10.41':445
  • '<LOCALNET>.10.42':445
  • '<LOCALNET>.10.43':445
  • '<LOCALNET>.10.44':445
  • '<LOCALNET>.10.45':445
  • '<LOCALNET>.10.47':445
  • '<LOCALNET>.10.61':445
  • '<LOCALNET>.10.48':445
  • '<LOCALNET>.10.49':445
  • '<LOCALNET>.10.50':445
  • '<LOCALNET>.10.51':445
  • '<LOCALNET>.10.52':445
  • '<LOCALNET>.10.53':445
  • '<LOCALNET>.10.54':445
  • '<LOCALNET>.10.55':445
  • '<LOCALNET>.10.56':445
  • '<LOCALNET>.10.57':445
  • '<LOCALNET>.10.58':445
  • '<LOCALNET>.10.59':445
  • '<LOCALNET>.10.60':445
  • '<LOCALNET>.10.32':445
  • '<LOCALNET>.10.46':445
  • '<LOCALNET>.10.31':445
  • '<LOCALNET>.10.14':445
  • '<LOCALNET>.10.1':445
  • '<LOCALNET>.10.2':445
  • '<LOCALNET>.10.3':445
  • '<LOCALNET>.10.4':445
  • '<LOCALNET>.10.5':445
  • '<LOCALNET>.10.6':445
  • '<LOCALNET>.10.7':445
  • '<LOCALNET>.10.8':445
  • '<LOCALNET>.10.9':445
  • '<LOCALNET>.10.10':445
  • '<LOCALNET>.10.11':445
  • '<LOCALNET>.10.12':445
  • '<LOCALNET>.10.13':445
  • '<LOCALNET>.10.15':445
  • '<LOCALNET>.10.29':445
  • '<LOCALNET>.10.16':445
  • '<LOCALNET>.10.17':445
  • '<LOCALNET>.10.18':445
  • '<LOCALNET>.10.19':445
  • '<LOCALNET>.10.20':445
  • '<LOCALNET>.10.21':445
  • '<LOCALNET>.10.22':445
  • '<LOCALNET>.10.23':445
  • '<LOCALNET>.10.24':445
  • '<LOCALNET>.10.25':445
  • '<LOCALNET>.10.26':445
  • '<LOCALNET>.10.27':445
  • '<LOCALNET>.10.28':445
  • '<LOCALNET>.10.30':445
  • '<LOCALNET>.10.79':445
  • '<LOCALNET>.10.125':445
  • '<LOCALNET>.10.64':445
  • '<LOCALNET>.10.97':445
  • '<LOCALNET>.10.98':445
  • '<LOCALNET>.10.99':445
  • '<LOCALNET>.10.100':445
  • '<LOCALNET>.10.101':445
  • '<LOCALNET>.10.102':445
  • '<LOCALNET>.10.103':445
  • '<LOCALNET>.10.104':445
  • '<LOCALNET>.10.105':445
  • '<LOCALNET>.10.106':445
  • '<LOCALNET>.10.107':445
  • '<LOCALNET>.10.108':445
  • '<LOCALNET>.10.109':445
  • '<LOCALNET>.10.111':445
  • '<LOCALNET>.10.63':445
  • '<LOCALNET>.10.112':445
  • '<LOCALNET>.10.113':445
  • '<LOCALNET>.10.114':445
  • '<LOCALNET>.10.115':445
  • '<LOCALNET>.10.116':445
  • '<LOCALNET>.10.117':445
  • '<LOCALNET>.10.118':445
  • '<LOCALNET>.10.119':445
  • '<LOCALNET>.10.120':445
  • '<LOCALNET>.10.121':445
  • '<LOCALNET>.10.122':445
  • '<LOCALNET>.10.123':445
  • '<LOCALNET>.10.124':445
  • '<LOCALNET>.10.96':445
  • '<LOCALNET>.10.126':445
  • '<LOCALNET>.10.95':445
  • '<LOCALNET>.10.78':445
  • '<LOCALNET>.10.65':445
  • '<LOCALNET>.10.66':445
  • '<LOCALNET>.10.67':445
  • '<LOCALNET>.10.68':445
  • '<LOCALNET>.10.69':445
  • '<LOCALNET>.10.70':445
  • '<LOCALNET>.10.71':445
  • '<LOCALNET>.10.72':445
  • '<LOCALNET>.10.73':445
  • '<LOCALNET>.10.74':445
  • '<LOCALNET>.10.75':445
  • '<LOCALNET>.10.76':445
  • '<LOCALNET>.10.77':445
  • '<LOCALNET>.10.62':445
  • '<LOCALNET>.10.93':445
  • '<LOCALNET>.10.80':445
  • '<LOCALNET>.10.81':445
  • '<LOCALNET>.10.82':445
  • '<LOCALNET>.10.83':445
  • '<LOCALNET>.10.84':445
  • '<LOCALNET>.10.85':445
  • '<LOCALNET>.10.86':445
  • '<LOCALNET>.10.87':445
  • '<LOCALNET>.10.88':445
  • '<LOCALNET>.10.89':445
  • '<LOCALNET>.10.90':445
  • '<LOCALNET>.10.91':445
  • '<LOCALNET>.10.92':445
  • '<LOCALNET>.10.94':445
  • '<LOCALNET>.10.254':445
Miscellaneous
Searches for the following windows
  • ClassName: 'MS_AutodialMonitor' WindowName: ''
  • ClassName: 'MS_WebCheckMonitor' WindowName: ''

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android