Trojan.Encoder.30069

Technical Information

To ensure autorun and distribution

Creates or modifies the following files

%ALLUSERSPROFILE%\start menu\programs\startup\how_to_recover_files.txt
%HOMEPATH%\start menu\programs\startup\how_to_recover_files.txt

Infects the following executable files

%ProgramFiles%\cavvl\cavvl.exe

Creates the following files on removable media

<Drive name for removable media>:\correct.avi
<Drive name for removable media>:\middaugh_keynote.pptx
<Drive name for removable media>:\asaprojectcompetition.pptx
<Drive name for removable media>:\waterresourcesag.pptx
<Drive name for removable media>:\gruenspecht_02172016.pptx
<Drive name for removable media>:\notepad.exe
<Drive name for removable media>:\calc.exe
<Drive name for removable media>:\skypesetup.exe
<Drive name for removable media>:\tcm851ax32.exe
<Drive name for removable media>:\chromesetup.exe
<Drive name for removable media>:\ovp25012015.doc
<Drive name for removable media>:\508softwareandos.doc
<Drive name for removable media>:\february_catalogue__2015.doc
<Drive name for removable media>:\stoc13_ml_quoc_le.pptx
<Drive name for removable media>:\contoso.cer
<Drive name for removable media>:\sdksampleprivdeveloper.cer
<Drive name for removable media>:\testee.cer
<Drive name for removable media>:\sdkfailsafeemulator.cer
<Drive name for removable media>:\testcertificate.cer
<Drive name for removable media>:\dashborder_192.bmp
<Drive name for removable media>:\dashborder_120.bmp
<Drive name for removable media>:\dashborder_96.bmp
<Drive name for removable media>:\coffee.bmp
<Drive name for removable media>:\default.bmp
<Drive name for removable media>:\delete.avi
<Drive name for removable media>:\split.avi
<Drive name for removable media>:\join.avi
<Drive name for removable media>:\sdksampleunprivdeveloper.cer
<Drive name for removable media>:\how_to_recover_files.txt

Malicious functions

To complicate detection of its presence in the operating system,

deletes volume shadow copies.

Executes the following

'<SYSTEM32>\taskkill.exe' /F /IM sqlservr.exe /T

Reads files which store third party applications passwords

%HOMEPATH%\desktop\dashborder_120.bmp
%HOMEPATH%\desktop\default.bmp
%HOMEPATH%\desktop\delete.avi
%HOMEPATH%\desktop\dial.bmp
%HOMEPATH%\desktop\hanni_umami_chapter.doc
%HOMEPATH%\desktop\holycrosschurchinstructions.docx
%HOMEPATH%\desktop\issi2013_template_for_posters.docx
%HOMEPATH%\desktop\join.avi
%HOMEPATH%\desktop\nwfieldnotes1966.docx
%HOMEPATH%\desktop\sdkfailsafeemulator.cer
%HOMEPATH%\desktop\sdksampleunprivdeveloper.cer
%HOMEPATH%\desktop\toolbar.bmp
%HOMEPATH%\desktop\weeklysheet1215.doc
%APPDATA%\opera software\opera stable\login data
%HOMEPATH%\local settings\application data\chromium\user data\default\web data
%HOMEPATH%\local settings\application data\google\chrome\user data\default\cookies

Modifies file system

Creates the following files

D:\how_to_recover_files.txt
%ProgramFiles%\ashdug\how_to_recover_files.txt
%APPDATA%\icqm\icq\html\tr\loading\how_to_recover_files.txt
%APPDATA%\icqm\icq\html\tr\how_to_recover_files.txt
%APPDATA%\icqm\icq\html\ua\jabber\how_to_recover_files.txt
%ProgramFiles%\aoltbserver\how_to_recover_files.txt
%HOMEPATH%\local settings\application data\adobe\acrobat\10.0\cache\search\how_to_recover_files.txt
%ProgramFiles%\armor2net\how_to_recover_files.txt
%HOMEPATH%\local settings\application data\adobe\acrobat\10.0\how_to_recover_files.txt
%ProgramFiles%\ashenhcd\how_to_recover_files.txt
%ProgramFiles%\microsoft office\templates\12\msenewfileitems\how_to_recover_files.txt
%ProgramFiles%\ash\how_to_recover_files.txt
%ProgramFiles%\microsoft office\templates\12\how_to_recover_files.txt
%HOMEPATH%\local settings\application data\adobe\acrobat\10.0\cache\how_to_recover_files.txt
%HOMEPATH%\local settings\application data\adobe\acrobat\9.0\cache\how_to_recover_files.txt
%ProgramFiles%\armorsurf\how_to_recover_files.txt
%ProgramFiles%\ashdisp\how_to_recover_files.txt
%APPDATA%\icqm\icq\html\tr\jabber\how_to_recover_files.txt
%ProgramFiles%\ashchest\how_to_recover_files.txt
%APPDATA%\icqm\icq\html\ru\how_to_recover_files.txt
%HOMEPATH%\local settings\application data\gdipfontcachev1.dat
%ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\mappings\mac\how_to_recover_files.txt
%APPDATA%\icqm\icq\html\kz\loading\how_to_recover_files.txt
%ProgramFiles%\alsvc\how_to_recover_files.txt
%HOMEPATH%\favorites\how_to_recover_files.txt
%ProgramFiles%\airdefense\how_to_recover_files.txt
%ProgramFiles%\amon\how_to_recover_files.txt
%APPDATA%\icqm\icq\html\ua\error\how_to_recover_files.txt
%ProgramFiles%\anti-trojan\how_to_recover_files.txt
%ProgramFiles%\amsn\how_to_recover_files.txt
%APPDATA%\icqm\icq\html\kz\jabber\how_to_recover_files.txt
%APPDATA%\icqm\icq\html\kz\how_to_recover_files.txt
%ProgramFiles%\almon\how_to_recover_files.txt
%ProgramFiles%\antivirus\how_to_recover_files.txt
%APPDATA%\icqm\icq\html\ru\jabber\how_to_recover_files.txt
%ProgramFiles%\aimpro\how_to_recover_files.txt
%APPDATA%\icqm\icq\html\ua\loading\how_to_recover_files.txt
%HOMEPATH%\local settings\application data\adobe\acrobat\9.0\updater\how_to_recover_files.txt
%ProgramFiles%\avgcc\how_to_recover_files.txt
%APPDATA%\icqm\icq\html\uz\error\how_to_recover_files.txt
%HOMEPATH%\local settings\application data\adobe\updater6\install\how_to_recover_files.txt
%ProgramFiles%\ashquick\how_to_recover_files.txt
%ProgramFiles%\ashwebsv\how_to_recover_files.txt
%ProgramFiles%\ashpopwz\how_to_recover_files.txt
%ProgramFiles%\ashupd\how_to_recover_files.txt
%HOMEPATH%\local settings\application data\adobe\updater6\how_to_recover_files.txt
%HOMEPATH%\local settings\application data\adobe\how_to_recover_files.txt
%HOMEPATH%\local settings\application data\applicationhistory\how_to_recover_files.txt
%ProgramFiles%\ashserv\how_to_recover_files.txt
%HOMEPATH%\local settings\application data\cef\user data\dictionaries\how_to_recover_files.txt
%HOMEPATH%\local settings\application data\cef\user data\how_to_recover_files.txt
%ProgramFiles%\ash_updatemediator\how_to_recover_files.txt
%ProgramFiles%\avgdiag\how_to_recover_files.txt
%ProgramFiles%\ashskpck\how_to_recover_files.txt
%ProgramFiles%\agb5\how_to_recover_files.txt
%HOMEPATH%\favorites\links\яндекс.url
%ProgramFiles%\ashavast\how_to_recover_files.txt
%HOMEPATH%\local settings\application data\adobe\acrobat\9.0\how_to_recover_files.txt
%HOMEPATH%\local settings\application data\adobe\acrobat\how_to_recover_files.txt
%ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\mappings\win\how_to_recover_files.txt
%ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\mappings\how_to_recover_files.txt
%ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\how_to_recover_files.txt
%ProgramFiles%\adobe\reader 10.0\resource\typesupport\how_to_recover_files.txt
%ProgramFiles%\adobe\reader 10.0\resource\how_to_recover_files.txt
%ProgramFiles%\adobe\reader 10.0\how_to_recover_files.txt
%ProgramFiles%\adobe\how_to_recover_files.txt
%ProgramFiles%\ashmaisv\how_to_recover_files.txt
%ProgramFiles%\ashavsrv\how_to_recover_files.txt
%HOMEPATH%\local settings\application data\adobe\color\how_to_recover_files.txt
%APPDATA%\icqm\icq\html\ua\how_to_recover_files.txt
%ProgramFiles%\microsoft office\templates\presentation designs\how_to_recover_files.txt
%ProgramFiles%\ashlogv\how_to_recover_files.txt
%HOMEPATH%\favorites\links\how_to_recover_files.txt
%APPDATA%\icqm\icq\html\tr\error\how_to_recover_files.txt
%ProgramFiles%\aswregsvr\how_to_recover_files.txt
%APPDATA%\icqm\icq\html\cz\how_to_recover_files.txt
%APPDATA%\icqm\icq\html\de\error\how_to_recover_files.txt
%ProgramFiles%\adobe\reader 10.0\resource\linguistics\providers\proximity\11.00\how_to_recover_files.txt
%HOMEPATH%\start menu\programs\how_to_recover_files.txt
%ProgramFiles%\adobe\reader 10.0\resource\linguistics\providers\proximity\how_to_recover_files.txt
%ProgramFiles%\adobe\reader 10.0\resource\linguistics\how_to_recover_files.txt
%APPDATA%\icqm\icq\html\cz\loading\how_to_recover_files.txt
%ProgramFiles%\adobe\reader 10.0\resource\saslprep\how_to_recover_files.txt
%ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\icu\how_to_recover_files.txt
%HOMEPATH%\userdata\09upir0l\how_to_recover_files.txt
%HOMEPATH%\userdata\e3unqlkn\how_to_recover_files.txt
%ProgramFiles%\adobe\reader 10.0\resource\linguistics\providers\how_to_recover_files.txt
%HOMEPATH%\start menu\programs\winrar\how_to_recover_files.txt
%HOMEPATH%\userdata\ubghkdcj\how_to_recover_files.txt
%HOMEPATH%\templates\how_to_recover_files.txt
%APPDATA%\icqm\icq\html\cz\jabber\how_to_recover_files.txt
%HOMEPATH%\start menu\programs\telegram desktop\how_to_recover_files.txt
%HOMEPATH%\start menu\programs\icq\how_to_recover_files.txt
%APPDATA%\icqm\icq\html\cz\error\how_to_recover_files.txt
%HOMEPATH%\nethood\how_to_recover_files.txt
%HOMEPATH%\printhood\how_to_recover_files.txt
%HOMEPATH%\recent\how_to_recover_files.txt
%ProgramFiles%\adobe\reader 10.0\resource\linguistics\languagenames2\how_to_recover_files.txt
%ProgramFiles%\adobe\reader 10.0\resource\font\how_to_recover_files.txt
C:\msocache\all users\{90120000-0114-0409-0000-0000000ff1ce}-c\groove.en-us\how_to_recover_files.txt
%HOMEPATH%\sendto\how_to_recover_files.txt
%HOMEPATH%\start menu\programs\accessories\accessibility\how_to_recover_files.txt
%HOMEPATH%\start menu\programs\accessories\entertainment\how_to_recover_files.txt
%HOMEPATH%\start menu\programs\accessories\how_to_recover_files.txt
%HOMEPATH%\start menu\programs\administrative tools\how_to_recover_files.txt
%HOMEPATH%\userdata\inafedwn\how_to_recover_files.txt
C:\msocache\all users\{90120000-0114-0409-0000-0000000ff1ce}-c\how_to_recover_files.txt
%ProgramFiles%\adobe\reader 10.0\resource\font\pfm\how_to_recover_files.txt
%APPDATA%\icqm\icq\html\de\jabber\how_to_recover_files.txt
%HOMEPATH%\userdata\how_to_recover_files.txt
%ProgramFiles%\adobe\reader 10.0\setup files\{ac76ba86-7ad7-1033-7b44-aa1000000001}\how_to_recover_files.txt
C:\msocache\all users\{90120000-0115-0409-0000-0000000ff1ce}-c\1033\how_to_recover_files.txt
%APPDATA%\icqm\icq\html\en\loading\how_to_recover_files.txt
%APPDATA%\icqm\icq\html\en\how_to_recover_files.txt
%ProgramFiles%\zonealarm\how_to_recover_files.txt
%APPDATA%\icqm\icq\html\pt\loading\how_to_recover_files.txt
%APPDATA%\icqm\icq\html\ru\error\how_to_recover_files.txt
%ProgramFiles%\ageofconan\how_to_recover_files.txt
%APPDATA%\icqm\icq\html\ru\loading\how_to_recover_files.txt
%ProgramFiles%\ahnsd\how_to_recover_files.txt
%HOMEPATH%\favorites\links\почта.url
%APPDATA%\icqm\icq\html\kz\error\how_to_recover_files.txt
%ProgramFiles%\aim6\how_to_recover_files.txt
%APPDATA%\icqm\icq\html\pt\jabber\how_to_recover_files.txt
%APPDATA%\icqm\icq\html\pt\how_to_recover_files.txt
%APPDATA%\icqm\icq\html\pt\error\how_to_recover_files.txt
%ProgramFiles%\microsoft office\office10\how_to_recover_files.txt
%ProgramFiles%\adobe\reader 10.0\setup files\how_to_recover_files.txt
%APPDATA%\icqm\icq\video\how_to_recover_files.txt
%HOMEPATH%\local settings\application data\cef\how_to_recover_files.txt
%HOMEPATH%\start menu\how_to_recover_files.txt
C:\msocache\all users\{90120000-0115-0409-0000-0000000ff1ce}-c\how_to_recover_files.txt
%APPDATA%\icqm\icq\html\de\loading\how_to_recover_files.txt
%ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\mappings\adobe\how_to_recover_files.txt
%APPDATA%\icqm\icq\html\de\how_to_recover_files.txt
C:\msocache\all users\{90120000-0117-0409-0000-0000000ff1ce}-c\access.en-us\how_to_recover_files.txt
C:\msocache\all users\{90120000-0117-0409-0000-0000000ff1ce}-c\how_to_recover_files.txt
C:\msocache\all users\how_to_recover_files.txt
C:\msocache\how_to_recover_files.txt
%APPDATA%\icqm\icq\html\en\error\how_to_recover_files.txt
%HOMEPATH%\desktop\how_to_recover_files.txt
%APPDATA%\icqm\icq\skin\how_to_recover_files.txt
%APPDATA%\icqm\icq\skin_cache\how_to_recover_files.txt
%APPDATA%\icqm\icq\html\en\jabber\how_to_recover_files.txt
%ProgramFiles%\adobe\reader 10.0\reader\how_to_recover_files.txt
%HOMEPATH%\voip\how_to_recover_files.txt
%ProgramFiles%\adobe\reader 10.0\reader\tracker\how_to_recover_files.txt
%APPDATA%\adobe\how_to_recover_files.txt
%ProgramFiles%\avgemc\how_to_recover_files.txt
%ProgramFiles%\microsoft office\media\office12\1033\how_to_recover_files.txt
%HOMEPATH%\local settings\application data\google\chrome\user data\swiftshader\how_to_recover_files.txt
%ProgramFiles%\btini\how_to_recover_files.txt
%HOMEPATH%\local settings\application data\google\chrome\user data\swreporter\how_to_recover_files.txt
%HOMEPATH%\local settings\application data\google\chrome\user data\widevinecdm\how_to_recover_files.txt
%APPDATA%\icqm\icq\translation\how_to_recover_files.txt
%HOMEPATH%\local settings\application data\google\chrome\user data\pepperflash\how_to_recover_files.txt
%HOMEPATH%\local settings\application data\google\chrome\user data\pnacl\how_to_recover_files.txt
%ProgramFiles%\bdsubmitwiz\how_to_recover_files.txt
%ProgramFiles%\cavsn\how_to_recover_files.txt
%ProgramFiles%\btinint\how_to_recover_files.txt
%ProgramFiles%\cleaner\how_to_recover_files.txt
%APPDATA%\mozilla\firefox\profiles\22ie2h77.default\bookmarkbackups\how_to_recover_files.txt
%APPDATA%\qipguard\how_to_recover_files.txt
%ProgramFiles%\bdsubmit\how_to_recover_files.txt
%ProgramFiles%\claw95cf\how_to_recover_files.txt
%ProgramFiles%\claw95\how_to_recover_files.txt
%ProgramFiles%\blindman\how_to_recover_files.txt
%ProgramFiles%\microsoft office\clipart\publisher\backgrounds\how_to_recover_files.txt
%ProgramFiles%\blackd\how_to_recover_files.txt
%ProgramFiles%\bdoesrv\how_to_recover_files.txt
%ProgramFiles%\clamtray\how_to_recover_files.txt
%ProgramFiles%\cavscons\how_to_recover_files.txt
%ProgramFiles%\blackice\how_to_recover_files.txt
%APPDATA%\icqm\icq\smiles\statuses\aim\how_to_recover_files.txt
%ProgramFiles%\microsoft office\clipart\publisher\how_to_recover_files.txt
%ProgramFiles%\clamwin\how_to_recover_files.txt
%ProgramFiles%\microsoft visual studio .net 2003\common7\packages\debugger\1033\how_to_recover_files.txt
%ProgramFiles%\microsoft visual studio .net 2003\common7\packages\debugger\how_to_recover_files.txt
%ProgramFiles%\microsoft visual studio .net 2003\common7\packages\how_to_recover_files.txt
%ProgramFiles%\microsoft visual studio .net 2003\common7\how_to_recover_files.txt
%ProgramFiles%\cavse\how_to_recover_files.txt
%APPDATA%\mozilla\firefox\profiles\22ie2h77.default\crashes\events\how_to_recover_files.txt
%ProgramFiles%\bdss\how_to_recover_files.txt
%APPDATA%\mozilla\firefox\profiles\22ie2h77.default\crashes\how_to_recover_files.txt
%ProgramFiles%\cavsub\how_to_recover_files.txt
%ProgramFiles%\cleaner3\how_to_recover_files.txt
%ProgramFiles%\defensewall\how_to_recover_files.txt
%APPDATA%\opera software\opera stable\dictionaries\how_to_recover_files.txt
%ProgramFiles%\cavasm\how_to_recover_files.txt
%APPDATA%\sun\java\deployment\cache\6.0\10\how_to_recover_files.txt
%APPDATA%\sun\java\deployment\cache\6.0\11\how_to_recover_files.txt
%APPDATA%\sun\java\deployment\cache\6.0\12\how_to_recover_files.txt
%APPDATA%\sun\java\deployment\cache\6.0\13\how_to_recover_files.txt
%ProgramFiles%\defwatch\how_to_recover_files.txt
%APPDATA%\icqm\icq\smiles\statuses\gtalk\how_to_recover_files.txt
%ProgramFiles%\cmain\how_to_recover_files.txt
%APPDATA%\sun\java\deployment\cache\6.0\14\how_to_recover_files.txt
%ProgramFiles%\cavuserupd\how_to_recover_files.txt
%APPDATA%\sun\java\deployment\cache\6.0\15\how_to_recover_files.txt
%APPDATA%\sun\java\deployment\cache\6.0\16\how_to_recover_files.txt
%APPDATA%\sun\java\deployment\cache\6.0\17\how_to_recover_files.txt
%APPDATA%\mozilla\firefox\profiles\22ie2h77.default\minidumps\how_to_recover_files.txt
%APPDATA%\qip\how_to_recover_files.txt
%APPDATA%\icqm\icq\html\bg\how_to_recover_files.txt
%APPDATA%\sun\java\deployment\cache\6.0\0\how_to_recover_files.txt
%ProgramFiles%\microsoft visual studio .net 2003\vc7\bin\how_to_recover_files.txt
%APPDATA%\sun\java\au\how_to_recover_files.txt
%APPDATA%\mozilla\firefox\profiles\22ie2h77.default\datareporting\how_to_recover_files.txt
%APPDATA%\mozilla\firefox\profiles\22ie2h77.default\gmp\how_to_recover_files.txt
%ProgramFiles%\cabalmain\how_to_recover_files.txt
%ProgramFiles%\cavsubmit\how_to_recover_files.txt
%ProgramFiles%\dbtool\how_to_recover_files.txt
%ProgramFiles%\clisvc\how_to_recover_files.txt
%ProgramFiles%\microsoft office\document themes 12\theme colors\how_to_recover_files.txt
%APPDATA%\mozilla\firefox\profiles\22ie2h77.default\gmp-gmpopenh264\1.4\how_to_recover_files.txt
%ProgramFiles%\cafix\how_to_recover_files.txt
%APPDATA%\mozilla\firefox\profiles\22ie2h77.default\gmp-gmpopenh264\how_to_recover_files.txt
%ProgramFiles%\clrcche\how_to_recover_files.txt
%ProgramFiles%\cavapp\how_to_recover_files.txt
%ProgramFiles%\cavumas\how_to_recover_files.txt
%APPDATA%\sun\java\deployment\cache\6.0\1\how_to_recover_files.txt
%ProgramFiles%\clamscan\how_to_recover_files.txt
C:\msocache\all users\{90120000-00a1-0409-0000-0000000ff1ce}-c\how_to_recover_files.txt
%ProgramFiles%\bdwizreg\how_to_recover_files.txt
%ProgramFiles%\bdsurvey\how_to_recover_files.txt
%APPDATA%\mirc\sounds\how_to_recover_files.txt
%ProgramFiles%\avgrssvc\how_to_recover_files.txt
%APPDATA%\mirc\how_to_recover_files.txt
%APPDATA%\mozilla\extensions\how_to_recover_files.txt
%APPDATA%\mirc\logs\how_to_recover_files.txt
%ProgramFiles%\avcenter\how_to_recover_files.txt
%APPDATA%\mirc\scripts\how_to_recover_files.txt
%ProgramFiles%\avgscan\how_to_recover_files.txt
%ProgramFiles%\avciman\how_to_recover_files.txt
%APPDATA%\mozilla\firefox\crash reports\how_to_recover_files.txt
%ProgramFiles%\avgupden\how_to_recover_files.txt
%ProgramFiles%\avpcc\how_to_recover_files.txt
%ProgramFiles%\avnotify\how_to_recover_files.txt
%APPDATA%\mirc\downloads\how_to_recover_files.txt
%APPDATA%\mozilla\firefox\crash reports\events\how_to_recover_files.txt
%ProgramFiles%\avadmin\how_to_recover_files.txt
%ProgramFiles%\avgnpsvc\how_to_recover_files.txt
%ProgramFiles%\ashsimp2\how_to_recover_files.txt
%ProgramFiles%\ashsimpl\how_to_recover_files.txt
%ProgramFiles%\autodown\how_to_recover_files.txt
%APPDATA%\icqm\icq\html\uz\jabber\how_to_recover_files.txt
%ProgramFiles%\autostartexplorer\how_to_recover_files.txt
%ProgramFiles%\ashskpcc\how_to_recover_files.txt
%ProgramFiles%\avginet\how_to_recover_files.txt
%ProgramFiles%\avgfwsrv\how_to_recover_files.txt
%ProgramFiles%\avgnpdln\how_to_recover_files.txt
%ProgramFiles%\autotrace\how_to_recover_files.txt
%APPDATA%\icqm\icq\html\uz\loading\how_to_recover_files.txt
%APPDATA%\icqm\icq\html\uz\how_to_recover_files.txt
%APPDATA%\icqm\icq\html\how_to_recover_files.txt
%APPDATA%\mirc\channels\how_to_recover_files.txt
%ProgramFiles%\avcmd\how_to_recover_files.txt
%ProgramFiles%\avkservice\how_to_recover_files.txt
%ProgramFiles%\avgupsvc\how_to_recover_files.txt
%ProgramFiles%\avpm\how_to_recover_files.txt
%APPDATA%\icqm\icq\sounds\how_to_recover_files.txt
%ProgramFiles%\microsoft visual studio .net 2003\common7\ide\solutiontemplates\how_to_recover_files.txt
%HOMEPATH%\local settings\application data\mozilla\firefox\profiles\22ie2h77.default\cache2\doomed\how_to_recover_files.txt
%ProgramFiles%\bdagent\how_to_recover_files.txt
%ProgramFiles%\microsoft visual studio .net 2003\common7\ide\how_to_recover_files.txt
%ProgramFiles%\avkserv\how_to_recover_files.txt
%ProgramFiles%\bdswitch\how_to_recover_files.txt
%ProgramFiles%\bdmcon\how_to_recover_files.txt
%APPDATA%\oracle\java\jre1.8.0_60\how_to_recover_files.txt
%APPDATA%\oracle\java\how_to_recover_files.txt
%APPDATA%\oracle\how_to_recover_files.txt
%HOMEPATH%\local settings\application data\google\chrome\user data\caps\how_to_recover_files.txt
%ProgramFiles%\cavoar\how_to_recover_files.txt
%APPDATA%\qip\profiles\logs\how_to_recover_files.txt
%ProgramFiles%\bdnews\how_to_recover_files.txt
%ProgramFiles%\cavq\how_to_recover_files.txt
%ProgramFiles%\avinitnt\how_to_recover_files.txt
%APPDATA%\qip\profiles\how_to_recover_files.txt
%ProgramFiles%\aswupdsv\how_to_recover_files.txt
%ProgramFiles%\backweb-4476822\how_to_recover_files.txt
%ProgramFiles%\avscan\how_to_recover_files.txt
%ProgramFiles%\avgvv\how_to_recover_files.txt
%ProgramFiles%\avconfig\how_to_recover_files.txt
%HOMEPATH%\local settings\application data\chromium\user data\default\how_to_recover_files.txt
%ProgramFiles%\avsynmgr\how_to_recover_files.txt
%ProgramFiles%\avconsol\how_to_recover_files.txt
%HOMEPATH%\local settings\application data\chromium\user data\how_to_recover_files.txt
%HOMEPATH%\local settings\application data\chromium\how_to_recover_files.txt
%ProgramFiles%\avgw\how_to_recover_files.txt
%ProgramFiles%\b2\how_to_recover_files.txt
%ProgramFiles%\avgamsvr\how_to_recover_files.txt
%ProgramFiles%\avgwizfw\how_to_recover_files.txt
%ProgramFiles%\microsoft visual studio .net 2003\common7\ide\1033\how_to_recover_files.txt
%HOMEPATH%\local settings\application data\mozilla\firefox\mozilla firefox\updates\0\how_to_recover_files.txt
%HOMEPATH%\local settings\application data\mozilla\firefox\mozilla firefox\updates\how_to_recover_files.txt
%HOMEPATH%\local settings\application data\mozilla\firefox\mozilla firefox\how_to_recover_files.txt
%ProgramFiles%\avkwctl\how_to_recover_files.txt
%APPDATA%\icqm\icq\html\bg\loading\how_to_recover_files.txt
%ProgramFiles%\adobe\reader 10.0\reader\spplugins\how_to_recover_files.txt
%ProgramFiles%\adobe\reader 10.0\reader\services\how_to_recover_files.txt
C:\documents and settings\localservice\how_to_recover_files.txt
C:\documents and settings\networkservice\application data\microsoft\credentials\s-1-5-20\how_to_recover_files.txt
%ALLUSERSPROFILE%\start menu\programs\mirc\how_to_recover_files.txt
C:\documents and settings\localservice\local settings\<INETFILES>\content.ie5\qiszf4kx\how_to_recover_files.txt
%ALLUSERSPROFILE%\start menu\programs\qip 2012\how_to_recover_files.txt
C:\documents and settings\networkservice\application data\microsoft\media player\how_to_recover_files.txt
C:\documents and settings\localservice\local settings\how_to_recover_files.txt
%ALLUSERSPROFILE%\start menu\programs\steam\how_to_recover_files.txt
C:\documents and settings\networkservice\application data\microsoft\systemcertificates\my\crls\how_to_recover_files.txt
C:\documents and settings\networkservice\application data\microsoft\systemcertificates\my\ctls\how_to_recover_files.txt
%ALLUSERSPROFILE%\start menu\programs\winrar\how_to_recover_files.txt
C:\documents and settings\networkservice\application data\microsoft\credentials\how_to_recover_files.txt
%ALLUSERSPROFILE%\start menu\programs\microsoft office\how_to_recover_files.txt
%ALLUSERSPROFILE%\start menu\how_to_recover_files.txt
C:\documents and settings\networkservice\application data\microsoft\systemcertificates\my\certificates\how_to_recover_files.txt
C:\documents and settings\localservice\local settings\<INETFILES>\how_to_recover_files.txt
%ALLUSERSPROFILE%\start menu\programs\microsoft office\microsoft office tools\how_to_recover_files.txt
C:\documents and settings\localservice\local settings\<INETFILES>\content.ie5\o4q6sqop\how_to_recover_files.txt
C:\documents and settings\localservice\local settings\application data\microsoft\how_to_recover_files.txt
%ALLUSERSPROFILE%\start menu\programs\accessories\how_to_recover_files.txt
%ALLUSERSPROFILE%\start menu\programs\administrative tools\how_to_recover_files.txt
%ALLUSERSPROFILE%\start menu\programs\games\how_to_recover_files.txt
%ALLUSERSPROFILE%\start menu\programs\google chrome\how_to_recover_files.txt
C:\documents and settings\localservice\local settings\application data\microsoft\credentials\s-1-5-19\how_to_recover_files.txt
C:\documents and settings\localservice\local settings\application data\how_to_recover_files.txt
C:\documents and settings\localservice\local settings\history\how_to_recover_files.txt
C:\documents and settings\localservice\local settings\temp\how_to_recover_files.txt
%ALLUSERSPROFILE%\start menu\programs\microsoft .net framework sdk v1.1\how_to_recover_files.txt
C:\documents and settings\localservice\local settings\<INETFILES>\content.ie5\9stcdn6y\how_to_recover_files.txt
C:\documents and settings\localservice\local settings\<INETFILES>\content.ie5\mqraz07n\how_to_recover_files.txt
%ALLUSERSPROFILE%\start menu\programs\how_to_recover_files.txt
C:\documents and settings\localservice\local settings\history\history.ie5\how_to_recover_files.txt
%ALLUSERSPROFILE%\start menu\programs\accessories\system tools\how_to_recover_files.txt
C:\documents and settings\networkservice\application data\microsoft\systemcertificates\my\how_to_recover_files.txt
%ProgramFiles%\adobe\acrobat.com\assets\icons\how_to_recover_files.txt
C:\documents and settings\networkservice\local settings\<INETFILES>\content.ie5\z9pmdpek\how_to_recover_files.txt
C:\documents and settings\networkservice\application data\microsoft\systemcertificates\how_to_recover_files.txt
C:\documents and settings\networkservice\local settings\<INETFILES>\how_to_recover_files.txt
C:\documents and settings\networkservice\local settings\how_to_recover_files.txt
C:\documents and settings\networkservice\how_to_recover_files.txt
%ALLUSERSPROFILE%\documents\my music\sample music\how_to_recover_files.txt
%HOMEPATH%\.oracle_jre_usage\how_to_recover_files.txt
%ProgramFiles%\adobe\acrobat.com\meta-inf\air\how_to_recover_files.txt
%ProgramFiles%\adobe\acrobat.com\meta-inf\how_to_recover_files.txt
%ProgramFiles%\adobe\acrobat.com\how_to_recover_files.txt
%APPDATA%\.purple\certificates\x509\tls_peers\how_to_recover_files.txt
%APPDATA%\.purple\certificates\x509\how_to_recover_files.txt
%APPDATA%\.purple\certificates\how_to_recover_files.txt
%APPDATA%\.purple\smileys\how_to_recover_files.txt
%APPDATA%\.purple\how_to_recover_files.txt
C:\documents and settings\networkservice\local settings\<INETFILES>\content.ie5\h8mbgrq8\how_to_recover_files.txt
C:\documents and settings\networkservice\local settings\<INETFILES>\content.ie5\etuaii8e\how_to_recover_files.txt
C:\documents and settings\networkservice\local settings\<INETFILES>\content.ie5\how_to_recover_files.txt
C:\documents and settings\localservice\local settings\application data\microsoft\credentials\how_to_recover_files.txt
%ALLUSERSPROFILE%\start menu\programs\accessories\entertainment\how_to_recover_files.txt
%ProgramFiles%\about\how_to_recover_files.txt
%ALLUSERSPROFILE%\templates\how_to_recover_files.txt
%ALLUSERSPROFILE%\desktop\how_to_recover_files.txt
%ALLUSERSPROFILE%\documents\my music\my playlists\how_to_recover_files.txt
C:\documents and settings\networkservice\application data\microsoft\how_to_recover_files.txt
C:\documents and settings\networkservice\application data\how_to_recover_files.txt
C:\documents and settings\networkservice\cookies\how_to_recover_files.txt
C:\documents and settings\networkservice\local settings\application data\microsoft\credentials\s-1-5-20\how_to_recover_files.txt
C:\documents and settings\networkservice\local settings\application data\microsoft\credentials\how_to_recover_files.txt
C:\documents and settings\networkservice\local settings\application data\microsoft\how_to_recover_files.txt
C:\documents and settings\networkservice\local settings\application data\how_to_recover_files.txt
C:\documents and settings\networkservice\local settings\history\history.ie5\how_to_recover_files.txt
C:\documents and settings\networkservice\local settings\history\how_to_recover_files.txt
%ProgramFiles%\adobe\acrobat.com\bin-debug\how_to_recover_files.txt
C:\documents and settings\networkservice\local settings\<INETFILES>\content.ie5\ee7gwdg8\how_to_recover_files.txt
%ProgramFiles%\adobe\acrobat.com\assets\how_to_recover_files.txt
C:\documents and settings\networkservice\local settings\temp\how_to_recover_files.txt
%APPDATA%\sun\java\deployment\cache\6.0\18\how_to_recover_files.txt
%ProgramFiles%\adobe\reader 10.0\esl\how_to_recover_files.txt
%ALLUSERSPROFILE%\favorites\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\microsoft\msdaipp\offline\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\microsoft\msdaipp\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\microsoft\msdn\7.0\1028\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\microsoft\msdn\7.0\1031\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\microsoft\html help\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\microsoft\msdn\7.0\1033\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\microsoft\media player\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\microsoft\msdn\7.0\1040\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\microsoft\msdn\7.0\1042\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\microsoft\msdn\7.0\1046\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\microsoft\msdn\7.0\1049\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\microsoft\msdn\7.0\1050\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\microsoft\msdn\7.0\1036\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\microsoft\dbgclr\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\microsoft\msdn\7.0\1041\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\microsoft\dbgclr\7.1\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\microsoft\dbgclr\7.1\1033\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\adobe\acrobat\10.0\replicate\security\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\adobe\acrobat\10.0\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\adobe\acrobat\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\adobe\arm\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\adobe\setup\{ac76ba86-7ad7-1033-7b44-aa1000000001}\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\adobe\setup\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\adobe\updater6\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\adobe\acrobat\10.0\replicate\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\adobe\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\microsoft\crypto\dss\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\microsoft\crypto\rsa\machinekeys\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\microsoft\crypto\rsa\s-1-5-18\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\microsoft\crypto\rsa\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\microsoft\crypto\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\microsoft\msdn\7.0\2052\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\microsoft\crypto\dss\machinekeys\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\microsoft\msdn\7.0\3082\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\microsoft\media index\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\microsoft\msdn\7.0\how_to_recover_files.txt
C:\documents and settings\localservice\application data\microsoft\credentials\s-1-5-19\how_to_recover_files.txt
C:\documents and settings\localservice\application data\microsoft\media player\how_to_recover_files.txt
%ProgramFiles%\admunch\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\microsoft\office\groove\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\microsoft\office\how_to_recover_files.txt
C:\documents and settings\localservice\application data\microsoft\systemcertificates\my\certificates\how_to_recover_files.txt
C:\documents and settings\localservice\application data\microsoft\systemcertificates\my\crls\how_to_recover_files.txt
C:\documents and settings\localservice\application data\microsoft\systemcertificates\my\ctls\how_to_recover_files.txt
C:\documents and settings\localservice\application data\microsoft\systemcertificates\my\how_to_recover_files.txt
C:\documents and settings\localservice\application data\microsoft\systemcertificates\how_to_recover_files.txt
C:\documents and settings\localservice\application data\microsoft\how_to_recover_files.txt
C:\documents and settings\localservice\application data\how_to_recover_files.txt
C:\documents and settings\localservice\cookies\how_to_recover_files.txt
%ALLUSERSPROFILE%\drm\how_to_recover_files.txt
%ProgramFiles%\ackwin32\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\microsoft\msdn\8.0\how_to_recover_files.txt
C:\documents and settings\localservice\application data\microsoft\credentials\how_to_recover_files.txt
%ALLUSERSPROFILE%\start menu\programs\accessories\communications\how_to_recover_files.txt
%ALLUSERSPROFILE%\start menu\programs\accessories\accessibility\how_to_recover_files.txt
%ProgramFiles%\aavshield\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\microsoft\network\connections\cm\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\microsoft\network\connections\pbk\how_to_recover_files.txt
%ProgramFiles%\360tray\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\microsoft\network\connections\how_to_recover_files.txt
%ProgramFiles%\a2cmd\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\microsoft\network\downloader\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\microsoft\msdn\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\microsoft\network\how_to_recover_files.txt
%ProgramFiles%\a2hijackfree\how_to_recover_files.txt
%ProgramFiles%\a2scan\how_to_recover_files.txt
%ProgramFiles%\a2service\how_to_recover_files.txt
%ProgramFiles%\a2start\how_to_recover_files.txt
%ProgramFiles%\a2upd\how_to_recover_files.txt
%ProgramFiles%\a2wizard\how_to_recover_files.txt
%ProgramFiles%\a2guard\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\microsoft\office\data\how_to_recover_files.txt
%APPDATA%\mozilla\firefox\profiles\22ie2h77.default\healthreport\how_to_recover_files.txt
%APPDATA%\adobe\acrobat\10.0\collab\how_to_recover_files.txt
%APPDATA%\adobe\acrobat\10.0\security\how_to_recover_files.txt
C:\documents and settings\default user\start menu\programs\accessories\accessibility\how_to_recover_files.txt
C:\msocache\all users\{90120000-0018-0409-0000-0000000ff1ce}-c\how_to_recover_files.txt
%ProgramFiles%\maplestory\how_to_recover_files.txt
C:\documents and settings\default user\start menu\programs\accessories\entertainment\how_to_recover_files.txt
%ProgramFiles%\magent\how_to_recover_files.txt
C:\documents and settings\default user\start menu\programs\accessories\how_to_recover_files.txt
%ProgramFiles%\malwareremoval\how_to_recover_files.txt
C:\documents and settings\default user\start menu\programs\how_to_recover_files.txt
%ProgramFiles%\maxthon\how_to_recover_files.txt
%ProgramFiles%\mcmnhdlr\how_to_recover_files.txt
%APPDATA%\icqm\icq\database\how_to_recover_files.txt
C:\msocache\all users\{90120000-0019-0409-0000-0000000ff1ce}-c\how_to_recover_files.txt
C:\documents and settings\default user\start menu\programs\startup\how_to_recover_files.txt
%ProgramFiles%\mcregwiz\how_to_recover_files.txt
C:\documents and settings\default user\start menu\how_to_recover_files.txt
C:\documents and settings\default user\sendto\how_to_recover_files.txt
%ALLUSERSPROFILE%\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\how_to_recover_files.txt
C:\documents and settings\default user\local settings\<INETFILES>\content.ie5\etuaii8e\how_to_recover_files.txt
C:\documents and settings\default user\local settings\<INETFILES>\content.ie5\h8mbgrq8\how_to_recover_files.txt
C:\documents and settings\default user\local settings\<INETFILES>\content.ie5\z9pmdpek\how_to_recover_files.txt
C:\documents and settings\default user\local settings\<INETFILES>\content.ie5\how_to_recover_files.txt
C:\documents and settings\default user\local settings\<INETFILES>\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\package cache\how_to_recover_files.txt
C:\documents and settings\default user\local settings\how_to_recover_files.txt
C:\documents and settings\default user\my documents\how_to_recover_files.txt
C:\documents and settings\default user\nethood\how_to_recover_files.txt
C:\documents and settings\default user\printhood\how_to_recover_files.txt
C:\documents and settings\default user\recent\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\sun\java\java update\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\sun\java\how_to_recover_files.txt
C:\msocache\all users\{90120000-0016-0409-0000-0000000ff1ce}-c\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\sun\how_to_recover_files.txt
%APPDATA%\icqm\icq\dll\how_to_recover_files.txt
%ProgramFiles%\mcshield\how_to_recover_files.txt
%APPDATA%\icqm\icq\fonts\how_to_recover_files.txt
%ProgramFiles%\mcupdmgr\how_to_recover_files.txt
%ProgramFiles%\adobe\reader 10.0\reader\plug_ins\acroform\pmp\how_to_recover_files.txt
%ProgramFiles%\adobe\reader 10.0\reader\plug_ins\acroform\how_to_recover_files.txt
%APPDATA%\icqm\icq\html\bg\error\how_to_recover_files.txt
C:\msocache\all users\{90120000-0030-0000-0000-0000000ff1ce}-c\how_to_recover_files.txt
%ProgramFiles%\adobe\reader 10.0\reader\plug_ins\annotations\stamps\enu\how_to_recover_files.txt
%ProgramFiles%\adobe\reader 10.0\reader\plug_ins\annotations\stamps\how_to_recover_files.txt
%ProgramFiles%\adobe\reader 10.0\reader\plug_ins\annotations\how_to_recover_files.txt
%ProgramFiles%\adobe\reader 10.0\reader\plug_ins\multimedia\mpp\how_to_recover_files.txt
%ProgramFiles%\adobe\reader 10.0\reader\plug_ins\multimedia\how_to_recover_files.txt
%ProgramFiles%\adobe\reader 10.0\reader\plug_ins\how_to_recover_files.txt
%ProgramFiles%\adobe\reader 10.0\reader\plug_ins3d\prc\how_to_recover_files.txt
%ProgramFiles%\adobe\reader 10.0\reader\plug_ins3d\how_to_recover_files.txt
C:\msocache\all users\{90120000-0044-0409-0000-0000000ff1ce}-c\how_to_recover_files.txt
%APPDATA%\icqm\icq\html\bg\jabber\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\package cache\{f0080ca2-80ae-4958-b6eb-e8fa916d744a}\how_to_recover_files.txt
%APPDATA%\icqm\icq\graphics\how_to_recover_files.txt
C:\documents and settings\default user\local settings\<INETFILES>\content.ie5\ee7gwdg8\how_to_recover_files.txt
%APPDATA%\icqm\icq\graphics\phone\how_to_recover_files.txt
%APPDATA%\adobe\acrobat\10.0\forms\how_to_recover_files.txt
C:\msocache\all users\{90120000-001a-0409-0000-0000000ff1ce}-c\how_to_recover_files.txt
%ProgramFiles%\mcvsshld\how_to_recover_files.txt
%ProgramFiles%\memstring\how_to_recover_files.txt
C:\msocache\all users\{90120000-001b-0409-0000-0000000ff1ce}-c\how_to_recover_files.txt
C:\documents and settings\default user\templates\how_to_recover_files.txt
C:\documents and settings\default user\how_to_recover_files.txt
C:\recycler\s-1-5-21-1229272821-842925246-1060284298-1003\how_to_recover_files.txt
C:\recycler\how_to_recover_files.txt
%ProgramFiles%\messenger\how_to_recover_files.txt
C:\msocache\all users\{90120000-002c-0409-0000-0000000ff1ce}-c\proof.en\how_to_recover_files.txt
%ProgramFiles%\mfpmp\how_to_recover_files.txt
%ProgramFiles%\microsoft frontpage\version3.0\bin\how_to_recover_files.txt
%ProgramFiles%\microsoft frontpage\version3.0\how_to_recover_files.txt
%ProgramFiles%\microsoft frontpage\how_to_recover_files.txt
C:\msocache\all users\{90120000-002c-0409-0000-0000000ff1ce}-c\proof.es\how_to_recover_files.txt
C:\msocache\all users\{90120000-002c-0409-0000-0000000ff1ce}-c\how_to_recover_files.txt
%APPDATA%\adobe\acrobat\10.0\javascripts\how_to_recover_files.txt
C:\msocache\all users\{90120000-002c-0409-0000-0000000ff1ce}-c\proof.fr\how_to_recover_files.txt
C:\documents and settings\localservice\local settings\<INETFILES>\content.ie5\how_to_recover_files.txt
%APPDATA%\adobe\acrobat\9.0\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\package cache\{01db25f3-1b76-4d97-88c8-1c90634d88fb}\how_to_recover_files.txt
%APPDATA%\adobe\acrobat\how_to_recover_files.txt
<Current directory>\how_to_recover_files.txt
%ProgramFiles%\adobe\reader 10.0\reader\browser\how_to_recover_files.txt
%APPDATA%\adobe\flash player\assetcache\mc4yk349\how_to_recover_files.txt
%ALLUSERSPROFILE%\documents\how_to_recover_files.txt
C:\documents and settings\default user\application data\microsoft\systemcertificates\my\certificates\how_to_recover_files.txt
C:\documents and settings\default user\application data\microsoft\systemcertificates\my\ctls\how_to_recover_files.txt
%APPDATA%\adobe\flash player\assetcache\how_to_recover_files.txt
C:\documents and settings\default user\application data\microsoft\systemcertificates\my\how_to_recover_files.txt
%APPDATA%\adobe\flash player\how_to_recover_files.txt
C:\documents and settings\default user\application data\microsoft\media player\how_to_recover_files.txt
%APPDATA%\adobe\headlights\how_to_recover_files.txt
C:\documents and settings\default user\application data\microsoft\systemcertificates\my\crls\how_to_recover_files.txt
%APPDATA%\adobe\acrobat\9.0\javascripts\how_to_recover_files.txt
%ALLUSERSPROFILE%\documents\my videos\how_to_recover_files.txt
%ALLUSERSPROFILE%\documents\my pictures\how_to_recover_files.txt
%APPDATA%\adobe\acrobat\10.0\how_to_recover_files.txt
%ALLUSERSPROFILE%\documents\my music\sample playlists\00107ff6\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\microsoft\user account pictures\default pictures\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\microsoft\user account pictures\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\microsoft\how_to_recover_files.txt
%APPDATA%\adobe\acrobat\10.0\security\crlcache\how_to_recover_files.txt
%ALLUSERSPROFILE%\documents\my music\sample playlists\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\microsoft help\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\oracle\java\installcache\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\oracle\java\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\oracle\how_to_recover_files.txt
%APPDATA%\adobe\acrobat\9.0\forms\how_to_recover_files.txt
%ALLUSERSPROFILE%\documents\my pictures\sample pictures\how_to_recover_files.txt
%ALLUSERSPROFILE%\documents\my music\how_to_recover_files.txt
%ProgramFiles%\adobe\reader 10.0\reader\air\how_to_recover_files.txt
C:\documents and settings\default user\application data\microsoft\systemcertificates\how_to_recover_files.txt
C:\documents and settings\default user\application data\microsoft\how_to_recover_files.txt
%ProgramFiles%\adobe\reader 10.0\reader\idtemplates\enu\how_to_recover_files.txt
C:\documents and settings\default user\application data\how_to_recover_files.txt
%ProgramFiles%\adobe\reader 10.0\reader\legal\enu\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\package cache\{be960c1c-7bad-3de6-8b1a-2616fe532845}v14.0.23026\packages\vcruntimeadditional_x86\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\package cache\{be960c1c-7bad-3de6-8b1a-2616fe532845}v14.0.23026\packages\how_to_recover_files.txt
%ProgramFiles%\adobe\reader 10.0\reader\legal\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\package cache\{be960c1c-7bad-3de6-8b1a-2616fe532845}v14.0.23026\how_to_recover_files.txt
C:\documents and settings\default user\local settings\application data\microsoft\media player\how_to_recover_files.txt
C:\documents and settings\default user\local settings\application data\microsoft\how_to_recover_files.txt
C:\documents and settings\default user\local settings\application data\how_to_recover_files.txt
C:\msocache\all users\{90120000-0010-0409-0000-0000000ff1ce}-c\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\package cache\{615bc16d-60f5-482e-91b3-b51d8130963b}\how_to_recover_files.txt
%APPDATA%\icq-profile\base\how_to_recover_files.txt
%APPDATA%\icq-profile\update\splash_banner\how_to_recover_files.txt
C:\documents and settings\default user\local settings\history\history.ie5\how_to_recover_files.txt
C:\documents and settings\default user\local settings\history\how_to_recover_files.txt
C:\documents and settings\default user\local settings\temp\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\package cache\{a2563e55-3bec-3828-8d67-e5e8b9e8b675}v14.0.23026\how_to_recover_files.txt
%APPDATA%\icq-profile\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\package cache\{a2563e55-3bec-3828-8d67-e5e8b9e8b675}v14.0.23026\packages\how_to_recover_files.txt
%APPDATA%\icq-profile\update\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\package cache\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\how_to_recover_files.txt
%ProgramFiles%\adobe\reader 10.0\reader\idtemplates\how_to_recover_files.txt
%APPDATA%\adobe\linguistics\dictionaries\adobe custom dictionary\all\how_to_recover_files.txt
%APPDATA%\adobe\linguistics\dictionaries\adobe custom dictionary\brt\how_to_recover_files.txt
%APPDATA%\adobe\linguistics\dictionaries\adobe custom dictionary\can\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\package cache\{2af972c7-13b0-4978-92a8-fee26a4fb4e9}\how_to_recover_files.txt
%APPDATA%\adobe\linguistics\dictionaries\adobe custom dictionary\eng\how_to_recover_files.txt
C:\documents and settings\default user\cookies\how_to_recover_files.txt
C:\documents and settings\default user\desktop\how_to_recover_files.txt
%APPDATA%\adobe\linguistics\dictionaries\adobe custom dictionary\how_to_recover_files.txt
%APPDATA%\adobe\linguistics\dictionaries\how_to_recover_files.txt
%APPDATA%\adobe\linguistics\how_to_recover_files.txt
%APPDATA%\adobe\logtransport2\how_to_recover_files.txt
C:\documents and settings\default user\favorites\how_to_recover_files.txt
%ALLUSERSPROFILE%\application data\package cache\{a2563e55-3bec-3828-8d67-e5e8b9e8b675}v14.0.23026\packages\vcruntimeminimum_x86\how_to_recover_files.txt
%ProgramFiles%\adobe\reader 10.0\reader\javascripts\how_to_recover_files.txt
%APPDATA%\sun\java\deployment\cache\6.0\19\how_to_recover_files.txt

Moves the following files

from %ProgramFiles%\360tray\360tray.exe to %ProgramFiles%\360tray\360tray.exe.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0216516.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0216516.wmf.gоod
from %ProgramFiles%\microsoft office\office12\reminder.wav to %ProgramFiles%\microsoft office\office12\reminder.wav.gоod
from %APPDATA%\icqm\icq\smiles\flash\kot_obida.swf to %APPDATA%\icqm\icq\smiles\flash\kot_obida.swf.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\new.h to %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\new.h.gоod
from %ProgramFiles%\microsoft office\media\office12\autoshap\bd18209_.wmf to %ProgramFiles%\microsoft office\media\office12\autoshap\bd18209_.wmf.gоod
from %TEMP%\downloader.exe to %TEMP%\downloader.exe.gоod
from %ProgramFiles%\microsoft office\media\office12\lines\bd10307_.gif to %ProgramFiles%\microsoft office\media\office12\lines\bd10307_.gif.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd10300_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd10300_.gif.gоod
from %APPDATA%\icqm\icq\smiles\smiles\animated\devil.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\devil.gif.gоod
from %ProgramFiles%\fsavaui\fsavaui.exe to %ProgramFiles%\fsavaui\fsavaui.exe.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\lib\libcd.pdb to %ProgramFiles%\microsoft visual studio .net 2003\vc7\lib\libcd.pdb.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd07804_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd07804_.wmf.gоod
from %APPDATA%\telegram desktop\unins000.dat to %APPDATA%\telegram desktop\unins000.dat.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\minmax.h to %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\minmax.h.gоod
from %ProgramFiles%\microsoft office\office12\regform.exe to %ProgramFiles%\microsoft office\office12\regform.exe.gоod
from %APPDATA%\icqm\icq\smiles\smiles\animated\dance.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\dance.gif.gоod
from %TEMP%\dotnetfxsdk.log to %TEMP%\dotnetfxsdk.log.gоod
from %ProgramFiles%\fsav32\fsav32.exe to %ProgramFiles%\fsav32\fsav32.exe.gоod
from %ProgramFiles%\microsoft office\templates\1033\onenote\12\stationery\academic.one to %ProgramFiles%\microsoft office\templates\1033\onenote\12\stationery\academic.one.gоod
from %ProgramFiles%\f-sched\f-sched.exe to %ProgramFiles%\f-sched\f-sched.exe.gоod
from %APPDATA%\icqm\icq\smiles\smiles\set03\blum.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\blum.gif.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\lib\libcmt.lib to %ProgramFiles%\microsoft visual studio .net 2003\vc7\lib\libcmt.lib.gоod
from %ProgramFiles%\microsoft office\templates\1033\onenote\12\stationery\business.one to %ProgramFiles%\microsoft office\templates\1033\onenote\12\stationery\business.one.gоod
from %ProgramFiles%\fsgetwab\fsgetwab.exe to %ProgramFiles%\fsgetwab\fsgetwab.exe.gоod
from %APPDATA%\telegram desktop\updater.exe to %APPDATA%\telegram desktop\updater.exe.gоod
from %TEMP%\javadeployreg.log to %TEMP%\javadeployreg.log.gоod
from %ProgramFiles%\microsoft office\media\office12\autoshap\bd18211_.wmf to %ProgramFiles%\microsoft office\media\office12\autoshap\bd18211_.wmf.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\process.h to %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\process.h.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd08758_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd08758_.wmf.gоod
from %ProgramFiles%\fsavgui\fsavgui.exe to %ProgramFiles%\fsavgui\fsavgui.exe.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd10302_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd10302_.gif.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0216588.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0216588.wmf.gоod
from %ProgramFiles%\microsoft office\office12\scanost.exe to %ProgramFiles%\microsoft office\office12\scanost.exe.gоod
from %ProgramFiles%\microsoft office\media\office12\autoshap\bd18208_.wmf to %ProgramFiles%\microsoft office\media\office12\autoshap\bd18208_.wmf.gоod
from %APPDATA%\icqm\icq\smiles\smiles\animated\eat.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\eat.gif.gоod
from %APPDATA%\telegram desktop\unins000.exe to %APPDATA%\telegram desktop\unins000.exe.gоod
from %TEMP%\jaureg.log to %TEMP%\jaureg.log.gоod
from %ProgramFiles%\microsoft office\media\office12\lines\bd10308_.gif to %ProgramFiles%\microsoft office\media\office12\lines\bd10308_.gif.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd07831_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd07831_.wmf.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd10301_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd10301_.gif.gоod
from %ProgramFiles%\firefox\greprefs.js to %ProgramFiles%\firefox\greprefs.js.gоod
from %ProgramFiles%\microsoft office\media\office12\autoshap\bd18210_.wmf to %ProgramFiles%\microsoft office\media\office12\autoshap\bd18210_.wmf.gоod
from %ProgramFiles%\fameh32\fameh32.exe to %ProgramFiles%\fameh32\fameh32.exe.gоod
from %APPDATA%\icqm\icq\smiles\smiles\set03\blush.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\blush.gif.gоod
from %ProgramFiles%\drwebscd\drwebscd.exe to %ProgramFiles%\drwebscd\drwebscd.exe.gоod
from %ProgramFiles%\microsoft office\templates\1033\onenote\12\stationery\blank.one to %ProgramFiles%\microsoft office\templates\1033\onenote\12\stationery\blank.one.gоod
from %ProgramFiles%\drweb386\drweb386.exe to %ProgramFiles%\drweb386\drweb386.exe.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme effects\urban.eftx to %ProgramFiles%\microsoft office\document themes 12\theme effects\urban.eftx.gоod
from %APPDATA%\icqm\icq\smiles\smiles\animated\cry.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\cry.gif.gоod
from %TEMP%\dd_xps.txt to %TEMP%\dd_xps.txt.gоod
from %ProgramFiles%\drweb32w\drweb32w.exe to %ProgramFiles%\drweb32w\drweb32w.exe.gоod
from %ProgramFiles%\microsoft office\office12\refbar.ico to %ProgramFiles%\microsoft office\office12\refbar.ico.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme fonts\verve.xml to %ProgramFiles%\microsoft office\document themes 12\theme fonts\verve.xml.gоod
from %ProgramFiles%\microsoft office\media\office12\lines\bd10256_.gif to %ProgramFiles%\microsoft office\media\office12\lines\bd10256_.gif.gоod
from %ProgramFiles%\ezantivirusregistrationcheck\ezantivirusregistrationcheck.exe to %ProgramFiles%\ezantivirusregistrationcheck\ezantivirusregistrationcheck.exe.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd10297_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd10297_.gif.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\mbctype.h to %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\mbctype.h.gоod
from %ProgramFiles%\microsoft office\media\office12\autoshap\bd18206_.wmf to %ProgramFiles%\microsoft office\media\office12\autoshap\bd18206_.wmf.gоod
from %ProgramFiles%\fsav\fsav.exe to %ProgramFiles%\fsav\fsav.exe.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\lib\libc.lib to %ProgramFiles%\microsoft visual studio .net 2003\vc7\lib\libc.lib.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0212957.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0212957.wmf.gоod
from %APPDATA%\icqm\icq\smiles\smiles\set03\angel.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\angel.gif.gоod
from %ProgramFiles%\microsoft office\office12\pptview.exe to %ProgramFiles%\microsoft office\office12\pptview.exe.gоod
from %APPDATA%\icqm\icq\smiles\smiles\animated\could.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\could.gif.gоod
from %ProgramFiles%\microsoft office\templates\1033\fax\urbanfax.dotx to %ProgramFiles%\microsoft office\templates\1033\fax\urbanfax.dotx.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd06102_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd06102_.wmf.gоod
from %ProgramFiles%\firefox\crashreporter.exe to %ProgramFiles%\firefox\crashreporter.exe.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme effects\trek.eftx to %ProgramFiles%\microsoft office\document themes 12\theme effects\trek.eftx.gоod
from %ProgramFiles%\microsoft office\media\office12\autoshap\bd18205_.wmf to %ProgramFiles%\microsoft office\media\office12\autoshap\bd18205_.wmf.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd06200_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd06200_.wmf.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\lib\libcd.lib to %ProgramFiles%\microsoft visual studio .net 2003\vc7\lib\libcd.lib.gоod
from %APPDATA%\icqm\icq\smiles\smiles\set03\bad.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\bad.gif.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd10299_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd10299_.gif.gоod
from %ProgramFiles%\microsoft office\media\office12\lines\bd10290_.gif to %ProgramFiles%\microsoft office\media\office12\lines\bd10290_.gif.gоod
from %APPDATA%\telegram desktop\telegram.exe to %APPDATA%\telegram desktop\telegram.exe.gоod
from %ProgramFiles%\firefox\freebl3.chk to %ProgramFiles%\firefox\freebl3.chk.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0215086.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0215086.wmf.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\memory.h to %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\memory.h.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme effects\verve.eftx to %ProgramFiles%\microsoft office\document themes 12\theme effects\verve.eftx.gоod
from %APPDATA%\icqm\icq\smiles\smiles\set03\biggrin.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\biggrin.gif.gоod
from %ProgramFiles%\microsoft office\media\office12\autoshap\bd18207_.wmf to %ProgramFiles%\microsoft office\media\office12\autoshap\bd18207_.wmf.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd07761_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd07761_.wmf.gоod
from %TEMP%\dotnetfx.log to %TEMP%\dotnetfx.log.gоod
from %ProgramFiles%\microsoft office\office12\refbarh.ico to %ProgramFiles%\microsoft office\office12\refbarh.ico.gоod
from %APPDATA%\icqm\icq\smiles\flash\kot_nedutza.swf to %APPDATA%\icqm\icq\smiles\flash\kot_nedutza.swf.gоod
from %APPDATA%\telegram desktop\log.txt to %APPDATA%\telegram desktop\log.txt.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\lib\libc.pdb to %ProgramFiles%\microsoft visual studio .net 2003\vc7\lib\libc.pdb.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd10298_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd10298_.gif.gоod
from %ProgramFiles%\microsoft office\media\office12\lines\bd10289_.gif to %ProgramFiles%\microsoft office\media\office12\lines\bd10289_.gif.gоod
from %ProgramFiles%\firefox\firefox.exe to %ProgramFiles%\firefox\firefox.exe.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\mbstring.h to %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\mbstring.h.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0214098.wav to %ProgramFiles%\microsoft office\media\cagcat10\j0214098.wav.gоod
from %ProgramFiles%\microsoft office\templates\1033\access\wss\1100.accdt to %ProgramFiles%\microsoft office\templates\1033\access\wss\1100.accdt.gоod
from %ProgramFiles%\microsoft office\templates\1033\onenote\12\stationery\planners.one to %ProgramFiles%\microsoft office\templates\1033\onenote\12\stationery\planners.one.gоod
from %ProgramFiles%\microsoft office\media\office12\lines\bd14710_.gif to %ProgramFiles%\microsoft office\media\office12\lines\bd14710_.gif.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\lib\libcmt.pdb to %ProgramFiles%\microsoft visual studio .net 2003\vc7\lib\libcmt.pdb.gоod
from %APPDATA%\icqm\icq\smiles\smiles\set04\s002.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s002.gif.gоod
from %ProgramFiles%\far2\far.exe to %ProgramFiles%\far2\far.exe.gоod
from %ProgramFiles%\microsoft office\media\office12\lines\bd14595_.gif to %ProgramFiles%\microsoft office\media\office12\lines\bd14595_.gif.gоod
from %ProgramFiles%\microsoft office\office12\setlang.exe to %ProgramFiles%\microsoft office\office12\setlang.exe.gоod
from %ProgramFiles%\fshotfix\fshotfix.exe to %ProgramFiles%\fshotfix\fshotfix.exe.gоod
from %APPDATA%\icqm\icq\smiles\smiles\set03\dance.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\dance.gif.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\lib\msvcrt.lib to %ProgramFiles%\microsoft visual studio .net 2003\vc7\lib\msvcrt.lib.gоod
from %APPDATA%\icqm\icq\smiles\flash\kot_wow.swf to %APPDATA%\icqm\icq\smiles\flash\kot_wow.swf.gоod
from %APPDATA%\icqm\icq\smiles\smiles\animated\gg.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\gg.gif.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\signal.h to %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\signal.h.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0221903.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0221903.wmf.gоod
from %ProgramFiles%\ecmd\ecmd.exe to %ProgramFiles%\ecmd\ecmd.exe.gоod
from %APPDATA%\telegram desktop\tdata\shortcuts-custom.json to %APPDATA%\telegram desktop\tdata\shortcuts-custom.json.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\share.h to %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\share.h.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd14514_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd14514_.gif.gоod
from %ProgramFiles%\microsoft office\media\office12\lines\bd14594_.gif to %ProgramFiles%\microsoft office\media\office12\lines\bd14594_.gif.gоod
from %ProgramFiles%\fsavwscr\fsavwscr.exe to %ProgramFiles%\fsavwscr\fsavwscr.exe.gоod
from %ProgramFiles%\microsoft office\media\office12\autoshap\bd18215_.wmf to %ProgramFiles%\microsoft office\media\office12\autoshap\bd18215_.wmf.gоod
from %APPDATA%\telegram desktop\tdata\settings0 to %APPDATA%\telegram desktop\tdata\settings0.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd08808_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd08808_.wmf.gоod
from %ProgramFiles%\firefox\nsinstall.exe to %ProgramFiles%\firefox\nsinstall.exe.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0222015.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0222015.wmf.gоod
from %ProgramFiles%\microsoft office\media\office12\lines\bd10358_.gif to %ProgramFiles%\microsoft office\media\office12\lines\bd10358_.gif.gоod
from %ProgramFiles%\fsbwsys\fsbwsys.exe to %ProgramFiles%\fsbwsys\fsbwsys.exe.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd14530_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd14530_.gif.gоod
from %ProgramFiles%\ehsniffer\ehsniffer.exe to %ProgramFiles%\ehsniffer\ehsniffer.exe.gоod
from %ProgramFiles%\microsoft office\media\office12\autoshap\bd18217_.wmf to %ProgramFiles%\microsoft office\media\office12\autoshap\bd18217_.wmf.gоod
from %ProgramFiles%\fsdbuh\fsdbuh.exe to %ProgramFiles%\fsdbuh\fsdbuh.exe.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd14529_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd14529_.gif.gоod
from %APPDATA%\telegram desktop\tdata\d877f783d5d3ef8c\map0 to %APPDATA%\telegram desktop\tdata\d877f783d5d3ef8c\map0.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd14528_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd14528_.gif.gоod
from %ProgramFiles%\fsihcomp\fsihcomp.exe to %ProgramFiles%\fsihcomp\fsihcomp.exe.gоod
from %ProgramFiles%\microsoft office\media\office12\lines\bd14677_.gif to %ProgramFiles%\microsoft office\media\office12\lines\bd14677_.gif.gоod
from %ProgramFiles%\fsguiexe\fsguiexe.exe to %ProgramFiles%\fsguiexe\fsguiexe.exe.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd14515_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd14515_.gif.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\lib\msvcrtd.lib to %ProgramFiles%\microsoft visual studio .net 2003\vc7\lib\msvcrtd.lib.gоod
from %APPDATA%\telegram desktop\tdata\usertag to %APPDATA%\telegram desktop\tdata\usertag.gоod
from %APPDATA%\icqm\icq\smiles\smiles\set03\diablo.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\diablo.gif.gоod
from %APPDATA%\icqm\icq\smiles\smiles\animated\gg2.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\gg2.gif.gоod
from %TEMP%\jusched.log to %TEMP%\jusched.log.gоod
from %ProgramFiles%\fshdll32\fshdll32.exe to %ProgramFiles%\fshdll32\fshdll32.exe.gоod
from %ProgramFiles%\firefox\nssdbm3.chk to %ProgramFiles%\firefox\nssdbm3.chk.gоod
from %ProgramFiles%\microsoft office\media\office12\autoshap\bd18216_.wmf to %ProgramFiles%\microsoft office\media\office12\autoshap\bd18216_.wmf.gоod
from %APPDATA%\telegram desktop\tdata\shortcuts-default.json to %APPDATA%\telegram desktop\tdata\shortcuts-default.json.gоod
from %ProgramFiles%\egni\egni.exe to %ProgramFiles%\egni\egni.exe.gоod
from %ProgramFiles%\microsoft office\templates\1033\access\wss\107.accdt to %ProgramFiles%\microsoft office\templates\1033\access\wss\107.accdt.gоod
from %ProgramFiles%\far2\changelog_eng to %ProgramFiles%\far2\changelog_eng.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\setjmp.h to %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\setjmp.h.gоod
from %ProgramFiles%\drwebwcl\drwebwcl.exe to %ProgramFiles%\drwebwcl\drwebwcl.exe.gоod
from %ProgramFiles%\far2\changelog to %ProgramFiles%\far2\changelog.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd08773_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd08773_.wmf.gоod
from %APPDATA%\icqm\icq\smiles\flash\kot_spasibo.swf to %APPDATA%\icqm\icq\smiles\flash\kot_spasibo.swf.gоod
from %APPDATA%\icqm\icq\smiles\smiles\set03\cray.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\cray.gif.gоod
from %ProgramFiles%\microsoft office\media\office12\autoshap\bd18212_.wmf to %ProgramFiles%\microsoft office\media\office12\autoshap\bd18212_.wmf.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd10336_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd10336_.gif.gоod
from %ProgramFiles%\microsoft office\office12\scanpst.exe to %ProgramFiles%\microsoft office\office12\scanpst.exe.gоod
from %ProgramFiles%\microsoft office\templates\1033\onenote\12\stationery\designer.one to %ProgramFiles%\microsoft office\templates\1033\onenote\12\stationery\designer.one.gоod
from %APPDATA%\telegram desktop\tdata\8d0d68968d9bab800 to %APPDATA%\telegram desktop\tdata\8d0d68968d9bab800.gоod
from %ProgramFiles%\firefox\js.log to %ProgramFiles%\firefox\js.log.gоod
from %ProgramFiles%\microsoft office\media\office12\lines\bd14516_.gif to %ProgramFiles%\microsoft office\media\office12\lines\bd14516_.gif.gоod
from %ProgramFiles%\fsgk32st\fsgk32st.exe to %ProgramFiles%\fsgk32st\fsgk32st.exe.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0216724.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0216724.wmf.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\search.h to %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\search.h.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd10335_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd10335_.gif.gоod
from %ProgramFiles%\far\far.exe to %ProgramFiles%\far\far.exe.gоod
from %ProgramFiles%\drwebupw\drwebupw.exe to %ProgramFiles%\drwebupw\drwebupw.exe.gоod
from %ProgramFiles%\firefox\js.exe to %ProgramFiles%\firefox\js.exe.gоod
from %APPDATA%\icqm\icq\smiles\smiles\animated\fight.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\fight.gif.gоod
from %ProgramFiles%\fsavstrt\fsavstrt.exe to %ProgramFiles%\fsavstrt\fsavstrt.exe.gоod
from %ProgramFiles%\fsgk32\fsgk32.exe to %ProgramFiles%\fsgk32\fsgk32.exe.gоod
from %APPDATA%\icqm\icq\smiles\smiles\set03\crazy.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\crazy.gif.gоod
from %TEMP%\java_install.log to %TEMP%\java_install.log.gоod
from %APPDATA%\icqm\icq\smiles\smiles\set04\s001.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s001.gif.gоod
from %TEMP%\java_install_reg.log to %TEMP%\java_install_reg.log.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0217698.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0217698.wmf.gоod
from %ProgramFiles%\microsoft office\office12\selfcert.exe to %ProgramFiles%\microsoft office\office12\selfcert.exe.gоod
from %ProgramFiles%\microsoft office\media\office12\autoshap\bd18214_.wmf to %ProgramFiles%\microsoft office\media\office12\autoshap\bd18214_.wmf.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\lib\libcmtd.pdb to %ProgramFiles%\microsoft visual studio .net 2003\vc7\lib\libcmtd.pdb.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\setjmpex.h to %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\setjmpex.h.gоod
from %APPDATA%\icqm\icq\smiles\smiles\animated\flowr.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\flowr.gif.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd14513_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd14513_.gif.gоod
from %ProgramFiles%\microsoft office\media\office12\lines\bd14539_.gif to %ProgramFiles%\microsoft office\media\office12\lines\bd14539_.gif.gоod
from %ProgramFiles%\drwreg\drwreg.exe to %ProgramFiles%\drwreg\drwreg.exe.gоod
from %ProgramFiles%\fsavwsch\fsavwsch.exe to %ProgramFiles%\fsavwsch\fsavwsch.exe.gоod
from %APPDATA%\telegram desktop\tdata\d877f783d5d3ef8c1 to %APPDATA%\telegram desktop\tdata\d877f783d5d3ef8c1.gоod
from %ProgramFiles%\microsoft office\media\office12\lines\bd14538_.gif to %ProgramFiles%\microsoft office\media\office12\lines\bd14538_.gif.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd10337_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd10337_.gif.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0216858.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0216858.wmf.gоod
from %ProgramFiles%\firefox\mangle.exe to %ProgramFiles%\firefox\mangle.exe.gоod
from %ProgramFiles%\microsoft office\media\office12\autoshap\bd18213_.wmf to %ProgramFiles%\microsoft office\media\office12\autoshap\bd18213_.wmf.gоod
from %ProgramFiles%\fsguidll\fsguidll.exe to %ProgramFiles%\fsguidll\fsguidll.exe.gоod
from %APPDATA%\icqm\icq\smiles\smiles\animated\fingal.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\fingal.gif.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\lib\libcmtd.lib to %ProgramFiles%\microsoft visual studio .net 2003\vc7\lib\libcmtd.lib.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd08868_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd08868_.wmf.gоod
from %TEMP%\dd_wcf_retca4a2a.txt to %TEMP%\dd_wcf_retca4a2a.txt.gоod
from %APPDATA%\opera software\opera stable\local storage\http_wlogin.icq.com_0.localstorage to %APPDATA%\opera software\opera stable\local storage\http_wlogin.icq.com_0.localstorage.gоod
from %ProgramFiles%\microsoft office\templates\1033\access\marketing projects.accdt to %ProgramFiles%\microsoft office\templates\1033\access\marketing projects.accdt.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme fonts\median.xml to %ProgramFiles%\microsoft office\document themes 12\theme fonts\median.xml.gоod
from %APPDATA%\icqm\icq\smiles\smiles\8march\shoes.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\shoes.gif.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd00141_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd00141_.wmf.gоod
from %ProgramFiles%\cssexc\cssexc.exe to %ProgramFiles%\cssexc\cssexc.exe.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0199805.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0199805.wmf.gоod
from %ProgramFiles%\microsoft office\office12\onenote.exe to %ProgramFiles%\microsoft office\office12\onenote.exe.gоod
from %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\storage\permanent\moz-safe-about+home\idb\818200132aebmoouht.sqlite to %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\storage\permanent\moz-safe-about+home\idb\818200132aebmoouht.sqlite.gоod
from %ProgramFiles%\microsoft office\media\office12\autoshap\bd18194_.wmf to %ProgramFiles%\microsoft office\media\office12\autoshap\bd18194_.wmf.gоod
from %APPDATA%\opera software\opera stable\local storage\chrome_startpage_0.localstorage to %APPDATA%\opera software\opera stable\local storage\chrome_startpage_0.localstorage.gоod
from %APPDATA%\icqm\icq\smiles\smiles\8march\ring.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\ring.gif.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme effects\module.eftx to %ProgramFiles%\microsoft office\document themes 12\theme effects\module.eftx.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\fcntl.h to %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\fcntl.h.gоod
from %TEMP%\dd_net_framework20_setup74f9.txt to %TEMP%\dd_net_framework20_setup74f9.txt.gоod
from %ProgramFiles%\dislite\dislite.exe to %ProgramFiles%\dislite\dislite.exe.gоod
from %APPDATA%\opera software\opera stable\local storage\chrome-extension_knohfebhibeknbfioecpdmdkjkjdnjnl_0.localstorage to %APPDATA%\opera software\opera stable\local storage\chrome-extension_knohfebhibeknbfioecpdmdkjkjdnjnl_0.localstorage.gоod
from %ProgramFiles%\dnf\dnf.exe to %ProgramFiles%\dnf\dnf.exe.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme fonts\foundry.xml to %ProgramFiles%\microsoft office\document themes 12\theme fonts\foundry.xml.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0199755.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0199755.wmf.gоod
from %ProgramFiles%\microsoft office\templates\1033\access\issues.accdt to %ProgramFiles%\microsoft office\templates\1033\access\issues.accdt.gоod
from %ProgramFiles%\ccproxy\ccproxy.exe to %ProgramFiles%\ccproxy\ccproxy.exe.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\fpieee.h to %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\fpieee.h.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\gcroot.h to %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\gcroot.h.gоod
from %APPDATA%\icqm\icq\smiles\flash\joy.swf to %APPDATA%\icqm\icq\smiles\flash\joy.swf.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0205466.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0205466.wmf.gоod
from %ProgramFiles%\ccsetmgr\ccsetmgr.exe to %ProgramFiles%\ccsetmgr\ccsetmgr.exe.gоod
from %ProgramFiles%\microsoft office\templates\1033\access\projects.accdt to %ProgramFiles%\microsoft office\templates\1033\access\projects.accdt.gоod
from %ProgramFiles%\microsoft office\media\office12\autoshap\bd18197_.wmf to %ProgramFiles%\microsoft office\media\office12\autoshap\bd18197_.wmf.gоod
from %ProgramFiles%\drvctl\drvctl.exe to %ProgramFiles%\drvctl\drvctl.exe.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd00146_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd00146_.wmf.gоod
from %ProgramFiles%\custinstall\custinstall.exe to %ProgramFiles%\custinstall\custinstall.exe.gоod
from %APPDATA%\icqm\icq\smiles\smiles\8march\sunburn.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\sunburn.gif.gоod
from %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\webapps\webapps.json to %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\webapps\webapps.json.gоod
from %ProgramFiles%\csendto\csendto.exe to %ProgramFiles%\csendto\csendto.exe.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme fonts\module.xml to %ProgramFiles%\microsoft office\document themes 12\theme fonts\module.xml.gоod
from %TEMP%\dd_net_framework30_setup7762.txt to %TEMP%\dd_net_framework30_setup7762.txt.gоod
from %ProgramFiles%\dpatrolq\dpatrolq.exe to %ProgramFiles%\dpatrolq\dpatrolq.exe.gоod
from %ProgramFiles%\microsoft office\media\office12\autoshap\bd18196_.wmf to %ProgramFiles%\microsoft office\media\office12\autoshap\bd18196_.wmf.gоod
from %ProgramFiles%\microsoft office\templates\1033\access\northwind.accdt to %ProgramFiles%\microsoft office\templates\1033\access\northwind.accdt.gоod
from %APPDATA%\opera software\opera stable\local storage\https_mail.yandex.ru_0.localstorage to %APPDATA%\opera software\opera stable\local storage\https_mail.yandex.ru_0.localstorage.gоod
from %ProgramFiles%\ekrn\ekrn.exe to %ProgramFiles%\ekrn\ekrn.exe.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0205462.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0205462.wmf.gоod
from %ProgramFiles%\microsoft office\office12\onenotem.exe to %ProgramFiles%\microsoft office\office12\onenotem.exe.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme fonts\metro.xml to %ProgramFiles%\microsoft office\document themes 12\theme fonts\metro.xml.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\float.h to %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\float.h.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme effects\opulent.eftx to %ProgramFiles%\microsoft office\document themes 12\theme effects\opulent.eftx.gоod
from %ProgramFiles%\microsoft office\office12\omml2mml.xsl to %ProgramFiles%\microsoft office\office12\omml2mml.xsl.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme effects\median.eftx to %ProgramFiles%\microsoft office\document themes 12\theme effects\median.eftx.gоod
from %ProgramFiles%\microsoft office\media\office12\autoshap\bd18191_.wmf to %ProgramFiles%\microsoft office\media\office12\autoshap\bd18191_.wmf.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme fonts\concourse.xml to %ProgramFiles%\microsoft office\document themes 12\theme fonts\concourse.xml.gоod
from %TEMP%\dd_dotnetfx45_full_setup_decompression_log.txt to %TEMP%\dd_dotnetfx45_full_setup_decompression_log.txt.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0199549.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0199549.wmf.gоod
from %ProgramFiles%\microsoft office\office12\olkirm.xml to %ProgramFiles%\microsoft office\office12\olkirm.xml.gоod
from %ProgramFiles%\digsby-app\digsby-app.exe to %ProgramFiles%\digsby-app\digsby-app.exe.gоod
from %ProgramFiles%\cavmr\cavmr.exe to %ProgramFiles%\cavmr\cavmr.exe.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04384_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04384_.wmf.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme effects\foundry.eftx to %ProgramFiles%\microsoft office\document themes 12\theme effects\foundry.eftx.gоod
from %ProgramFiles%\ccevtmgr\ccevtmgr.exe to %ProgramFiles%\ccevtmgr\ccevtmgr.exe.gоod
from %APPDATA%\icqm\icq\smiles\flash\guby.swf to %APPDATA%\icqm\icq\smiles\flash\guby.swf.gоod
from %ProgramFiles%\courier\courier.exe to %ProgramFiles%\courier\courier.exe.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\eh.h to %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\eh.h.gоod
from %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\storage\permanent\chrome\idb\2918063365piupsah.sqlite to %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\storage\permanent\chrome\idb\2918063365piupsah.sqlite.gоod
from %ProgramFiles%\microsoft office\templates\1033\access\contacts.accdt to %ProgramFiles%\microsoft office\templates\1033\access\contacts.accdt.gоod
from %ProgramFiles%\ccapp\ccapp.exe to %ProgramFiles%\ccapp\ccapp.exe.gоod
from %APPDATA%\opera software\opera stable\extension state\manifest-000001 to %APPDATA%\opera software\opera stable\extension state\manifest-000001.gоod
from %ProgramFiles%\copyx64\copyx64.exe to %ProgramFiles%\copyx64\copyx64.exe.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme effects\flow.eftx to %ProgramFiles%\microsoft office\document themes 12\theme effects\flow.eftx.gоod
from %ProgramFiles%\cavemsrv\cavemsrv.exe to %ProgramFiles%\cavemsrv\cavemsrv.exe.gоod
from %APPDATA%\icqm\icq\smiles\smiles\8march\mad.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\mad.gif.gоod
from %ProgramFiles%\microsoft office\media\office12\autoshap\bd18192_.wmf to %ProgramFiles%\microsoft office\media\office12\autoshap\bd18192_.wmf.gоod
from %APPDATA%\icqm\icq\smiles\flash\information.swf to %APPDATA%\icqm\icq\smiles\flash\information.swf.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04385_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04385_.wmf.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme fonts\flow.xml to %ProgramFiles%\microsoft office\document themes 12\theme fonts\flow.xml.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0199727.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0199727.wmf.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd00116_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd00116_.wmf.gоod
from %APPDATA%\opera software\opera stable\local storage\browser_startpage_0.localstorage to %APPDATA%\opera software\opera stable\local storage\browser_startpage_0.localstorage.gоod
from %ProgramFiles%\ccleaner\ccleaner.exe to %ProgramFiles%\ccleaner\ccleaner.exe.gоod
from %APPDATA%\icqm\icq\smiles\smiles\8march\perfume.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\perfume.gif.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\excpt.h to %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\excpt.h.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme effects\metro.eftx to %ProgramFiles%\microsoft office\document themes 12\theme effects\metro.eftx.gоod
from %ProgramFiles%\microsoft office\templates\1033\access\faculty.accdt to %ProgramFiles%\microsoft office\templates\1033\access\faculty.accdt.gоod
from %ProgramFiles%\microsoft office\media\office12\autoshap\bd18193_.wmf to %ProgramFiles%\microsoft office\media\office12\autoshap\bd18193_.wmf.gоod
from %TEMP%\dd_ndp452-kb2901907-x86-x64-allos-enu_decompression_log.txt to %TEMP%\dd_ndp452-kb2901907-x86-x64-allos-enu_decompression_log.txt.gоod
from %ProgramFiles%\directftp\directftp.exe to %ProgramFiles%\directftp\directftp.exe.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\baby_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\baby_01.mid.gоod
from %ProgramFiles%\cpd\cpd.exe to %ProgramFiles%\cpd\cpd.exe.gоod
from %ProgramFiles%\cavmud\cavmud.exe to %ProgramFiles%\cavmud\cavmud.exe.gоod
from %ProgramFiles%\microsoft office\office12\olkirmv.xml to %ProgramFiles%\microsoft office\office12\olkirmv.xml.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0199661.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0199661.wmf.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme fonts\equity.xml to %ProgramFiles%\microsoft office\document themes 12\theme fonts\equity.xml.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\errno.h to %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\errno.h.gоod
from %APPDATA%\icqm\icq\smiles\smiles\8march\new_dress.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\new_dress.gif.gоod
from %ProgramFiles%\microsoft office\templates\1033\access\events.accdt to %ProgramFiles%\microsoft office\templates\1033\access\events.accdt.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme effects\paper.eftx to %ProgramFiles%\microsoft office\document themes 12\theme effects\paper.eftx.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\math.h to %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\math.h.gоod
from %TEMP%\dd_net_framework35_msi77c4.txt to %TEMP%\dd_net_framework35_msi77c4.txt.gоod
from %APPDATA%\opera software\opera stable\local storage\http_welcome.qip.ru_0.localstorage to %APPDATA%\opera software\opera stable\local storage\http_welcome.qip.ru_0.localstorage.gоod
from %APPDATA%\icqm\icq\smiles\smiles\animated\blew.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\blew.gif.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme fonts\solstice.xml to %ProgramFiles%\microsoft office\document themes 12\theme fonts\solstice.xml.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\malloc.h to %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\malloc.h.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd10263_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd10263_.gif.gоod
from %ProgramFiles%\microsoft office\media\office12\autoshap\bd18203_.wmf to %ProgramFiles%\microsoft office\media\office12\autoshap\bd18203_.wmf.gоod
from %ProgramFiles%\fsauach\fsauach.exe to %ProgramFiles%\fsauach\fsauach.exe.gоod
from %ProgramFiles%\drweb\drweb.exe to %ProgramFiles%\drweb\drweb.exe.gоod
from %ProgramFiles%\microsoft office\templates\1033\fax\orielfax.dotx to %ProgramFiles%\microsoft office\templates\1033\fax\orielfax.dotx.gоod
from %ProgramFiles%\microsoft office\templates\1033\access\wss\105.accdt to %ProgramFiles%\microsoft office\templates\1033\access\wss\105.accdt.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme fonts\paper.xml to %ProgramFiles%\microsoft office\document themes 12\theme fonts\paper.xml.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd10254_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd10254_.gif.gоod
from %ProgramFiles%\microsoft office\media\office12\autoshap\bd18202_.wmf to %ProgramFiles%\microsoft office\media\office12\autoshap\bd18202_.wmf.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd10253_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd10253_.gif.gоod
from %ProgramFiles%\microsoft office\office12\pptirm.xml to %ProgramFiles%\microsoft office\office12\pptirm.xml.gоod
from %APPDATA%\icqm\icq\smiles\smiles\animated\beer.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\beer.gif.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd00173_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd00173_.wmf.gоod
from %ProgramFiles%\ewidoctrl\ewidoctrl.exe to %ProgramFiles%\ewidoctrl\ewidoctrl.exe.gоod
from %TEMP%\dd_vcredist_x86_20151215221751_000_vcruntimeminimum_x86.log to %TEMP%\dd_vcredist_x86_20151215221751_000_vcruntimeminimum_x86.log.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0212219.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0212219.wmf.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd10255_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd10255_.gif.gоod
from %TEMP%\dd_vcredist_x86_20151215221751_001_vcruntimeadditional_x86.log to %TEMP%\dd_vcredist_x86_20151215221751_001_vcruntimeadditional_x86.log.gоod
from %ProgramFiles%\microsoft office\office12\outlfltr.dat to %ProgramFiles%\microsoft office\office12\outlfltr.dat.gоod
from %ProgramFiles%\microsoft office\media\office12\autoshap\bd18204_.wmf to %ProgramFiles%\microsoft office\media\office12\autoshap\bd18204_.wmf.gоod
from %ProgramFiles%\microsoft office\media\office12\lines\bd10219_.gif to %ProgramFiles%\microsoft office\media\office12\lines\bd10219_.gif.gоod
from %ProgramFiles%\microsoft office\templates\1033\fax\originfax.dotx to %ProgramFiles%\microsoft office\templates\1033\fax\originfax.dotx.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0212701.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0212701.wmf.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\lib\kernel32.lib to %ProgramFiles%\microsoft visual studio .net 2003\vc7\lib\kernel32.lib.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd10268_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd10268_.gif.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme fonts\trek.xml to %ProgramFiles%\microsoft office\document themes 12\theme fonts\trek.xml.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0212661.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0212661.wmf.gоod
from %APPDATA%\icqm\icq\smiles\flash\kot_goodbye.swf to %APPDATA%\icqm\icq\smiles\flash\kot_goodbye.swf.gоod
from %APPDATA%\opera software\opera stable\local storage\http_www.icq.com_0.localstorage to %APPDATA%\opera software\opera stable\local storage\http_www.icq.com_0.localstorage.gоod
from %ProgramFiles%\microsoft office\templates\1033\access\tasks.accdt to %ProgramFiles%\microsoft office\templates\1033\access\tasks.accdt.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd05119_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd05119_.wmf.gоod
from %ProgramFiles%\exit_av\exit_av.exe to %ProgramFiles%\exit_av\exit_av.exe.gоod
from %ProgramFiles%\microsoft office\office12\pptirmv.xml to %ProgramFiles%\microsoft office\office12\pptirmv.xml.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd10267_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd10267_.gif.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd10266_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd10266_.gif.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd10265_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd10265_.gif.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme fonts\technic.xml to %ProgramFiles%\microsoft office\document themes 12\theme fonts\technic.xml.gоod
from %APPDATA%\icqm\icq\smiles\smiles\animated\book.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\book.gif.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme effects\technic.eftx to %ProgramFiles%\microsoft office\document themes 12\theme effects\technic.eftx.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd10264_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd10264_.gif.gоod
from %ProgramFiles%\firefox\blocklist.xml to %ProgramFiles%\firefox\blocklist.xml.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme fonts\urban.xml to %ProgramFiles%\microsoft office\document themes 12\theme fonts\urban.xml.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme fonts\origin.xml to %ProgramFiles%\microsoft office\document themes 12\theme fonts\origin.xml.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme fonts\opulent.xml to %ProgramFiles%\microsoft office\document themes 12\theme fonts\opulent.xml.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\io.h to %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\io.h.gоod
from %ProgramFiles%\cuteftp\cuteftp.exe to %ProgramFiles%\cuteftp\cuteftp.exe.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme effects\origin.eftx to %ProgramFiles%\microsoft office\document themes 12\theme effects\origin.eftx.gоod
from %ProgramFiles%\microsoft office\office12\outlook.exe to %ProgramFiles%\microsoft office\office12\outlook.exe.gоod
from %ProgramFiles%\microsoft office\templates\1033\access\sales pipeline.accdt to %ProgramFiles%\microsoft office\templates\1033\access\sales pipeline.accdt.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme fonts\office classic.xml to %ProgramFiles%\microsoft office\document themes 12\theme fonts\office classic.xml.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0205582.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0205582.wmf.gоod
from %ProgramFiles%\microsoft office\media\office12\autoshap\bd18199_.wmf to %ProgramFiles%\microsoft office\media\office12\autoshap\bd18199_.wmf.gоod
from %ProgramFiles%\drvirus\drvirus.exe to %ProgramFiles%\drvirus\drvirus.exe.gоod
from %ProgramFiles%\etherd\etherd.exe to %ProgramFiles%\etherd\etherd.exe.gоod
from %ProgramFiles%\cemrep\cemrep.exe to %ProgramFiles%\cemrep\cemrep.exe.gоod
from %APPDATA%\yandex\ui to %APPDATA%\yandex\ui.gоod
from %APPDATA%\icqm\icq\smiles\flash\kisses.swf to %APPDATA%\icqm\icq\smiles\flash\kisses.swf.gоod
from %APPDATA%\icqm\icq\smiles\smiles\animated\angel.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\angel.gif.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd00155_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd00155_.wmf.gоod
from %ProgramFiles%\microsoft office\media\office12\autoshap\bd18198_.wmf to %ProgramFiles%\microsoft office\media\office12\autoshap\bd18198_.wmf.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme fonts\office 2.xml to %ProgramFiles%\microsoft office\document themes 12\theme fonts\office 2.xml.gоod
from %ProgramFiles%\custsetup\custsetup.exe to %ProgramFiles%\custsetup\custsetup.exe.gоod
from %ProgramFiles%\elementclient\elementclient.exe to %ProgramFiles%\elementclient\elementclient.exe.gоod
from %APPDATA%\opera software\opera stable\local storage\https_www.mozilla.org_0.localstorage to %APPDATA%\opera software\opera stable\local storage\https_www.mozilla.org_0.localstorage.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme fonts\office classic 2.xml to %ProgramFiles%\microsoft office\document themes 12\theme fonts\office classic 2.xml.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme effects\oriel.eftx to %ProgramFiles%\microsoft office\document themes 12\theme effects\oriel.eftx.gоod
from %ProgramFiles%\microsoft office\media\office12\autoshap\bd18201_.wmf to %ProgramFiles%\microsoft office\media\office12\autoshap\bd18201_.wmf.gоod
from %ProgramFiles%\drvmap\drvmap.exe to %ProgramFiles%\drvmap\drvmap.exe.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme effects\solstice.eftx to %ProgramFiles%\microsoft office\document themes 12\theme effects\solstice.eftx.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\locale.h to %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\locale.h.gоod
from %APPDATA%\opera software\opera stable\local storage\http_sourceforge.net_0.localstorage to %APPDATA%\opera software\opera stable\local storage\http_sourceforge.net_0.localstorage.gоod
from %APPDATA%\icqm\icq\smiles\flash\kot_cool.swf to %APPDATA%\icqm\icq\smiles\flash\kot_cool.swf.gоod
from %ProgramFiles%\drwadins\drwadins.exe to %ProgramFiles%\drwadins\drwadins.exe.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme fonts\oriel.xml to %ProgramFiles%\microsoft office\document themes 12\theme fonts\oriel.xml.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0211949.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0211949.wmf.gоod
from %ProgramFiles%\eudora\eudora.exe to %ProgramFiles%\eudora\eudora.exe.gоod
from %APPDATA%\icqm\icq\smiles\smiles\animated\beauty.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\beauty.gif.gоod
from %ProgramFiles%\microsoft office\templates\1033\fax\medianfax.dotx to %ProgramFiles%\microsoft office\templates\1033\fax\medianfax.dotx.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\limits.h to %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\limits.h.gоod
from %ProgramFiles%\chrome\chrome.exe to %ProgramFiles%\chrome\chrome.exe.gоod
from %ProgramFiles%\dbconvert\dbconvert.exe to %ProgramFiles%\dbconvert\dbconvert.exe.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd00160_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd00160_.wmf.gоod
from %ProgramFiles%\microsoft office\templates\1033\access\students.accdt to %ProgramFiles%\microsoft office\templates\1033\access\students.accdt.gоod
from %ProgramFiles%\microsoft office\office12\powerpnt.exe to %ProgramFiles%\microsoft office\office12\powerpnt.exe.gоod
from %ProgramFiles%\microsoft office\media\office12\autoshap\bd18200_.wmf to %ProgramFiles%\microsoft office\media\office12\autoshap\bd18200_.wmf.gоod
from %TEMP%\dd_vcredist_x86_20151215221751.log to %TEMP%\dd_vcredist_x86_20151215221751.log.gоod
from %APPDATA%\opera software\opera stable\local storage\http_qip.ru_0.localstorage to %APPDATA%\opera software\opera stable\local storage\http_qip.ru_0.localstorage.gоod
from %ProgramFiles%\microsoft office\templates\1033\fax\equityfax.dotx to %ProgramFiles%\microsoft office\templates\1033\fax\equityfax.dotx.gоod
from %APPDATA%\icqm\icq\smiles\smiles\animated\appl.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\appl.gif.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\stdarg.h to %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\stdarg.h.gоod
from %APPDATA%\icqm\icq\smiles\flash\krizis.swf to %APPDATA%\icqm\icq\smiles\flash\krizis.swf.gоod
from %APPDATA%\icqm\icq\smiles\smiles\animated\gift.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\gift.gif.gоod
from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_chat.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_chat.ico.gоod
from %ProgramFiles%\imapp\imapp.exe to %ProgramFiles%\imapp\imapp.exe.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd14755_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd14755_.gif.gоod
from %ProgramFiles%\microsoft office\media\office12\autoshap\bd18233_.wmf to %ProgramFiles%\microsoft office\media\office12\autoshap\bd18233_.wmf.gоod
from %ProgramFiles%\ieregfix\ieregfix.exe to %ProgramFiles%\ieregfix\ieregfix.exe.gоod
from %APPDATA%\icqm\icq\smiles\smiles\set03\shok.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\shok.gif.gоod
from %APPDATA%\thunderbird\profiles\cr5sc40q.default\session.json to %APPDATA%\thunderbird\profiles\cr5sc40q.default\session.json.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd14754_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd14754_.gif.gоod
from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_away.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_away.ico.gоod
from %ProgramFiles%\ispwdsvc\ispwdsvc.exe to %ProgramFiles%\ispwdsvc\ispwdsvc.exe.gоod
from %TEMP%\setupexe(20151215230521214).log to %TEMP%\setupexe(20151215230521214).log.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0240695.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0240695.wmf.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\sys\stat.h to %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\sys\stat.h.gоod
from %ProgramFiles%\fstlui\fstlui.exe to %ProgramFiles%\fstlui\fstlui.exe.gоod
from %ProgramFiles%\microsoft office\office12\1033\chargaps.wts to %ProgramFiles%\microsoft office\office12\1033\chargaps.wts.gоod
from %APPDATA%\icqm\icq\smiles\smiles\animated\wonder.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\wonder.gif.gоod
from %ProgramFiles%\iron\iron.exe to %ProgramFiles%\iron\iron.exe.gоod
from %APPDATA%\icqm\icq\smiles\smiles\set04\s014.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s014.gif.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd19827_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd19827_.wmf.gоod
from %ProgramFiles%\microsoft office\media\office12\autoshap\bd18232_.wmf to %ProgramFiles%\microsoft office\media\office12\autoshap\bd18232_.wmf.gоod
from %ProgramFiles%\microsoft office\media\office12\lines\bd15184_.gif to %ProgramFiles%\microsoft office\media\office12\lines\bd15184_.gif.gоod
from %APPDATA%\thunderbird\profiles\cr5sc40q.default\secmod.db to %APPDATA%\thunderbird\profiles\cr5sc40q.default\secmod.db.gоod
from %APPDATA%\icqm\icq\smiles\flash\missyou.swf to %APPDATA%\icqm\icq\smiles\flash\missyou.swf.gоod
from %ProgramFiles%\google\chrome\application\44.0.2403.155\chrome_200_percent.pak to %ProgramFiles%\google\chrome\application\44.0.2403.155\chrome_200_percent.pak.gоod
from %APPDATA%\icqm\icq\smiles\smiles\set04\s015.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s015.gif.gоod
from %APPDATA%\icqm\icq\smiles\smiles\set03\smile.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\smile.gif.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd14757_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd14757_.gif.gоod
from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_dnd.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_dnd.ico.gоod
from %ProgramFiles%\microsoft office\media\office12\autoshap\bd18234_.wmf to %ProgramFiles%\microsoft office\media\office12\autoshap\bd18234_.wmf.gоod
from %APPDATA%\thunderbird\profiles\cr5sc40q.default\times.json to %APPDATA%\thunderbird\profiles\cr5sc40q.default\times.json.gоod
from %ProgramFiles%\microsoft office\media\office12\lines\bd15301_.gif to %ProgramFiles%\microsoft office\media\office12\lines\bd15301_.gif.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0251301.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0251301.wmf.gоod
from %APPDATA%\icqm\icq\smiles\smiles\cat\cat_attack.gif to %APPDATA%\icqm\icq\smiles\smiles\cat\cat_attack.gif.gоod
from %ProgramFiles%\microsoft office\office12\1033\csdebug.chm to %ProgramFiles%\microsoft office\office12\1033\csdebug.chm.gоod
from %ProgramFiles%\imnotfy\imnotfy.exe to %ProgramFiles%\imnotfy\imnotfy.exe.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0240719.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0240719.wmf.gоod
from %TEMP%\setupexe(2015121523093290).log to %TEMP%\setupexe(2015121523093290).log.gоod
from %APPDATA%\icqm\icq\smiles\smiles\set03\shout.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\shout.gif.gоod
from %ProgramFiles%\far2\documentation\eng\arc_support.txt to %ProgramFiles%\far2\documentation\eng\arc_support.txt.gоod
from %APPDATA%\thunderbird\profiles\cr5sc40q.default\sessioncheckpoints.json to %APPDATA%\thunderbird\profiles\cr5sc40q.default\sessioncheckpoints.json.gоod
from %ProgramFiles%\microsoft office\media\office12\lines\bd15185_.gif to %ProgramFiles%\microsoft office\media\office12\lines\bd15185_.gif.gоod
from %ProgramFiles%\isafe\isafe.exe to %ProgramFiles%\isafe\isafe.exe.gоod
from %ProgramFiles%\fsuninst\fsuninst.exe to %ProgramFiles%\fsuninst\fsuninst.exe.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd19828_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd19828_.wmf.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\sys\timeb.h to %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\sys\timeb.h.gоod
from %ProgramFiles%\google\chrome\application\visualelementsmanifest.xml to %ProgramFiles%\google\chrome\application\visualelementsmanifest.xml.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd14756_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd14756_.gif.gоod
from %ProgramFiles%\fssw\fssw.exe to %ProgramFiles%\fssw\fssw.exe.gоod
from %APPDATA%\icqm\icq\smiles\smiles\set03\rolleyes.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\rolleyes.gif.gоod
from %ProgramFiles%\microsoft office\media\office12\lines\bd15073_.gif to %ProgramFiles%\microsoft office\media\office12\lines\bd15073_.gif.gоod
from %ProgramFiles%\ih8run\ih8run.exe to %ProgramFiles%\ih8run\ih8run.exe.gоod
from %APPDATA%\icqm\icq\smiles\smiles\set04\s012.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s012.gif.gоod
from %ProgramFiles%\microsoft office\office12\1033\acmain11.chm to %ProgramFiles%\microsoft office\office12\1033\acmain11.chm.gоod
from %ProgramFiles%\microsoft office\media\office12\autoshap\bd18230_.wmf to %ProgramFiles%\microsoft office\media\office12\autoshap\bd18230_.wmf.gоod
from %APPDATA%\icqm\icq\smiles\smiles\animated\tongue.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\tongue.gif.gоod
from %APPDATA%\icqm\icq\smiles\flash\mad dog.swf to %APPDATA%\icqm\icq\smiles\flash\mad dog.swf.gоod
from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_odkl_online.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_odkl_online.ico.gоod
from %APPDATA%\icqm\icq\smiles\smiles\set03\scratch_one-s_head.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\scratch_one-s_head.gif.gоod
from %ProgramFiles%\fsstm\fsstm.exe to %ProgramFiles%\fsstm\fsstm.exe.gоod
from %ProgramFiles%\microsoft office\media\office12\lines\bd15072_.gif to %ProgramFiles%\microsoft office\media\office12\lines\bd15072_.gif.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd14693_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd14693_.gif.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0234687.gif to %ProgramFiles%\microsoft office\media\cagcat10\j0234687.gif.gоod
from %ProgramFiles%\instlsp\instlsp.exe to %ProgramFiles%\instlsp\instlsp.exe.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd19695_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd19695_.wmf.gоod
from %APPDATA%\thunderbird\profiles\cr5sc40q.default\permissions.sqlite to %APPDATA%\thunderbird\profiles\cr5sc40q.default\permissions.sqlite.gоod
from %TEMP%\opera_crashreporter.log to %TEMP%\opera_crashreporter.log.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\xmath.h to %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\xmath.h.gоod
from %ProgramFiles%\iamserv\iamserv.exe to %ProgramFiles%\iamserv\iamserv.exe.gоod
from %ProgramFiles%\microsoft office\office12\1033\access12.acc to %ProgramFiles%\microsoft office\office12\1033\access12.acc.gоod
from %ProgramFiles%\google\chrome\application\44.0.2403.155\chrome_100_percent.pak to %ProgramFiles%\google\chrome\application\44.0.2403.155\chrome_100_percent.pak.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\sys\locking.h to %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\sys\locking.h.gоod
from %ProgramFiles%\far2\addons\shell\farhere.inf to %ProgramFiles%\far2\addons\shell\farhere.inf.gоod
from %APPDATA%\thunderbird\profiles\cr5sc40q.default\places.sqlite to %APPDATA%\thunderbird\profiles\cr5sc40q.default\places.sqlite.gоod
from %ProgramFiles%\microsoft office\media\office12\lines\bd15156_.gif to %ProgramFiles%\microsoft office\media\office12\lines\bd15156_.gif.gоod
from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_odkl_wrong_data.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_odkl_wrong_data.ico.gоod
from %ProgramFiles%\icqlite\icqlite.exe to %ProgramFiles%\icqlite\icqlite.exe.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0235319.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0235319.wmf.gоod
from %TEMP%\setupexe(201511201342324e4).log to %TEMP%\setupexe(201511201342324e4).log.gоod
from %ProgramFiles%\ilaunchr\ilaunchr.exe to %ProgramFiles%\ilaunchr\ilaunchr.exe.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd14753_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd14753_.gif.gоod
from %APPDATA%\icqm\icq\smiles\smiles\set04\s013.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s013.gif.gоod
from %TEMP%\pyl1.tmp.exe to %TEMP%\pyl1.tmp.exe.gоod
from %APPDATA%\thunderbird\profiles\cr5sc40q.default\prefs.js to %APPDATA%\thunderbird\profiles\cr5sc40q.default\prefs.js.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\_vcclrit.h to %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\_vcclrit.h.gоod
from %ProgramFiles%\microsoft office\media\office12\autoshap\bd18231_.wmf to %ProgramFiles%\microsoft office\media\office12\autoshap\bd18231_.wmf.gоod
from %ProgramFiles%\iris\iris.exe to %ProgramFiles%\iris\iris.exe.gоod
from %APPDATA%\icqm\icq\smiles\smiles\set03\sad.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\sad.gif.gоod
from %APPDATA%\icqm\icq\smiles\smiles\animated\victory.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\victory.gif.gоod
from %ProgramFiles%\microsoft office\media\office12\lines\bd15155_.gif to %ProgramFiles%\microsoft office\media\office12\lines\bd15155_.gif.gоod
from %ProgramFiles%\icq\icq.exe to %ProgramFiles%\icq\icq.exe.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0235241.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0235241.wmf.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd14752_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd14752_.gif.gоod
from %ProgramFiles%\microsoft office\office12\1033\actip10.hlp to %ProgramFiles%\microsoft office\office12\1033\actip10.hlp.gоod
from %ProgramFiles%\microsoft office\media\office12\autoshap\bd18229_.wmf to %ProgramFiles%\microsoft office\media\office12\autoshap\bd18229_.wmf.gоod
from %ProgramFiles%\google\chrome\application\44.0.2403.155\delegate_execute.exe to %ProgramFiles%\google\chrome\application\44.0.2403.155\delegate_execute.exe.gоod
from %ProgramFiles%\microsoft office\media\office12\autoshap\bd18235_.wmf to %ProgramFiles%\microsoft office\media\office12\autoshap\bd18235_.wmf.gоod
from %ProgramFiles%\far2\documentation\eng\plugins_review.txt to %ProgramFiles%\far2\documentation\eng\plugins_review.txt.gоod
from %ProgramFiles%\microsoft office\media\office12\lines\bd21311_.gif to %ProgramFiles%\microsoft office\media\office12\lines\bd21311_.gif.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd14830_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd14830_.gif.gоod
from %ProgramFiles%\mir3game\mir3game.exe to %ProgramFiles%\mir3game\mir3game.exe.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd14829_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd14829_.gif.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd14828_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd14828_.gif.gоod
from %APPDATA%\icqm\icq\smiles\smiles\set05\s003.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s003.gif.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd14795_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd14795_.gif.gоod
from %ProgramFiles%\microsoft office\media\office12\lines\bd21309_.gif to %ProgramFiles%\microsoft office\media\office12\lines\bd21309_.gif.gоod
from %ProgramFiles%\google\chrome\application\44.0.2403.155\nacl64.exe to %ProgramFiles%\google\chrome\application\44.0.2403.155\nacl64.exe.gоod
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\angel.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\angel.gif.gоod
from %ProgramFiles%\monlite\monlite.exe to %ProgramFiles%\monlite\monlite.exe.gоod
from %APPDATA%\icqm\icq\smiles\smiles\set03\wink.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\wink.gif.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0278882.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0278882.wmf.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd14794_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd14794_.gif.gоod
from %ProgramFiles%\microsoft office\media\office12\autoshap\bd18238_.wmf to %ProgramFiles%\microsoft office\media\office12\autoshap\bd18238_.wmf.gоod
from %ProgramFiles%\microsoft office\media\office12\lines\bd21307_.gif to %ProgramFiles%\microsoft office\media\office12\lines\bd21307_.gif.gоod
from %ProgramFiles%\far2\documentation\eng\plugins_install.txt to %ProgramFiles%\far2\documentation\eng\plugins_install.txt.gоod
from %ProgramFiles%\inocit\inocit.exe to %ProgramFiles%\inocit\inocit.exe.gоod
from %ProgramFiles%\microsoft office\office12\1033\digcam.wts to %ProgramFiles%\microsoft office\office12\1033\digcam.wts.gоod
from %ProgramFiles%\itunes\itunes.exe to %ProgramFiles%\itunes\itunes.exe.gоod
from %ProgramFiles%\logwatnt\logwatnt.exe to %ProgramFiles%\logwatnt\logwatnt.exe.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd14831_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd14831_.gif.gоod
from %ProgramFiles%\java\jre6\license to %ProgramFiles%\java\jre6\license.gоod
from %ProgramFiles%\monsysnt\monsysnt.exe to %ProgramFiles%\monsysnt\monsysnt.exe.gоod
from %ProgramFiles%\miranda32\miranda32.exe to %ProgramFiles%\miranda32\miranda32.exe.gоod
from %APPDATA%\icqm\icq\smiles\statuses\set01\100_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\100_xp.ico.gоod
from %ProgramFiles%\java\jre6\readme.txt to %ProgramFiles%\java\jre6\readme.txt.gоod
from %ProgramFiles%\java\jre6\license.txt to %ProgramFiles%\java\jre6\license.txt.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0281904.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0281904.wmf.gоod
from %ProgramFiles%\microsoft office\media\office12\autoshap\bd18241_.wmf to %ProgramFiles%\microsoft office\media\office12\autoshap\bd18241_.wmf.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd14868_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd14868_.gif.gоod
from %ProgramFiles%\lotroclient\lotroclient.exe to %ProgramFiles%\lotroclient\lotroclient.exe.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd14833_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd14833_.gif.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd14832_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd14832_.gif.gоod
from %ProgramFiles%\microsoft office\media\office12\autoshap\bd18239_.wmf to %ProgramFiles%\microsoft office\media\office12\autoshap\bd18239_.wmf.gоod
from %ProgramFiles%\java\jre6\copyright to %ProgramFiles%\java\jre6\copyright.gоod
from %APPDATA%\icqm\icq\smiles\statuses\jabber\seekfriends.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\seekfriends.ico.gоod
from %APPDATA%\icqm\icq\smiles\smiles\set03\yahoo.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\yahoo.gif.gоod
from %APPDATA%\icqm\icq\smiles\statuses\set01\100.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\100.ico.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd14867_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd14867_.gif.gоod
from %APPDATA%\icqm\icq\smiles\smiles\set05\s004.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s004.gif.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd14866_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd14866_.gif.gоod
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\blinking.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\blinking.gif.gоod
from %ProgramFiles%\inorpc\inorpc.exe to %ProgramFiles%\inorpc\inorpc.exe.gоod
from %ProgramFiles%\fsus\fsus.exe to %ProgramFiles%\fsus\fsus.exe.gоod
from %ProgramFiles%\ispnews\ispnews.exe to %ProgramFiles%\ispnews\ispnews.exe.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd20013_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd20013_.wmf.gоod
from %ProgramFiles%\microsoft office\office12\1033\csenvir.chm to %ProgramFiles%\microsoft office\office12\1033\csenvir.chm.gоod
from %ProgramFiles%\issvc\issvc.exe to %ProgramFiles%\issvc\issvc.exe.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd14791_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd14791_.gif.gоod
from %ProgramFiles%\microsoft office\media\office12\autoshap\bd18236_.wmf to %ProgramFiles%\microsoft office\media\office12\autoshap\bd18236_.wmf.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\sys\utime.h to %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\sys\utime.h.gоod
from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_invisible.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_invisible.ico.gоod
from %APPDATA%\icqm\icq\smiles\smiles\cat\cat_hand.gif to %APPDATA%\icqm\icq\smiles\smiles\cat\cat_hand.gif.gоod
from %ProgramFiles%\impcnt\impcnt.exe to %ProgramFiles%\impcnt\impcnt.exe.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd19986_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd19986_.wmf.gоod
from %ProgramFiles%\ftpte\ftpte.exe to %ProgramFiles%\ftpte\ftpte.exe.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0251925.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0251925.wmf.gоod
from %APPDATA%\winrar\version.dat to %APPDATA%\winrar\version.dat.gоod
from %APPDATA%\thunderbird\profiles\cr5sc40q.default\virtualfolders.dat to %APPDATA%\thunderbird\profiles\cr5sc40q.default\virtualfolders.dat.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0251871.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0251871.wmf.gоod
from %ProgramFiles%\far2\documentation\eng\bug_report.txt to %ProgramFiles%\far2\documentation\eng\bug_report.txt.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd14790_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd14790_.gif.gоod
from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_gray.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_gray.ico.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\sys\types.h to %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\sys\types.h.gоod
from %APPDATA%\icqm\icq\smiles\smiles\set04\s016.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s016.gif.gоod
from %ProgramFiles%\microsoft office\media\office12\lines\bd15302_.gif to %ProgramFiles%\microsoft office\media\office12\lines\bd15302_.gif.gоod
from %TEMP%\uxeventlog.txt to %TEMP%\uxeventlog.txt.gоod
from %APPDATA%\icqm\icq\smiles\smiles\cat\cat_meow.gif to %APPDATA%\icqm\icq\smiles\smiles\cat\cat_meow.gif.gоod
from %ProgramFiles%\microsoft office\media\office12\lines\bd21303_.gif to %ProgramFiles%\microsoft office\media\office12\lines\bd21303_.gif.gоod
from %ProgramFiles%\microsoft office\media\office12\autoshap\bd18237_.wmf to %ProgramFiles%\microsoft office\media\office12\autoshap\bd18237_.wmf.gоod
from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_offline.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_offline.ico.gоod
from %ProgramFiles%\microsoft office\media\office12\lines\bd21305_.gif to %ProgramFiles%\microsoft office\media\office12\lines\bd21305_.gif.gоod
from %APPDATA%\icqm\icq\smiles\smiles\set05\s002.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s002.gif.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd14793_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd14793_.gif.gоod
from %APPDATA%\icqm\icq\smiles\smiles\set03\wacko2.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\wacko2.gif.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0252349.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0252349.wmf.gоod
from %ProgramFiles%\gc\gc.exe to %ProgramFiles%\gc\gc.exe.gоod
from %ProgramFiles%\isuac\isuac.exe to %ProgramFiles%\isuac\isuac.exe.gоod
from %APPDATA%\icqm\icq\smiles\smiles\cat\cat_lick.gif to %APPDATA%\icqm\icq\smiles\smiles\cat\cat_lick.gif.gоod
from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_online.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_online.ico.gоod
from %APPDATA%\icqm\icq\smiles\smiles\set05\s001.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s001.gif.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd19988_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd19988_.wmf.gоod
from %ProgramFiles%\far2\documentation\eng\far_faq.txt to %ProgramFiles%\far2\documentation\eng\far_faq.txt.gоod
from %APPDATA%\thunderbird\profiles\cr5sc40q.default\webappsstore.sqlite to %APPDATA%\thunderbird\profiles\cr5sc40q.default\webappsstore.sqlite.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd14792_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd14792_.gif.gоod
from %ProgramFiles%\google\chrome\application\44.0.2403.155\icudtl.dat to %ProgramFiles%\google\chrome\application\44.0.2403.155\icudtl.dat.gоod
from %ProgramFiles%\microsoft office\office12\1033\ct_roots.xml to %ProgramFiles%\microsoft office\office12\1033\ct_roots.xml.gоod
from %APPDATA%\icqm\icq\smiles\smiles\set03\unknw.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\unknw.gif.gоod
from %ProgramFiles%\incmail\incmail.exe to %ProgramFiles%\incmail\incmail.exe.gоod
from %ProgramFiles%\liveupdate\liveupdate.exe to %ProgramFiles%\liveupdate\liveupdate.exe.gоod
from %TEMP%\wubi-14.04-rev286.log to %TEMP%\wubi-14.04-rev286.log.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd14692_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd14692_.gif.gоod
from %APPDATA%\icqm\icq\smiles\smiles\animated\smile.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\smile.gif.gоod
from %ProgramFiles%\ih8\ih8.exe to %ProgramFiles%\ih8\ih8.exe.gоod
from %ProgramFiles%\guardgni\guardgni.exe to %ProgramFiles%\guardgni\guardgni.exe.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd09662_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd09662_.wmf.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0229389.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0229389.wmf.gоod
from %APPDATA%\icqm\icq\smiles\smiles\animated\pistolet.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\pistolet.gif.gоod
from %ProgramFiles%\microsoft office\office12\wordconv.exe to %ProgramFiles%\microsoft office\office12\wordconv.exe.gоod
from %APPDATA%\icqm\icq\smiles\smiles\set03\fool.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\fool.gif.gоod
from %ProgramFiles%\gg\gg.exe to %ProgramFiles%\gg\gg.exe.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd14578_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd14578_.gif.gоod
from %ProgramFiles%\microsoft office\media\office12\autoshap\bd18221_.wmf to %ProgramFiles%\microsoft office\media\office12\autoshap\bd18221_.wmf.gоod
from %ProgramFiles%\fsdiag\fsdiag.exe to %ProgramFiles%\fsdiag\fsdiag.exe.gоod
from %APPDATA%\icqm\icq\smiles\smiles\set04\s006.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s006.gif.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\stdlib.h to %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\stdlib.h.gоod
from %ProgramFiles%\gcasserv\gcasserv.exe to %ProgramFiles%\gcasserv\gcasserv.exe.gоod
from %ProgramFiles%\firefox\softokn3.chk to %ProgramFiles%\firefox\softokn3.chk.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0229385.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0229385.wmf.gоod
from %ProgramFiles%\microsoft office\media\office12\autoshap\bd18220_.wmf to %ProgramFiles%\microsoft office\media\office12\autoshap\bd18220_.wmf.gоod
from %APPDATA%\thunderbird\profiles\cr5sc40q.default\blist.sqlite to %APPDATA%\thunderbird\profiles\cr5sc40q.default\blist.sqlite.gоod
from %ProgramFiles%\far2\farhun.hlf to %ProgramFiles%\far2\farhun.hlf.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd09194_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd09194_.wmf.gоod
from %ProgramFiles%\fsmb32\fsmb32.exe to %ProgramFiles%\fsmb32\fsmb32.exe.gоod
from %ProgramFiles%\googleupdate\googleupdate.exe to %ProgramFiles%\googleupdate\googleupdate.exe.gоod
from %ProgramFiles%\microsoft office\office12\wordirmv.xml to %ProgramFiles%\microsoft office\office12\wordirmv.xml.gоod
from %ProgramFiles%\firefox\shlibsign.exe to %ProgramFiles%\firefox\shlibsign.exe.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd09664_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd09664_.wmf.gоod
from %ProgramFiles%\fspc\fspc.exe to %ProgramFiles%\fspc\fspc.exe.gоod
from %ProgramFiles%\giantantispywaremain\giantantispywaremain.exe to %ProgramFiles%\giantantispywaremain\giantantispywaremain.exe.gоod
from %APPDATA%\icqm\icq\smiles\smiles\set03\good.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\good.gif.gоod
from %ProgramFiles%\microsoft office\media\office12\lines\bd14844_.gif to %ProgramFiles%\microsoft office\media\office12\lines\bd14844_.gif.gоod
from %APPDATA%\thunderbird\profiles\cr5sc40q.default\cert8.db to %APPDATA%\thunderbird\profiles\cr5sc40q.default\cert8.db.gоod
from %ProgramFiles%\guardnt\guardnt.exe to %ProgramFiles%\guardnt\guardnt.exe.gоod
from %APPDATA%\icqm\icq\smiles\smiles\set04\s008.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s008.gif.gоod
from %ProgramFiles%\far2\file_id.diz to %ProgramFiles%\far2\file_id.diz.gоod
from %ProgramFiles%\far2\farrus.hlf to %ProgramFiles%\far2\farrus.hlf.gоod
from %ProgramFiles%\microsoft office\media\office12\lines\bd14801_.gif to %ProgramFiles%\microsoft office\media\office12\lines\bd14801_.gif.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd14580_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd14580_.gif.gоod
from %ProgramFiles%\microsoft office\office12\wordirm.xml to %ProgramFiles%\microsoft office\office12\wordirm.xml.gоod
from %ProgramFiles%\microsoft office\media\office12\autoshap\bd18222_.wmf to %ProgramFiles%\microsoft office\media\office12\autoshap\bd18222_.wmf.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\string.h to %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\string.h.gоod
from %APPDATA%\icqm\icq\smiles\smiles\set03\give_rose.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\give_rose.gif.gоod
from %APPDATA%\thunderbird\profiles\cr5sc40q.default\blocklist.xml to %APPDATA%\thunderbird\profiles\cr5sc40q.default\blocklist.xml.gоod
from %APPDATA%\icqm\icq\smiles\flash\likeu.swf to %APPDATA%\icqm\icq\smiles\flash\likeu.swf.gоod
from %APPDATA%\icqm\icq\smiles\smiles\set04\s007.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s007.gif.gоod
from %APPDATA%\icqm\icq\smiles\smiles\animated\poison.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\poison.gif.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0230876.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0230876.wmf.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd14579_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd14579_.gif.gоod
from %ProgramFiles%\fsdiagui\fsdiagui.exe to %ProgramFiles%\fsdiagui\fsdiagui.exe.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\stdio.h to %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\stdio.h.gоod
from %ProgramFiles%\fsdfwd\fsdfwd.exe to %ProgramFiles%\fsdfwd\fsdfwd.exe.gоod
from %ProgramFiles%\firefox\readme.txt to %ProgramFiles%\firefox\readme.txt.gоod
from %ProgramFiles%\microsoft office\office12\winword.exe to %ProgramFiles%\microsoft office\office12\winword.exe.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd14532_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd14532_.gif.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\stddef.h to %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\stddef.h.gоod
from %ProgramFiles%\fshelp\fshelp.exe to %ProgramFiles%\fshelp\fshelp.exe.gоod
from %APPDATA%\icqm\icq\smiles\smiles\animated\history.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\history.gif.gоod
from %ProgramFiles%\fsihs\fsihs.exe to %ProgramFiles%\fsihs\fsihs.exe.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0222019.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0222019.wmf.gоod
from %ProgramFiles%\microsoft office\media\office12\autoshap\bd18219_.wmf to %ProgramFiles%\microsoft office\media\office12\autoshap\bd18219_.wmf.gоod
from %ProgramFiles%\microsoft office\media\office12\lines\bd14711_.gif to %ProgramFiles%\microsoft office\media\office12\lines\bd14711_.gif.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\lib\oldnames.lib to %ProgramFiles%\microsoft visual studio .net 2003\vc7\lib\oldnames.lib.gоod
from %ProgramFiles%\microsoft office\media\office12\autoshap\bd18218_.wmf to %ProgramFiles%\microsoft office\media\office12\autoshap\bd18218_.wmf.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0222017.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0222017.wmf.gоod
from %ProgramFiles%\firefox\plugin_container.exe to %ProgramFiles%\firefox\plugin_container.exe.gоod
from %ProgramFiles%\fslaunch\fslaunch.exe to %ProgramFiles%\fslaunch\fslaunch.exe.gоod
from %APPDATA%\icqm\icq\smiles\smiles\set03\dirol.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\dirol.gif.gоod
from %ProgramFiles%\microsoft office\office12\vpreview.exe to %ProgramFiles%\microsoft office\office12\vpreview.exe.gоod
from %ProgramFiles%\far2\far.map to %ProgramFiles%\far2\far.map.gоod
from %APPDATA%\icqm\icq\smiles\smiles\set04\s003.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s003.gif.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd14531_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd14531_.gif.gоod
from %ProgramFiles%\fsma32\fsma32.exe to %ProgramFiles%\fsma32\fsma32.exe.gоod
from %ProgramFiles%\microsoft office\media\office12\autoshap\bd18223_.wmf to %ProgramFiles%\microsoft office\media\office12\autoshap\bd18223_.wmf.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\stdexcpt.h to %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\stdexcpt.h.gоod
from %APPDATA%\icqm\icq\smiles\flash\laugh.swf to %APPDATA%\icqm\icq\smiles\flash\laugh.swf.gоod
from %APPDATA%\icqm\icq\smiles\smiles\animated\love.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\love.gif.gоod
from %APPDATA%\icqm\icq\smiles\smiles\set04\s005.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s005.gif.gоod
from %ProgramFiles%\microsoft office\office12\wordcnvpxy.cnv to %ProgramFiles%\microsoft office\office12\wordcnvpxy.cnv.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd14565_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd14565_.gif.gоod
from %ProgramFiles%\microsoft office\media\office12\lines\bd14800_.gif to %ProgramFiles%\microsoft office\media\office12\lines\bd14800_.gif.gоod
from %APPDATA%\icqm\icq\smiles\smiles\animated\kiss.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\kiss.gif.gоod
from %ProgramFiles%\ge\ge.exe to %ProgramFiles%\ge\ge.exe.gоod
from %APPDATA%\icqm\icq\smiles\smiles\set03\facepalm.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\facepalm.gif.gоod
from %APPDATA%\thunderbird\crash reports\installtime20150507114201 to %APPDATA%\thunderbird\crash reports\installtime20150507114201.gоod
from %ProgramFiles%\microsoft office\media\office12\lines\bd14768_.gif to %ProgramFiles%\microsoft office\media\office12\lines\bd14768_.gif.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd14533_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd14533_.gif.gоod
from %APPDATA%\icqm\icq\smiles\smiles\set04\s004.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s004.gif.gоod
from %ProgramFiles%\far2\fareng.hlf to %ProgramFiles%\far2\fareng.hlf.gоod
from %ProgramFiles%\gcasdtserv\gcasdtserv.exe to %ProgramFiles%\gcasdtserv\gcasdtserv.exe.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd09031_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd09031_.wmf.gоod
from %APPDATA%\icqm\icq\smiles\smiles\animated\hungry.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\hungry.gif.gоod
from %ProgramFiles%\microsoft office\media\office12\lines\bd14769_.gif to %ProgramFiles%\microsoft office\media\office12\lines\bd14769_.gif.gоod
from %ProgramFiles%\fsdc\fsdc.exe to %ProgramFiles%\fsdc\fsdc.exe.gоod
from %APPDATA%\icqm\icq\smiles\smiles\set03\drinks.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\drinks.gif.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0222021.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0222021.wmf.gоod
from %ProgramFiles%\fsm32\fsm32.exe to %ProgramFiles%\fsm32\fsm32.exe.gоod
from %ProgramFiles%\firefox\updater.exe to %ProgramFiles%\firefox\updater.exe.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd14581_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd14581_.gif.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0234131.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0234131.wmf.gоod
from %ProgramFiles%\microsoft office\media\office12\lines\bd14997_.gif to %ProgramFiles%\microsoft office\media\office12\lines\bd14997_.gif.gоod
from %APPDATA%\icqm\icq\smiles\smiles\set03\music.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\music.gif.gоod
from %ProgramFiles%\installlicense\installlicense.exe to %ProgramFiles%\installlicense\installlicense.exe.gоod
from %ProgramFiles%\google\chrome\application\chrome.exe to %ProgramFiles%\google\chrome\application\chrome.exe.gоod
from %ProgramFiles%\httplook\httplook.exe to %ProgramFiles%\httplook\httplook.exe.gоod
from %APPDATA%\icqm\icq\smiles\smiles\animated\skuka.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\skuka.gif.gоod
from %ProgramFiles%\fssg\fssg.exe to %ProgramFiles%\fssg\fssg.exe.gоod
from %ProgramFiles%\microsoft office\media\office12\autoshap\bd18227_.wmf to %ProgramFiles%\microsoft office\media\office12\autoshap\bd18227_.wmf.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd14656_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd14656_.gif.gоod
from %ProgramFiles%\gnotify\gnotify.exe to %ProgramFiles%\gnotify\gnotify.exe.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd19563_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\bd19563_.gif.gоod
from %APPDATA%\icqm\icq\smiles\smiles\animated\sing.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\sing.gif.gоod
from %APPDATA%\icqm\icq\smiles\flash\love_bear_kiss.swf to %APPDATA%\icqm\icq\smiles\flash\love_bear_kiss.swf.gоod
from %ProgramFiles%\ieuser\ieuser.exe to %ProgramFiles%\ieuser\ieuser.exe.gоod
from %APPDATA%\thunderbird\profiles\cr5sc40q.default\global-messages-db.sqlite to %APPDATA%\thunderbird\profiles\cr5sc40q.default\global-messages-db.sqlite.gоod
from %APPDATA%\icqm\icq\smiles\smiles\set03\mocking.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\mocking.gif.gоod
from %ProgramFiles%\firefox\xpt_link.exe to %ProgramFiles%\firefox\xpt_link.exe.gоod
from %ProgramFiles%\hsockpe\hsockpe.exe to %ProgramFiles%\hsockpe\hsockpe.exe.gоod
from %ProgramFiles%\fssf\fssf.exe to %ProgramFiles%\fssf\fssf.exe.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd14655_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd14655_.gif.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\varargs.h to %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\varargs.h.gоod
from %APPDATA%\thunderbird\profiles\cr5sc40q.default\key3.db to %APPDATA%\thunderbird\profiles\cr5sc40q.default\key3.db.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\vcclr.h to %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\vcclr.h.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd19582_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\bd19582_.gif.gоod
from %ProgramFiles%\fssm32\fssm32.exe to %ProgramFiles%\fssm32\fssm32.exe.gоod
from %APPDATA%\icqm\icq\smiles\smiles\set04\s011.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s011.gif.gоod
from %APPDATA%\icqm\icq\smiles\flash\love_bear_rose.swf to %APPDATA%\icqm\icq\smiles\flash\love_bear_rose.swf.gоod
from %ProgramFiles%\microsoft office\media\office12\lines\bd15035_.gif to %ProgramFiles%\microsoft office\media\office12\lines\bd15035_.gif.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0234657.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0234657.wmf.gоod
from %APPDATA%\thunderbird\profiles\cr5sc40q.default\mailviews.dat to %APPDATA%\thunderbird\profiles\cr5sc40q.default\mailviews.dat.gоod
from %ProgramFiles%\installlsp\installlsp.exe to %ProgramFiles%\installlsp\installlsp.exe.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\wchar.h to %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\wchar.h.gоod
from %APPDATA%\icqm\icq\smiles\smiles\set03\pardon.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\pardon.gif.gоod
from %APPDATA%\icqm\icq\smiles\smiles\set03\rofl.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\rofl.gif.gоod
from %ProgramFiles%\iexplore\iexplore.exe to %ProgramFiles%\iexplore\iexplore.exe.gоod
from %ProgramFiles%\microsoft office\media\office12\autoshap\bd18228_.wmf to %ProgramFiles%\microsoft office\media\office12\autoshap\bd18228_.wmf.gоod
from %ProgramFiles%\microsoft office\media\office12\lines\bd15034_.gif to %ProgramFiles%\microsoft office\media\office12\lines\bd15034_.gif.gоod
from %APPDATA%\icqm\icq\smiles\smiles\set04\s010.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s010.gif.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd14691_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd14691_.gif.gоod
from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_odkl_offline.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_odkl_offline.ico.gоod
from %ProgramFiles%\google\chrome\application\debug.log to %ProgramFiles%\google\chrome\application\debug.log.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0234266.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0234266.wmf.gоod
from %APPDATA%\icqm\icq\smiles\smiles\set03\nea.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\nea.gif.gоod
from %APPDATA%\icqm\icq\smiles\smiles\animated\sleep.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\sleep.gif.gоod
from %ProgramFiles%\iamapp\iamapp.exe to %ProgramFiles%\iamapp\iamapp.exe.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0233312.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0233312.wmf.gоod
from %ProgramFiles%\microsoft office\media\office12\lines\bd14996_.gif to %ProgramFiles%\microsoft office\media\office12\lines\bd14996_.gif.gоod
from %ProgramFiles%\helpctr\helpctr.exe to %ProgramFiles%\helpctr\helpctr.exe.gоod
from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_odkl_connecting.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_odkl_connecting.ico.gоod
from %APPDATA%\icqm\icq\smiles\flash\love_bear_hugs.swf to %APPDATA%\icqm\icq\smiles\flash\love_bear_hugs.swf.gоod
from %APPDATA%\icqm\icq\smiles\smiles\animated\red.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\red.gif.gоod
from %ProgramFiles%\firefox\xpidl.exe to %ProgramFiles%\firefox\xpidl.exe.gоod
from %ProgramFiles%\fspex\fspex.exe to %ProgramFiles%\fspex\fspex.exe.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd14582_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd14582_.gif.gоod
from %ProgramFiles%\microsoft office\media\office12\autoshap\bd18224_.wmf to %ProgramFiles%\microsoft office\media\office12\autoshap\bd18224_.wmf.gоod
from %APPDATA%\thunderbird\profiles\cr5sc40q.default\cookies.sqlite to %APPDATA%\thunderbird\profiles\cr5sc40q.default\cookies.sqlite.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd10890_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\bd10890_.gif.gоod
from %ProgramFiles%\gw\gw.exe to %ProgramFiles%\gw\gw.exe.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0233018.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0233018.wmf.gоod
from %APPDATA%\icqm\icq\smiles\smiles\set03\kiss_mini.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\kiss_mini.gif.gоod
from %APPDATA%\icqm\icq\smiles\smiles\set04\s009.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s009.gif.gоod
from %ProgramFiles%\helper\helper.exe to %ProgramFiles%\helper\helper.exe.gоod
from %ProgramFiles%\fsfwwsch\fsfwwsch.exe to %ProgramFiles%\fsfwwsch\fsfwwsch.exe.gоod
from %ProgramFiles%\microsoft office\media\office12\lines\bd14845_.gif to %ProgramFiles%\microsoft office\media\office12\lines\bd14845_.gif.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\tchar.h to %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\tchar.h.gоod
from %APPDATA%\icqm\icq\smiles\smiles\animated\rainbow.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\rainbow.gif.gоod
from %ProgramFiles%\firefox\xpcshell.exe to %ProgramFiles%\firefox\xpcshell.exe.gоod
from %ProgramFiles%\far2\addons\readme.txt to %ProgramFiles%\far2\addons\readme.txt.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\time.h to %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\time.h.gоod
from %ProgramFiles%\hipsdiag\hipsdiag.exe to %ProgramFiles%\hipsdiag\hipsdiag.exe.gоod
from %ProgramFiles%\microsoft office\media\office12\lines\bd14882_.gif to %ProgramFiles%\microsoft office\media\office12\lines\bd14882_.gif.gоod
from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_odkl_gray.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_odkl_gray.ico.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\typeinfo.h to %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\typeinfo.h.gоod
from %ProgramFiles%\microsoft office\media\office12\autoshap\bd18226_.wmf to %ProgramFiles%\microsoft office\media\office12\autoshap\bd18226_.wmf.gоod
from %ProgramFiles%\hregmon\hregmon.exe to %ProgramFiles%\hregmon\hregmon.exe.gоod
from %TEMP%\mirc743.exe to %TEMP%\mirc743.exe.gоod
from %ProgramFiles%\microsoft office\office12\xml2word.xsl to %ProgramFiles%\microsoft office\office12\xml2word.xsl.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd10972_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\bd10972_.gif.gоod
from %APPDATA%\icqm\icq\smiles\smiles\set03\man_in_love.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\man_in_love.gif.gоod
from %APPDATA%\thunderbird\profiles\cr5sc40q.default\foldertree.json to %APPDATA%\thunderbird\profiles\cr5sc40q.default\foldertree.json.gоod
from %ProgramFiles%\firefox\xpt_dump.exe to %ProgramFiles%\firefox\xpt_dump.exe.gоod
from %ProgramFiles%\fsqh\fsqh.exe to %ProgramFiles%\fsqh\fsqh.exe.gоod
from %ProgramFiles%\microsoft office\media\office12\lines\bd14883_.gif to %ProgramFiles%\microsoft office\media\office12\lines\bd14883_.gif.gоod
from %ProgramFiles%\microsoft office\office12\xlcprtid.xml to %ProgramFiles%\microsoft office\office12\xlcprtid.xml.gоod
from %ProgramFiles%\fsfwwscr\fsfwwscr.exe to %ProgramFiles%\fsfwwscr\fsfwwscr.exe.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd14654_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd14654_.gif.gоod
from %ProgramFiles%\microsoft office\media\office12\autoshap\bd18225_.wmf to %ProgramFiles%\microsoft office\media\office12\autoshap\bd18225_.wmf.gоod
from %ProgramFiles%\hrres\hrres.exe to %ProgramFiles%\hrres\hrres.exe.gоod
from %APPDATA%\icqm\icq\smiles\smiles\animated\sad.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\sad.gif.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0233070.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0233070.wmf.gоod
from %ProgramFiles%\giantantispywareupdater\giantantispywareupdater.exe to %ProgramFiles%\giantantispywareupdater\giantantispywareupdater.exe.gоod
from %ProgramFiles%\microsoft office\media\office12\bullets\bd14583_.gif to %ProgramFiles%\microsoft office\media\office12\bullets\bd14583_.gif.gоod
from %APPDATA%\thunderbird\profiles\cr5sc40q.default\extensions.json to %APPDATA%\thunderbird\profiles\cr5sc40q.default\extensions.json.gоod
from %ProgramFiles%\microsoft office\office12\ois.exe to %ProgramFiles%\microsoft office\office12\ois.exe.gоod
from %ProgramFiles%\microsoft office\media\office12\lines\bd21313_.gif to %ProgramFiles%\microsoft office\media\office12\lines\bd21313_.gif.gоod
from %ProgramFiles%\digsby\digsby.exe to %ProgramFiles%\digsby\digsby.exe.gоod
from %ProgramFiles%\microsoft office\media\office12\autoshap\bd18190_.wmf to %ProgramFiles%\microsoft office\media\office12\autoshap\bd18190_.wmf.gоod
from %ProgramFiles%\microsoft office\templates\1033\contemporaryphotoalbum.potx to %ProgramFiles%\microsoft office\templates\1033\contemporaryphotoalbum.potx.gоod
from %ProgramFiles%\almon\almon.exe to %ProgramFiles%\almon\almon.exe.gоod
from %ProgramFiles%\microsoft office\office12\dssm.exe to %ProgramFiles%\microsoft office\office12\dssm.exe.gоod
from %ProgramFiles%\microsoft office\document themes 12\apex.thmx to %ProgramFiles%\microsoft office\document themes 12\apex.thmx.gоod
from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143743.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143743.gif.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00176_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00176_.gif.gоod
from %ProgramFiles%\airdefense\airdefense.exe to %ProgramFiles%\airdefense\airdefense.exe.gоod
from %APPDATA%\opera software\opera stable\bookmarks_20150820125841.backup to %APPDATA%\opera software\opera stable\bookmarks_20150820125841.backup.gоod
from %ProgramFiles%\microsoft office\templates\1033\classicphotoalbum.potx to %ProgramFiles%\microsoft office\templates\1033\classicphotoalbum.potx.gоod
from %APPDATA%\icqm\icq\smiles\mrasmileslang_ua.xml to %APPDATA%\icqm\icq\smiles\mrasmileslang_ua.xml.gоod
from %ProgramFiles%\alsvc\alsvc.exe to %ProgramFiles%\alsvc\alsvc.exe.gоod
from %HOMEPATH%\local settings\application data\gdipfontcachev1.dat to %HOMEPATH%\local settings\application data\gdipfontcachev1.dat.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00175_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00175_.gif.gоod
from %ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\mappings\mac\ukraine.txt to %ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\mappings\mac\ukraine.txt.gоod
from %APPDATA%\opera software\opera stable\bookmarks_20150820125840.backup to %APPDATA%\opera software\opera stable\bookmarks_20150820125840.backup.gоod
from %ProgramFiles%\microsoft office\templates\1033\bloodpressuretracker.xltx to %ProgramFiles%\microsoft office\templates\1033\bloodpressuretracker.xltx.gоod
from %APPDATA%\icqm\icq\html\kz\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\kz\loading\progress_agent.gif.gоod
from %ProgramFiles%\microsoft office\office12\drat.exe to %ProgramFiles%\microsoft office\office12\drat.exe.gоod
from %APPDATA%\icqm\icq\smiles\mrasmileslang_ru.xml to %APPDATA%\icqm\icq\smiles\mrasmileslang_ru.xml.gоod
from %ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\mappings\mac\turkish.txt to %ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\mappings\mac\turkish.txt.gоod
from %APPDATA%\icqm\icq\smiles\mrasmileslang_tr.xml to %APPDATA%\icqm\icq\smiles\mrasmileslang_tr.xml.gоod
from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143745.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143745.gif.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\an00790_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an00790_.wmf.gоod
from %APPDATA%\opera software\opera stable\bookmarks_20150820130020.backup to %APPDATA%\opera software\opera stable\bookmarks_20150820130020.backup.gоod
from %ProgramFiles%\ashchest\ashchest.exe to %ProgramFiles%\ashchest\ashchest.exe.gоod
from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143746.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143746.gif.gоod
from %ProgramFiles%\microsoft office\templates\1033\equitymergefax.dotx to %ProgramFiles%\microsoft office\templates\1033\equitymergefax.dotx.gоod
from %APPDATA%\opera software\opera stable\bookmarks_20150820130022.backup to %APPDATA%\opera software\opera stable\bookmarks_20150820130022.backup.gоod
from %ProgramFiles%\microsoft office\office12\excelcnv.exe to %ProgramFiles%\microsoft office\office12\excelcnv.exe.gоod
from %ProgramFiles%\antivirus\antivirus.exe to %ProgramFiles%\antivirus\antivirus.exe.gоod
from %APPDATA%\icqm\icq\smiles\skin.txt to %APPDATA%\icqm\icq\smiles\skin.txt.gоod
from %ProgramFiles%\microsoft office\document themes 12\civic.thmx to %ProgramFiles%\microsoft office\document themes 12\civic.thmx.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\an00015_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an00015_.wmf.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00174_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00174_.gif.gоod
from %ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\mappings\win\cp1251.txt to %ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\mappings\win\cp1251.txt.gоod
from %ProgramFiles%\microsoft office\templates\1033\equityletter.dotx to %ProgramFiles%\microsoft office\templates\1033\equityletter.dotx.gоod
from %ProgramFiles%\amsn\amsn.exe to %ProgramFiles%\amsn\amsn.exe.gоod
from %APPDATA%\opera software\opera stable\bookmarks_20150820130021.backup to %APPDATA%\opera software\opera stable\bookmarks_20150820130021.backup.gоod
from %APPDATA%\icqm\icq\smiles\mrasmileslang_uz.xml to %APPDATA%\icqm\icq\smiles\mrasmileslang_uz.xml.gоod
from %ProgramFiles%\anti-trojan\anti-trojan.exe to %ProgramFiles%\anti-trojan\anti-trojan.exe.gоod
from %ProgramFiles%\microsoft office\office12\excel.exe to %ProgramFiles%\microsoft office\office12\excel.exe.gоod
from %ProgramFiles%\microsoft office\document themes 12\aspect.thmx to %ProgramFiles%\microsoft office\document themes 12\aspect.thmx.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\an00010_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an00010_.wmf.gоod
from %ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\mappings\win\cp1250.txt to %ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\mappings\win\cp1250.txt.gоod
from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143744.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143744.gif.gоod
from %ProgramFiles%\amon\amon.exe to %ProgramFiles%\amon\amon.exe.gоod
from %ProgramFiles%\aimpro\aimpro.exe to %ProgramFiles%\aimpro\aimpro.exe.gоod
from %APPDATA%\icqm\icq\smiles\mrasmileslang_de.xml to %APPDATA%\icqm\icq\smiles\mrasmileslang_de.xml.gоod
from %APPDATA%\opera software\opera stable\bookmarks.bak to %APPDATA%\opera software\opera stable\bookmarks.bak.gоod
from %ProgramFiles%\microsoft office\office12\accicons.exe to %ProgramFiles%\microsoft office\office12\accicons.exe.gоod
from %ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\mappings\mac\iceland.txt to %ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\mappings\mac\iceland.txt.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00169_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00169_.gif.gоod
from %ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\mappings\mac\greek.txt to %ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\mappings\mac\greek.txt.gоod
from %APPDATA%\icqm\icq\smiles\mrasmileslang_cz.xml to %APPDATA%\icqm\icq\smiles\mrasmileslang_cz.xml.gоod
from %APPDATA%\icqm\icq\html\en\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\en\loading\progress_agent.gif.gоod
from %APPDATA%\opera software\opera stable\bookmarks to %APPDATA%\opera software\opera stable\bookmarks.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00167_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00167_.gif.gоod
from %ProgramFiles%\zonealarm\zonealarm.exe to %ProgramFiles%\zonealarm\zonealarm.exe.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\tracker\warning.gif to %ProgramFiles%\adobe\reader 10.0\reader\tracker\warning.gif.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\tracker\turnonnotificationinacrobat.gif to %ProgramFiles%\adobe\reader 10.0\reader\tracker\turnonnotificationinacrobat.gif.gоod
from %APPDATA%\icqm\icq\smiles\mrasmileslang_bg.xml to %APPDATA%\icqm\icq\smiles\mrasmileslang_bg.xml.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00165_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00165_.gif.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\tracker\turnoffnotificationintray.gif to %ProgramFiles%\adobe\reader 10.0\reader\tracker\turnoffnotificationintray.gif.gоod
from %ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\mappings\mac\cyrillic.txt to %ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\mappings\mac\cyrillic.txt.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\tracker\turnoffnotificationinacrobat.gif to %ProgramFiles%\adobe\reader 10.0\reader\tracker\turnoffnotificationinacrobat.gif.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\tracker\trash.gif to %ProgramFiles%\adobe\reader 10.0\reader\tracker\trash.gif.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00164_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00164_.gif.gоod
from %ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\mappings\mac\croatian.txt to %ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\mappings\mac\croatian.txt.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\tracker\turnonnotificationintray.gif to %ProgramFiles%\adobe\reader 10.0\reader\tracker\turnonnotificationintray.gif.gоod
from %ProgramFiles%\microsoft office\templates\1033\billingstatement.xltx to %ProgramFiles%\microsoft office\templates\1033\billingstatement.xltx.gоod
from %ProgramFiles%\microsoft office\templates\1033\blog.dotx to %ProgramFiles%\microsoft office\templates\1033\blog.dotx.gоod
from %APPDATA%\icqm\icq\smiles\mrasmileslang_en.xml to %APPDATA%\icqm\icq\smiles\mrasmileslang_en.xml.gоod
from %APPDATA%\opera software\opera stable\bookmarks_20150820125839.backup to %APPDATA%\opera software\opera stable\bookmarks_20150820125839.backup.gоod
from %ProgramFiles%\microsoft office\office12\cnfnot32.exe to %ProgramFiles%\microsoft office\office12\cnfnot32.exe.gоod
from %APPDATA%\icqm\icq\smiles\mrasmileslang_pt.xml to %APPDATA%\icqm\icq\smiles\mrasmileslang_pt.xml.gоod
from %ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\mappings\mac\symbol.txt to %ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\mappings\mac\symbol.txt.gоod
from %ProgramFiles%\aim6\aim6.exe to %ProgramFiles%\aim6\aim6.exe.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00172_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00172_.gif.gоod
from %HOMEPATH%\favorites\links\почта.url to %HOMEPATH%\favorites\links\почта.url.gоod
from %APPDATA%\opera software\opera stable\bookmarks_20150820125838.backup to %APPDATA%\opera software\opera stable\bookmarks_20150820125838.backup.gоod
from %ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\mappings\mac\romanian.txt to %ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\mappings\mac\romanian.txt.gоod
from %HOMEPATH%\favorites\links\яндекс.url to %HOMEPATH%\favorites\links\яндекс.url.gоod
from %ProgramFiles%\microsoft office\office12\clview.exe to %ProgramFiles%\microsoft office\office12\clview.exe.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00171_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00171_.gif.gоod
from %ProgramFiles%\ahnsd\ahnsd.exe to %ProgramFiles%\ahnsd\ahnsd.exe.gоod
from %APPDATA%\icqm\icq\smiles\mrasmileslang_kz.xml to %APPDATA%\icqm\icq\smiles\mrasmileslang_kz.xml.gоod
from %APPDATA%\icqm\icq\html\ru\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\ru\loading\progress_agent.gif.gоod
from %APPDATA%\opera software\opera stable\bookmarksextras to %APPDATA%\opera software\opera stable\bookmarksextras.gоod
from %ProgramFiles%\ageofconan\ageofconan.exe to %ProgramFiles%\ageofconan\ageofconan.exe.gоod
from %ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\mappings\mac\roman.txt to %ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\mappings\mac\roman.txt.gоod
from %ProgramFiles%\microsoft office\office12\cgmimp32.hlp to %ProgramFiles%\microsoft office\office12\cgmimp32.hlp.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00170_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00170_.gif.gоod
from %APPDATA%\icqm\icq\html\pt\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\pt\loading\progress_agent.gif.gоod
from %APPDATA%\opera software\opera stable\cookies to %APPDATA%\opera software\opera stable\cookies.gоod
from %APPDATA%\icqm\icq\smiles\flash\beer.swf to %APPDATA%\icqm\icq\smiles\flash\beer.swf.gоod
from %APPDATA%\opera software\opera stable\bookmarks_20150820130023.backup to %APPDATA%\opera software\opera stable\bookmarks_20150820130023.backup.gоod
from %ProgramFiles%\microsoft office\document themes 12\module.thmx to %ProgramFiles%\microsoft office\document themes 12\module.thmx.gоod
from %APPDATA%\icqm\icq\sounds\auth.mp3 to %APPDATA%\icqm\icq\sounds\auth.mp3.gоod
from %ProgramFiles%\avgcc\avgcc.exe to %ProgramFiles%\avgcc\avgcc.exe.gоod
from %ProgramFiles%\ashupd\ashupd.exe to %ProgramFiles%\ashupd\ashupd.exe.gоod
from %APPDATA%\opera software\opera stable\default_partner_content.json to %APPDATA%\opera software\opera stable\default_partner_content.json.gоod
from %ProgramFiles%\microsoft office\office12\grooveclean.exe to %ProgramFiles%\microsoft office\office12\grooveclean.exe.gоod
from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb00516l.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb00516l.gif.gоod
from %APPDATA%\icqm\icq\smiles\flash\bad_cold.swf to %APPDATA%\icqm\icq\smiles\flash\bad_cold.swf.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\an01044_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01044_.wmf.gоod
from %ProgramFiles%\microsoft office\templates\1033\medianletter.dotx to %ProgramFiles%\microsoft office\templates\1033\medianletter.dotx.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\cagcat10.mmw to %ProgramFiles%\microsoft office\media\cagcat10\cagcat10.mmw.gоod
from %APPDATA%\icqm\icq\video\video.swf to %APPDATA%\icqm\icq\video\video.swf.gоod
from %ProgramFiles%\microsoft office\document themes 12\metro.thmx to %ProgramFiles%\microsoft office\document themes 12\metro.thmx.gоod
from %ProgramFiles%\ashpopwz\ashpopwz.exe to %ProgramFiles%\ashpopwz\ashpopwz.exe.gоod
from %ProgramFiles%\microsoft office\templates\1033\loanamortization.xltx to %ProgramFiles%\microsoft office\templates\1033\loanamortization.xltx.gоod
from %ProgramFiles%\agb5\agb5.exe to %ProgramFiles%\agb5\agb5.exe.gоod
from %APPDATA%\opera software\opera stable\current session to %APPDATA%\opera software\opera stable\current session.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\an01039_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01039_.wmf.gоod
from %ProgramFiles%\microsoft office\office12\grooveauditservice.exe to %ProgramFiles%\microsoft office\office12\grooveauditservice.exe.gоod
from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143758.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143758.gif.gоod
from %ProgramFiles%\ashskpck\ashskpck.exe to %ProgramFiles%\ashskpck\ashskpck.exe.gоod
from %ProgramFiles%\microsoft office\document themes 12\opulent.thmx to %ProgramFiles%\microsoft office\document themes 12\opulent.thmx.gоod
from %ProgramFiles%\microsoft office\document themes 12\concourse.thmx to %ProgramFiles%\microsoft office\document themes 12\concourse.thmx.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\elphrg01.wav to %ProgramFiles%\microsoft office\media\cagcat10\elphrg01.wav.gоod
from %ProgramFiles%\aswregsvr\aswregsvr.exe to %ProgramFiles%\aswregsvr\aswregsvr.exe.gоod
from %ProgramFiles%\microsoft office\templates\1033\medianmergeletter.dotx to %ProgramFiles%\microsoft office\templates\1033\medianmergeletter.dotx.gоod
from %APPDATA%\icqm\icq\sounds\conference.mp3 to %APPDATA%\icqm\icq\sounds\conference.mp3.gоod
from %APPDATA%\opera software\opera stable\favicons-journal to %APPDATA%\opera software\opera stable\favicons-journal.gоod
from %ProgramFiles%\avgemc\avgemc.exe to %ProgramFiles%\avgemc\avgemc.exe.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0088542.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0088542.wmf.gоod
from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb00673l.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb00673l.gif.gоod
from %ProgramFiles%\microsoft office\office12\groovestdurllauncher.exe to %ProgramFiles%\microsoft office\office12\groovestdurllauncher.exe.gоod
from %ProgramFiles%\ashserv\ashserv.exe to %ProgramFiles%\ashserv\ashserv.exe.gоod
from %ProgramFiles%\ashavsrv\ashavsrv.exe to %ProgramFiles%\ashavsrv\ashavsrv.exe.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\an01084_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01084_.wmf.gоod
from %APPDATA%\opera software\opera stable\favicons to %APPDATA%\opera software\opera stable\favicons.gоod
from %APPDATA%\icqm\icq\sounds\busy.mp3 to %APPDATA%\icqm\icq\sounds\busy.mp3.gоod
from %ProgramFiles%\ash_updatemediator\ash_updatemediator.exe to %ProgramFiles%\ash_updatemediator\ash_updatemediator.exe.gоod
from %ProgramFiles%\microsoft office\templates\1033\medianmergefax.dotx to %ProgramFiles%\microsoft office\templates\1033\medianmergefax.dotx.gоod
from %APPDATA%\icqm\icq\smiles\flash\beback.swf to %APPDATA%\icqm\icq\smiles\flash\beback.swf.gоod
from %ProgramFiles%\avgdiag\avgdiag.exe to %ProgramFiles%\avgdiag\avgdiag.exe.gоod
from %ProgramFiles%\microsoft office\office12\groovemigrator.exe to %ProgramFiles%\microsoft office\office12\groovemigrator.exe.gоod
from %ProgramFiles%\ashwebsv\ashwebsv.exe to %ProgramFiles%\ashwebsv\ashwebsv.exe.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\an01060_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01060_.wmf.gоod
from %ProgramFiles%\ashquick\ashquick.exe to %ProgramFiles%\ashquick\ashquick.exe.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\tracker\tr.gif to %ProgramFiles%\adobe\reader 10.0\reader\tracker\tr.gif.gоod
from %ProgramFiles%\ashmaisv\ashmaisv.exe to %ProgramFiles%\ashmaisv\ashmaisv.exe.gоod
from %ProgramFiles%\microsoft office\templates\1033\equityresume.dotx to %ProgramFiles%\microsoft office\templates\1033\equityresume.dotx.gоod
from %ProgramFiles%\microsoft office\document themes 12\flow.thmx to %ProgramFiles%\microsoft office\document themes 12\flow.thmx.gоod
from %APPDATA%\opera software\opera stable\certificate revocation lists to %APPDATA%\opera software\opera stable\certificate revocation lists.gоod
from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143750.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143750.gif.gоod
from %ProgramFiles%\armorsurf\armorsurf.exe to %ProgramFiles%\armorsurf\armorsurf.exe.gоod
from %ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\mappings\win\cp1254.txt to %ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\mappings\win\cp1254.txt.gоod
from %ProgramFiles%\microsoft office\office12\exlirmv.xml to %ProgramFiles%\microsoft office\office12\exlirmv.xml.gоod
from %APPDATA%\opera software\opera stable\browser.js to %APPDATA%\opera software\opera stable\browser.js.gоod
from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143749.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143749.gif.gоod
from %ProgramFiles%\microsoft office\templates\1033\equityreport.dotx to %ProgramFiles%\microsoft office\templates\1033\equityreport.dotx.gоod
from %ProgramFiles%\ashenhcd\ashenhcd.exe to %ProgramFiles%\ashenhcd\ashenhcd.exe.gоod
from %ProgramFiles%\ashdug\ashdug.exe to %ProgramFiles%\ashdug\ashdug.exe.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\an00853_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an00853_.wmf.gоod
from %ProgramFiles%\armor2net\armor2net.exe to %ProgramFiles%\armor2net\armor2net.exe.gоod
from %APPDATA%\icqm\icq\html\tr\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\tr\loading\progress_agent.gif.gоod
from %ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\mappings\win\cp1253.txt to %ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\mappings\win\cp1253.txt.gоod
from %ProgramFiles%\ashdisp\ashdisp.exe to %ProgramFiles%\ashdisp\ashdisp.exe.gоod
from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143748.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143748.gif.gоod
from %ProgramFiles%\microsoft office\office12\exlirm.xml to %ProgramFiles%\microsoft office\office12\exlirm.xml.gоod
from %ProgramFiles%\aoltbserver\aoltbserver.exe to %ProgramFiles%\aoltbserver\aoltbserver.exe.gоod
from %ProgramFiles%\microsoft office\templates\1033\equitymergeletter.dotx to %ProgramFiles%\microsoft office\templates\1033\equitymergeletter.dotx.gоod
from %ProgramFiles%\microsoft office\document themes 12\equity.thmx to %ProgramFiles%\microsoft office\document themes 12\equity.thmx.gоod
from %ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\mappings\win\cp1252.txt to %ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\mappings\win\cp1252.txt.gоod
from %ProgramFiles%\microsoft office\document themes 12\median.thmx to %ProgramFiles%\microsoft office\document themes 12\median.thmx.gоod
from %ProgramFiles%\microsoft office\office12\graph.exe to %ProgramFiles%\microsoft office\office12\graph.exe.gоod
from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143754.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143754.gif.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\an00965_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an00965_.wmf.gоod
from %APPDATA%\icqm\icq\smiles\flash\angel.swf to %APPDATA%\icqm\icq\smiles\flash\angel.swf.gоod
from %ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\mappings\win\cp1258.txt to %ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\mappings\win\cp1258.txt.gоod
from %ProgramFiles%\ashavast\ashavast.exe to %ProgramFiles%\ashavast\ashavast.exe.gоod
from %APPDATA%\opera software\opera stable\cookies-journal to %APPDATA%\opera software\opera stable\cookies-journal.gоod
from %ProgramFiles%\microsoft office\templates\presentation designs\maple.gif to %ProgramFiles%\microsoft office\templates\presentation designs\maple.gif.gоod
from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143753.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143753.gif.gоod
from %ProgramFiles%\microsoft office\office12\groove.exe to %ProgramFiles%\microsoft office\office12\groove.exe.gоod
from %ProgramFiles%\microsoft office\templates\1033\introducingpowerpoint2007.potx to %ProgramFiles%\microsoft office\templates\1033\introducingpowerpoint2007.potx.gоod
from %ProgramFiles%\microsoft office\templates\1033\expensereport.xltx to %ProgramFiles%\microsoft office\templates\1033\expensereport.xltx.gоod
from %ProgramFiles%\ashlogv\ashlogv.exe to %ProgramFiles%\ashlogv\ashlogv.exe.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\an00932_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an00932_.wmf.gоod
from %ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\mappings\win\cp1257.txt to %ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\mappings\win\cp1257.txt.gоod
from %ProgramFiles%\microsoft office\document themes 12\foundry.thmx to %ProgramFiles%\microsoft office\document themes 12\foundry.thmx.gоod
from %APPDATA%\icqm\icq\html\ua\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\ua\loading\progress_agent.gif.gоod
from %ProgramFiles%\ash\ash.exe to %ProgramFiles%\ash\ash.exe.gоod
from %ProgramFiles%\microsoft office\templates\12\msenewfileitems\textfile.txt to %ProgramFiles%\microsoft office\templates\12\msenewfileitems\textfile.txt.gоod
from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143752.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143752.gif.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\an00914_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an00914_.wmf.gоod
from %APPDATA%\icqm\icq\smiles\flash\akitaka.swf to %APPDATA%\icqm\icq\smiles\flash\akitaka.swf.gоod
from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb00531l.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb00531l.gif.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\tracker\tl.gif to %ProgramFiles%\adobe\reader 10.0\reader\tracker\tl.gif.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\tracker\reviews_super.gif to %ProgramFiles%\adobe\reader 10.0\reader\tracker\reviews_super.gif.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\plug_ins\dva.api to %ProgramFiles%\adobe\reader 10.0\reader\plug_ins\dva.api.gоod
from %APPDATA%\icqm\icq\dll\altergeo.msi to %APPDATA%\icqm\icq\dll\altergeo.msi.gоod
from %ProgramFiles%\mcregwiz\mcregwiz.exe to %ProgramFiles%\mcregwiz\mcregwiz.exe.gоod
from %APPDATA%\icqm\icq\database\citylist_uz.csv to %APPDATA%\icqm\icq\database\citylist_uz.csv.gоod
from %ProgramFiles%\mcmnhdlr\mcmnhdlr.exe to %ProgramFiles%\mcmnhdlr\mcmnhdlr.exe.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\plug_ins\digsig.api to %ProgramFiles%\adobe\reader 10.0\reader\plug_ins\digsig.api.gоod
from %APPDATA%\icqm\icq\database\citylist_ua.csv to %APPDATA%\icqm\icq\database\citylist_ua.csv.gоod
from %ProgramFiles%\maxthon\maxthon.exe to %ProgramFiles%\maxthon\maxthon.exe.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\plug_ins\checkers.api to %ProgramFiles%\adobe\reader 10.0\reader\plug_ins\checkers.api.gоod
from %APPDATA%\icqm\icq\dll\mailrusputnik.exe to %APPDATA%\icqm\icq\dll\mailrusputnik.exe.gоod
from %ProgramFiles%\maplestory\maplestory.exe to %ProgramFiles%\maplestory\maplestory.exe.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\plug_ins\annots.api to %ProgramFiles%\adobe\reader 10.0\reader\plug_ins\annots.api.gоod
from %APPDATA%\icqm\icq\database\citylist_ru.csv to %APPDATA%\icqm\icq\database\citylist_ru.csv.gоod
from %ProgramFiles%\malwareremoval\malwareremoval.exe to %ProgramFiles%\malwareremoval\malwareremoval.exe.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\plug_ins\acrosign.prc to %ProgramFiles%\adobe\reader 10.0\reader\plug_ins\acrosign.prc.gоod
from %APPDATA%\icqm\icq\database\citylist_kz.csv to %APPDATA%\icqm\icq\database\citylist_kz.csv.gоod
from %ProgramFiles%\magent\magent.exe to %ProgramFiles%\magent\magent.exe.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\plug_ins\acroform.api to %ProgramFiles%\adobe\reader 10.0\reader\plug_ins\acroform.api.gоod
from %APPDATA%\icqm\icq\database\citylist_en.csv to %APPDATA%\icqm\icq\database\citylist_en.csv.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\plug_ins\accessibility.api to %ProgramFiles%\adobe\reader 10.0\reader\plug_ins\accessibility.api.gоod
from %APPDATA%\icqm\icq\database\citylist_tr.csv to %APPDATA%\icqm\icq\database\citylist_tr.csv.gоod
from %ProgramFiles%\messenger\newalert.wav to %ProgramFiles%\messenger\newalert.wav.gоod
from %ProgramFiles%\adobe\reader 10.0\resource\font\adobepistd.otf to %ProgramFiles%\adobe\reader 10.0\resource\font\adobepistd.otf.gоod
from %ProgramFiles%\mcupdmgr\mcupdmgr.exe to %ProgramFiles%\mcupdmgr\mcupdmgr.exe.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\plug_ins\search.api to %ProgramFiles%\adobe\reader 10.0\reader\plug_ins\search.api.gоod
from %ProgramFiles%\mfpmp\mfpmp.exe to %ProgramFiles%\mfpmp\mfpmp.exe.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\plug_ins\saveasrtf.api to %ProgramFiles%\adobe\reader 10.0\reader\plug_ins\saveasrtf.api.gоod
from %ProgramFiles%\messenger\xpmsgr.chm to %ProgramFiles%\messenger\xpmsgr.chm.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\plug_ins\reflow.api to %ProgramFiles%\adobe\reader 10.0\reader\plug_ins\reflow.api.gоod
from %ProgramFiles%\messenger\type.wav to %ProgramFiles%\messenger\type.wav.gоod
from %ProgramFiles%\messenger\online.wav to %ProgramFiles%\messenger\online.wav.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\plug_ins\readoutloud.api to %ProgramFiles%\adobe\reader 10.0\reader\plug_ins\readoutloud.api.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\plug_ins\ppklite.api to %ProgramFiles%\adobe\reader 10.0\reader\plug_ins\ppklite.api.gоod
from %APPDATA%\icqm\icqsetup.exe to %APPDATA%\icqm\icqsetup.exe.gоod
from %ProgramFiles%\messenger\newemail.wav to %ProgramFiles%\messenger\newemail.wav.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\plug_ins\pddom.api to %ProgramFiles%\adobe\reader 10.0\reader\plug_ins\pddom.api.gоod
from %ProgramFiles%\messenger\msmsgs.exe to %ProgramFiles%\messenger\msmsgs.exe.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\plug_ins\multimedia.api to %ProgramFiles%\adobe\reader 10.0\reader\plug_ins\multimedia.api.gоod
from %ProgramFiles%\messenger\lvback.gif to %ProgramFiles%\messenger\lvback.gif.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\plug_ins\makeaccessible.api to %ProgramFiles%\adobe\reader 10.0\reader\plug_ins\makeaccessible.api.gоod
from %ProgramFiles%\memstring\memstring.exe to %ProgramFiles%\memstring\memstring.exe.gоod
from %ProgramFiles%\mcvsshld\mcvsshld.exe to %ProgramFiles%\mcvsshld\mcvsshld.exe.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\plug_ins\ia32.api to %ProgramFiles%\adobe\reader 10.0\reader\plug_ins\ia32.api.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\plug_ins\escript.api to %ProgramFiles%\adobe\reader 10.0\reader\plug_ins\escript.api.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\plug_ins\ebook.api to %ProgramFiles%\adobe\reader 10.0\reader\plug_ins\ebook.api.gоod
from %ProgramFiles%\mcshield\mcshield.exe to %ProgramFiles%\mcshield\mcshield.exe.gоod
from %APPDATA%\icq-profile\base\mra.dbs to %APPDATA%\icq-profile\base\mra.dbs.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\acrobroker.exe to %ProgramFiles%\adobe\reader 10.0\reader\acrobroker.exe.gоod
from %ProgramFiles%\adobe\acrobat.com\meta-inf\air\publisherid to %ProgramFiles%\adobe\acrobat.com\meta-inf\air\publisherid.gоod
from %ProgramFiles%\adobe\acrobat.com\meta-inf\air\hash to %ProgramFiles%\adobe\acrobat.com\meta-inf\air\hash.gоod
from %ProgramFiles%\adobe\acrobat.com\meta-inf\air\application.xml to %ProgramFiles%\adobe\acrobat.com\meta-inf\air\application.xml.gоod
from %ProgramFiles%\adobe\acrobat.com\meta-inf\signatures.xml to %ProgramFiles%\adobe\acrobat.com\meta-inf\signatures.xml.gоod
from %ProgramFiles%\adobe\acrobat.com\bin-debug\appcontainer.swf to %ProgramFiles%\adobe\acrobat.com\bin-debug\appcontainer.swf.gоod
from %ProgramFiles%\adobe\acrobat.com\version.xml to %ProgramFiles%\adobe\acrobat.com\version.xml.gоod
from %ProgramFiles%\adobe\acrobat.com\mimetype to %ProgramFiles%\adobe\acrobat.com\mimetype.gоod
from %ProgramFiles%\adobe\acrobat.com\acrobat.com.exe to %ProgramFiles%\adobe\acrobat.com\acrobat.com.exe.gоod
from %ProgramFiles%\admunch\admunch.exe to %ProgramFiles%\admunch\admunch.exe.gоod
from %APPDATA%\.purple\prefs.xml to %APPDATA%\.purple\prefs.xml.gоod
from %ProgramFiles%\ackwin32\ackwin32.exe to %ProgramFiles%\ackwin32\ackwin32.exe.gоod
from %ProgramFiles%\aavshield\aavshield.exe to %ProgramFiles%\aavshield\aavshield.exe.gоod
from %ProgramFiles%\a2wizard\a2wizard.exe to %ProgramFiles%\a2wizard\a2wizard.exe.gоod
from %ProgramFiles%\a2upd\a2upd.exe to %ProgramFiles%\a2upd\a2upd.exe.gоod
from %ProgramFiles%\a2start\a2start.exe to %ProgramFiles%\a2start\a2start.exe.gоod
from %ProgramFiles%\a2service\a2service.exe to %ProgramFiles%\a2service\a2service.exe.gоod
from %ProgramFiles%\a2scan\a2scan.exe to %ProgramFiles%\a2scan\a2scan.exe.gоod
from %ProgramFiles%\a2hijackfree\a2hijackfree.exe to %ProgramFiles%\a2hijackfree\a2hijackfree.exe.gоod
from %ProgramFiles%\a2guard\a2guard.exe to %ProgramFiles%\a2guard\a2guard.exe.gоod
from %ProgramFiles%\a2cmd\a2cmd.exe to %ProgramFiles%\a2cmd\a2cmd.exe.gоod
from %ProgramFiles%\about\about.exe to %ProgramFiles%\about\about.exe.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\eula.exe to %ProgramFiles%\adobe\reader 10.0\reader\eula.exe.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\javascripts\jsbytecodewin.bin to %ProgramFiles%\adobe\reader 10.0\reader\javascripts\jsbytecodewin.bin.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\acrord32.exe to %ProgramFiles%\adobe\reader 10.0\reader\acrord32.exe.gоod
from %APPDATA%\adobe\acrobat\9.0\javascripts\glob.settings.js to %APPDATA%\adobe\acrobat\9.0\javascripts\glob.settings.js.gоod
from %APPDATA%\adobe\acrobat\9.0\javascripts\glob.js to %APPDATA%\adobe\acrobat\9.0\javascripts\glob.js.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\rtc.der to %ProgramFiles%\adobe\reader 10.0\reader\rtc.der.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\reader_sl.exe to %ProgramFiles%\adobe\reader 10.0\reader\reader_sl.exe.gоod
from %APPDATA%\adobe\acrobat\9.0\usercache.bin to %APPDATA%\adobe\acrobat\9.0\usercache.bin.gоod
from %APPDATA%\adobe\acrobat\9.0\shareddataevents to %APPDATA%\adobe\acrobat\9.0\shareddataevents.gоod
from %APPDATA%\adobe\acrobat\9.0\adobesysfnt09.lst to %APPDATA%\adobe\acrobat\9.0\adobesysfnt09.lst.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\pdfprevhndlrshim.exe to %ProgramFiles%\adobe\reader 10.0\reader\pdfprevhndlrshim.exe.gоod
from %APPDATA%\adobe\acrobat\9.0\adobecmapfnt09.lst to %APPDATA%\adobe\acrobat\9.0\adobecmapfnt09.lst.gоod
from %APPDATA%\icq-profile\installerlang.xml to %APPDATA%\icq-profile\installerlang.xml.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\logtransport2.exe to %ProgramFiles%\adobe\reader 10.0\reader\logtransport2.exe.gоod
from %APPDATA%\adobe\acrobat\10.0\security\addressbook.acrodata to %APPDATA%\adobe\acrobat\10.0\security\addressbook.acrodata.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\adobecollabsync.exe to %ProgramFiles%\adobe\reader 10.0\reader\adobecollabsync.exe.gоod
from %APPDATA%\adobe\acrobat\10.0\javascripts\glob.settings.js to %APPDATA%\adobe\acrobat\10.0\javascripts\glob.settings.js.gоod
from %APPDATA%\adobe\acrobat\10.0\javascripts\glob.js to %APPDATA%\adobe\acrobat\10.0\javascripts\glob.js.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\acrotextextractor.exe to %ProgramFiles%\adobe\reader 10.0\reader\acrotextextractor.exe.gоod
from %APPDATA%\adobe\acrobat\10.0\tmgrpprm.sav to %APPDATA%\adobe\acrobat\10.0\tmgrpprm.sav.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\acrord32info.exe to %ProgramFiles%\adobe\reader 10.0\reader\acrord32info.exe.gоod
from %APPDATA%\adobe\acrobat\10.0\tmdocs.sav to %APPDATA%\adobe\acrobat\10.0\tmdocs.sav.gоod
from %APPDATA%\adobe\acrobat\10.0\readermessages to %APPDATA%\adobe\acrobat\10.0\readermessages.gоod
from %APPDATA%\.purple\status.xml to %APPDATA%\.purple\status.xml.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00040_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00040_.gif.gоod
from %ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\mappings\mac\corpchar.txt to %ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\mappings\mac\corpchar.txt.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\plug_ins\spelling.api to %ProgramFiles%\adobe\reader 10.0\reader\plug_ins\spelling.api.gоod
from %ProgramFiles%\adobe\reader 10.0\resource\linguistics\providers\proximity\11.00\usa37.hyp to %ProgramFiles%\adobe\reader 10.0\resource\linguistics\providers\proximity\11.00\usa37.hyp.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\tracker\reviews_joined.gif to %ProgramFiles%\adobe\reader 10.0\reader\tracker\reviews_joined.gif.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00135_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00135_.gif.gоod
from %ProgramFiles%\adobe\reader 10.0\resource\linguistics\providers\proximity\11.00\eng32.clx to %ProgramFiles%\adobe\reader 10.0\resource\linguistics\providers\proximity\11.00\eng32.clx.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\tracker\reviewers.gif to %ProgramFiles%\adobe\reader 10.0\reader\tracker\reviewers.gif.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\tracker\pdf.gif to %ProgramFiles%\adobe\reader 10.0\reader\tracker\pdf.gif.gоod
from %ProgramFiles%\adobe\reader 10.0\resource\linguistics\providers\proximity\11.00\eng.hyp to %ProgramFiles%\adobe\reader 10.0\resource\linguistics\providers\proximity\11.00\eng.hyp.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00130_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00130_.gif.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\tracker\open_original_form.gif to %ProgramFiles%\adobe\reader 10.0\reader\tracker\open_original_form.gif.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00139_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00139_.gif.gоod
from %ProgramFiles%\adobe\reader 10.0\resource\linguistics\providers\proximity\11.00\can32.clx to %ProgramFiles%\adobe\reader 10.0\resource\linguistics\providers\proximity\11.00\can32.clx.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\tracker\main.css to %ProgramFiles%\adobe\reader 10.0\reader\tracker\main.css.gоod
from %ProgramFiles%\adobe\reader 10.0\resource\linguistics\providers\proximity\11.00\can.hyp to %ProgramFiles%\adobe\reader 10.0\resource\linguistics\providers\proximity\11.00\can.hyp.gоod
from %APPDATA%\icqm\icq\html\cz\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\cz\loading\progress_agent.gif.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00126_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00126_.gif.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\tracker\info.gif to %ProgramFiles%\adobe\reader 10.0\reader\tracker\info.gif.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00120_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00120_.gif.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\tracker\form_responses.gif to %ProgramFiles%\adobe\reader 10.0\reader\tracker\form_responses.gif.gоod
from %ProgramFiles%\adobe\reader 10.0\resource\linguistics\providers\proximity\11.00\brt32.clx to %ProgramFiles%\adobe\reader 10.0\resource\linguistics\providers\proximity\11.00\brt32.clx.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\tracker\forms_super.gif to %ProgramFiles%\adobe\reader 10.0\reader\tracker\forms_super.gif.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00129_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00129_.gif.gоod
from %APPDATA%\icqm\icq\html\de\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\de\loading\progress_agent.gif.gоod
from %ProgramFiles%\adobe\reader 10.0\resource\font\courierstd-bold.otf to %ProgramFiles%\adobe\reader 10.0\resource\font\courierstd-bold.otf.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00142_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00142_.gif.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\tracker\stop_collection_data.gif to %ProgramFiles%\adobe\reader 10.0\reader\tracker\stop_collection_data.gif.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00163_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00163_.gif.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\tracker\server_ok.gif to %ProgramFiles%\adobe\reader 10.0\reader\tracker\server_ok.gif.gоod
from %ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\mappings\mac\centeuro.txt to %ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\mappings\mac\centeuro.txt.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00161_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00161_.gif.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\tracker\server_lg.gif to %ProgramFiles%\adobe\reader 10.0\reader\tracker\server_lg.gif.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00160_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00160_.gif.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\tracker\server_issue.gif to %ProgramFiles%\adobe\reader 10.0\reader\tracker\server_issue.gif.gоod
from %ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\mappings\adobe\zdingbat.txt to %ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\mappings\adobe\zdingbat.txt.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00103_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00103_.gif.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00158_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00158_.gif.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\tracker\rss.gif to %ProgramFiles%\adobe\reader 10.0\reader\tracker\rss.gif.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\tracker\review_shared.gif to %ProgramFiles%\adobe\reader 10.0\reader\tracker\review_shared.gif.gоod
from %ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\mappings\adobe\symbol.txt to %ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\mappings\adobe\symbol.txt.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00157_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00157_.gif.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\tracker\review_same_reviewers.gif to %ProgramFiles%\adobe\reader 10.0\reader\tracker\review_same_reviewers.gif.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00154_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00154_.gif.gоod
from %ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\icu\icudt26l.dat to %ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\icu\icudt26l.dat.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\tracker\review_email.gif to %ProgramFiles%\adobe\reader 10.0\reader\tracker\review_email.gif.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\tracker\review_browser.gif to %ProgramFiles%\adobe\reader 10.0\reader\tracker\review_browser.gif.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\tracker\reviews_sent.gif to %ProgramFiles%\adobe\reader 10.0\reader\tracker\reviews_sent.gif.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\tracker\submission_history.gif to %ProgramFiles%\adobe\reader 10.0\reader\tracker\submission_history.gif.gоod
from %ProgramFiles%\adobe\reader 10.0\resource\linguistics\providers\proximity\11.00\brt.hyp to %ProgramFiles%\adobe\reader 10.0\resource\linguistics\providers\proximity\11.00\brt.hyp.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\tracker\bl.gif to %ProgramFiles%\adobe\reader 10.0\reader\tracker\bl.gif.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\tracker\add_reviewer.gif to %ProgramFiles%\adobe\reader 10.0\reader\tracker\add_reviewer.gif.gоod
from %APPDATA%\icqm\icq\html\bg\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\bg\loading\progress_agent.gif.gоod
from %ProgramFiles%\adobe\reader 10.0\resource\font\pfm\zx______.pfm to %ProgramFiles%\adobe\reader 10.0\resource\font\pfm\zx______.pfm.gоod
from %ProgramFiles%\adobe\reader 10.0\resource\font\pfm\sy______.pfm to %ProgramFiles%\adobe\reader 10.0\resource\font\pfm\sy______.pfm.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\services\services.cfg to %ProgramFiles%\adobe\reader 10.0\reader\services\services.cfg.gоod
from %ProgramFiles%\adobe\reader 10.0\resource\font\myriadpro-regular.otf to %ProgramFiles%\adobe\reader 10.0\resource\font\myriadpro-regular.otf.gоod
from %ProgramFiles%\adobe\reader 10.0\resource\font\myriadpro-it.otf to %ProgramFiles%\adobe\reader 10.0\resource\font\myriadpro-it.otf.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\plug_ins3d\prc\myriadcad.otf to %ProgramFiles%\adobe\reader 10.0\reader\plug_ins3d\prc\myriadcad.otf.gоod
from %ProgramFiles%\adobe\reader 10.0\resource\font\myriadpro-boldit.otf to %ProgramFiles%\adobe\reader 10.0\resource\font\myriadpro-boldit.otf.gоod
from %ProgramFiles%\adobe\reader 10.0\resource\font\pfm\zy______.pfm to %ProgramFiles%\adobe\reader 10.0\resource\font\pfm\zy______.pfm.gоod
from %ProgramFiles%\adobe\reader 10.0\resource\font\myriadpro-bold.otf to %ProgramFiles%\adobe\reader 10.0\resource\font\myriadpro-bold.otf.gоod
from %ProgramFiles%\adobe\reader 10.0\resource\font\minionpro-it.otf to %ProgramFiles%\adobe\reader 10.0\resource\font\minionpro-it.otf.gоod
from %ProgramFiles%\adobe\reader 10.0\resource\font\minionpro-boldit.otf to %ProgramFiles%\adobe\reader 10.0\resource\font\minionpro-boldit.otf.gоod
from %ProgramFiles%\adobe\reader 10.0\resource\font\minionpro-bold.otf to %ProgramFiles%\adobe\reader 10.0\resource\font\minionpro-bold.otf.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\plug_ins\acroform\adobepdf.xdc to %ProgramFiles%\adobe\reader 10.0\reader\plug_ins\acroform\adobepdf.xdc.gоod
from %ProgramFiles%\adobe\reader 10.0\resource\font\courierstd.otf to %ProgramFiles%\adobe\reader 10.0\resource\font\courierstd.otf.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\plug_ins\weblink.api to %ProgramFiles%\adobe\reader 10.0\reader\plug_ins\weblink.api.gоod
from %ProgramFiles%\adobe\reader 10.0\resource\font\courierstd-oblique.otf to %ProgramFiles%\adobe\reader 10.0\resource\font\courierstd-oblique.otf.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\plug_ins\updater.api to %ProgramFiles%\adobe\reader 10.0\reader\plug_ins\updater.api.gоod
from %ProgramFiles%\adobe\reader 10.0\resource\font\courierstd-boldoblique.otf to %ProgramFiles%\adobe\reader 10.0\resource\font\courierstd-boldoblique.otf.gоod
from %ProgramFiles%\adobe\reader 10.0\resource\font\minionpro-regular.otf to %ProgramFiles%\adobe\reader 10.0\resource\font\minionpro-regular.otf.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\plug_ins\sendmail.api to %ProgramFiles%\adobe\reader 10.0\reader\plug_ins\sendmail.api.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00092_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00092_.gif.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00011_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00011_.gif.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\tracker\forms_distributed.gif to %ProgramFiles%\adobe\reader 10.0\reader\tracker\forms_distributed.gif.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00090_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00090_.gif.gоod
from %ProgramFiles%\adobe\reader 10.0\resource\linguistics\languagenames2\displaylanguagenames.en_us_posix.txt to %ProgramFiles%\adobe\reader 10.0\resource\linguistics\languagenames2\displaylanguagenames.en_us_posix.txt.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\tracker\end_review.gif to %ProgramFiles%\adobe\reader 10.0\reader\tracker\end_review.gif.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00057_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00057_.gif.gоod
from %ProgramFiles%\adobe\reader 10.0\resource\linguistics\languagenames2\displaylanguagenames.en_us.txt to %ProgramFiles%\adobe\reader 10.0\resource\linguistics\languagenames2\displaylanguagenames.en_us.txt.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\tracker\ended_review_or_form.gif to %ProgramFiles%\adobe\reader 10.0\reader\tracker\ended_review_or_form.gif.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00052_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00052_.gif.gоod
from %ProgramFiles%\adobe\reader 10.0\resource\linguistics\languagenames2\displaylanguagenames.en_gb_euro.txt to %ProgramFiles%\adobe\reader 10.0\resource\linguistics\languagenames2\displaylanguagenames.en_gb_euro.txt.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\tracker\forms_received.gif to %ProgramFiles%\adobe\reader 10.0\reader\tracker\forms_received.gif.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\tracker\email_initiator.gif to %ProgramFiles%\adobe\reader 10.0\reader\tracker\email_initiator.gif.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00038_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00038_.gif.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\tracker\email_all.gif to %ProgramFiles%\adobe\reader 10.0\reader\tracker\email_all.gif.gоod
from %ProgramFiles%\adobe\reader 10.0\resource\linguistics\languagenames2\displaylanguagenames.en_gb.txt to %ProgramFiles%\adobe\reader 10.0\resource\linguistics\languagenames2\displaylanguagenames.en_gb.txt.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00037_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00037_.gif.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\tracker\distribute_form.gif to %ProgramFiles%\adobe\reader 10.0\reader\tracker\distribute_form.gif.gоod
from %ProgramFiles%\adobe\reader 10.0\resource\linguistics\languagenames2\displaylanguagenames.en_ca.txt to %ProgramFiles%\adobe\reader 10.0\resource\linguistics\languagenames2\displaylanguagenames.en_ca.txt.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00021_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00021_.gif.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\tracker\create_form.gif to %ProgramFiles%\adobe\reader 10.0\reader\tracker\create_form.gif.gоod
from %ProgramFiles%\adobe\reader 10.0\reader\tracker\br.gif to %ProgramFiles%\adobe\reader 10.0\reader\tracker\br.gif.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00004_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00004_.gif.gоod
from %ProgramFiles%\microsoft office\document themes 12\oriel.thmx to %ProgramFiles%\microsoft office\document themes 12\oriel.thmx.gоod
from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb00703l.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb00703l.gif.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\an01173_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01173_.wmf.gоod
from %ProgramFiles%\bdsubmitwiz\bdsubmitwiz.exe to %ProgramFiles%\bdsubmitwiz\bdsubmitwiz.exe.gоod
from %TEMP%\dd_clwireg.txt to %TEMP%\dd_clwireg.txt.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme colors\solstice.xml to %ProgramFiles%\microsoft office\document themes 12\theme colors\solstice.xml.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0195384.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0195384.wmf.gоod
from %ProgramFiles%\claw95cf\claw95cf.exe to %ProgramFiles%\claw95cf\claw95cf.exe.gоod
from %ProgramFiles%\cavsn\cavsn.exe to %ProgramFiles%\cavsn\cavsn.exe.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\bin\cl.exe to %ProgramFiles%\microsoft visual studio .net 2003\vc7\bin\cl.exe.gоod
from %APPDATA%\opera software\opera stable\visited links to %APPDATA%\opera software\opera stable\visited links.gоod
from %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\times.json to %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\times.json.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\bin\link.exe to %ProgramFiles%\microsoft visual studio .net 2003\vc7\bin\link.exe.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme colors\paper.xml to %ProgramFiles%\microsoft office\document themes 12\theme colors\paper.xml.gоod
from %APPDATA%\icqm\icq\smiles\smiles\8march\cat.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\cat.gif.gоod
from %ProgramFiles%\microsoft office\media\office12\1033\office10.mml to %ProgramFiles%\microsoft office\media\office12\1033\office10.mml.gоod
from %APPDATA%\opera software\opera stable\update_prefs.json to %APPDATA%\opera software\opera stable\update_prefs.json.gоod
from %ProgramFiles%\microsoft office\office12\mspub.exe to %ProgramFiles%\microsoft office\office12\mspub.exe.gоod
from %APPDATA%\icqm\icq\translation\mralang_uz.xml to %APPDATA%\icqm\icq\translation\mralang_uz.xml.gоod
from %APPDATA%\icqm\icq\smiles\flash\drako_snegyrka.swf to %APPDATA%\icqm\icq\smiles\flash\drako_snegyrka.swf.gоod
from %APPDATA%\qipguard\qipguard.exe to %APPDATA%\qipguard\qipguard.exe.gоod
from %ProgramFiles%\bdsubmit\bdsubmit.exe to %ProgramFiles%\bdsubmit\bdsubmit.exe.gоod
from %ProgramFiles%\claw95\claw95.exe to %ProgramFiles%\claw95\claw95.exe.gоod
from %ProgramFiles%\btini\btini.exe to %ProgramFiles%\btini\btini.exe.gоod
from %ProgramFiles%\microsoft office\templates\1033\timecard.xltx to %ProgramFiles%\microsoft office\templates\1033\timecard.xltx.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04206_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04206_.wmf.gоod
from %APPDATA%\icqm\icq\smiles\smiles\8march\cookie.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\cookie.gif.gоod
from %ProgramFiles%\microsoft office\templates\1033\urbanletter.dotx to %ProgramFiles%\microsoft office\templates\1033\urbanletter.dotx.gоod
from %APPDATA%\icqm\icq\smiles\smiles\8march\doll.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\doll.gif.gоod
from %ProgramFiles%\cleaner3\cleaner3.exe to %ProgramFiles%\cleaner3\cleaner3.exe.gоod
from %ProgramFiles%\cavsub\cavsub.exe to %ProgramFiles%\cavsub\cavsub.exe.gоod
from %APPDATA%\opera software\opera stable\web data-journal to %APPDATA%\opera software\opera stable\web data-journal.gоod
from %TEMP%\dd_depcheck_netfx20_exp_35.txt to %TEMP%\dd_depcheck_netfx20_exp_35.txt.gоod
from %ProgramFiles%\microsoft office\media\office12\autoshap\bd18180_.wmf to %ProgramFiles%\microsoft office\media\office12\autoshap\bd18180_.wmf.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04267_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04267_.wmf.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme colors\trek.xml to %ProgramFiles%\microsoft office\document themes 12\theme colors\trek.xml.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04225_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04225_.wmf.gоod
from %ProgramFiles%\cleaner\cleaner.exe to %ProgramFiles%\cleaner\cleaner.exe.gоod
from %APPDATA%\qipguard\qipguard_upd.exe to %APPDATA%\qipguard\qipguard_upd.exe.gоod
from %ProgramFiles%\microsoft office\templates\1033\urbanmergefax.dotx to %ProgramFiles%\microsoft office\templates\1033\urbanmergefax.dotx.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0195534.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0195534.wmf.gоod
from %ProgramFiles%\btinint\btinint.exe to %ProgramFiles%\btinint\btinint.exe.gоod
from %APPDATA%\opera software\opera stable\web data to %APPDATA%\opera software\opera stable\web data.gоod
from %ProgramFiles%\microsoft office\office12\mspub.tlb to %ProgramFiles%\microsoft office\office12\mspub.tlb.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04235_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04235_.wmf.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\bin\cl.exe.config to %ProgramFiles%\microsoft visual studio .net 2003\vc7\bin\cl.exe.config.gоod
from %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\user.js to %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\user.js.gоod
from %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\xulstore.json to %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\xulstore.json.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0186002.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0186002.wmf.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme colors\technic.xml to %ProgramFiles%\microsoft office\document themes 12\theme colors\technic.xml.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme colors\oriel.xml to %ProgramFiles%\microsoft office\document themes 12\theme colors\oriel.xml.gоod
from %TEMP%\aspnetsetup.log to %TEMP%\aspnetsetup.log.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04195_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04195_.wmf.gоod
from %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\secmod.db to %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\secmod.db.gоod
from %ProgramFiles%\microsoft office\templates\1033\quizshow.potx to %ProgramFiles%\microsoft office\templates\1033\quizshow.potx.gоod
from %ProgramFiles%\clamtray\clamtray.exe to %ProgramFiles%\clamtray\clamtray.exe.gоod
from %APPDATA%\icqm\icq\smiles\statuses\aim\aim_status_offline.ico to %APPDATA%\icqm\icq\smiles\statuses\aim\aim_status_offline.ico.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\common7\packages\debugger\mcee_cs.dat to %ProgramFiles%\microsoft visual studio .net 2003\common7\packages\debugger\mcee_cs.dat.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme colors\opulent.xml to %ProgramFiles%\microsoft office\document themes 12\theme colors\opulent.xml.gоod
from %ProgramFiles%\blackd\blackd.exe to %ProgramFiles%\blackd\blackd.exe.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0187423.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0187423.wmf.gоod
from %APPDATA%\icqm\icq\translation\mralang_tr.xml to %APPDATA%\icqm\icq\translation\mralang_tr.xml.gоod
from %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\search.json to %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\search.json.gоod
from %TEMP%\adobesfx.log to %TEMP%\adobesfx.log.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04191_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04191_.wmf.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme colors\module.xml to %ProgramFiles%\microsoft office\document themes 12\theme colors\module.xml.gоod
from %APPDATA%\opera software\opera stable\siteprefs.json to %APPDATA%\opera software\opera stable\siteprefs.json.gоod
from %APPDATA%\icqm\icq\smiles\flash\drako_opyatnica.swf to %APPDATA%\icqm\icq\smiles\flash\drako_opyatnica.swf.gоod
from %ProgramFiles%\microsoft office\office12\msn.ico to %ProgramFiles%\microsoft office\office12\msn.ico.gоod
from %ProgramFiles%\microsoft office\templates\1033\pitchbook.potx to %ProgramFiles%\microsoft office\templates\1033\pitchbook.potx.gоod
from %APPDATA%\icqm\icq\smiles\statuses\aim\aim_status_gray.ico to %APPDATA%\icqm\icq\smiles\statuses\aim\aim_status_gray.ico.gоod
from %ProgramFiles%\bdoesrv\bdoesrv.exe to %ProgramFiles%\bdoesrv\bdoesrv.exe.gоod
from %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\sitesecurityservicestate.txt to %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\sitesecurityservicestate.txt.gоod
from %ProgramFiles%\blindman\blindman.exe to %ProgramFiles%\blindman\blindman.exe.gоod
from %APPDATA%\opera software\opera stable\thumbnails.db to %APPDATA%\opera software\opera stable\thumbnails.db.gоod
from %ProgramFiles%\cavscons\cavscons.exe to %ProgramFiles%\cavscons\cavscons.exe.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme colors\origin.xml to %ProgramFiles%\microsoft office\document themes 12\theme colors\origin.xml.gоod
from %TEMP%\aucheck_parser.txt to %TEMP%\aucheck_parser.txt.gоod
from %APPDATA%\opera software\opera stable\transportsecurity to %APPDATA%\opera software\opera stable\transportsecurity.gоod
from %APPDATA%\icqm\icq\translation\mralang_ua.xml to %APPDATA%\icqm\icq\translation\mralang_ua.xml.gоod
from %ProgramFiles%\cavse\cavse.exe to %ProgramFiles%\cavse\cavse.exe.gоod
from %TEMP%\aspnetsetup_00000.log to %TEMP%\aspnetsetup_00000.log.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04196_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04196_.wmf.gоod
from %APPDATA%\icqm\icq\smiles\smiles\8march\car.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\car.gif.gоod
from %APPDATA%\qipguard\cache to %APPDATA%\qipguard\cache.gоod
from %ProgramFiles%\microsoft office\media\office12\office10.mmw to %ProgramFiles%\microsoft office\media\office12\office10.mmw.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0186348.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0186348.wmf.gоod
from %ProgramFiles%\microsoft office\templates\1033\salesreport.xltx to %ProgramFiles%\microsoft office\templates\1033\salesreport.xltx.gоod
from %ProgramFiles%\bdss\bdss.exe to %ProgramFiles%\bdss\bdss.exe.gоod
from %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\sessioncheckpoints.json to %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\sessioncheckpoints.json.gоod
from %ProgramFiles%\clamwin\clamwin.exe to %ProgramFiles%\clamwin\clamwin.exe.gоod
from %APPDATA%\opera software\opera stable\thumbnails.db-journal to %APPDATA%\opera software\opera stable\thumbnails.db-journal.gоod
from %APPDATA%\icqm\icq\smiles\statuses\aim\aim_status_online.ico to %APPDATA%\icqm\icq\smiles\statuses\aim\aim_status_online.ico.gоod
from %ProgramFiles%\blackice\blackice.exe to %ProgramFiles%\blackice\blackice.exe.gоod
from %ProgramFiles%\microsoft office\office12\msohtmed.exe to %ProgramFiles%\microsoft office\office12\msohtmed.exe.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\common7\packages\debugger\mcee_mc.dat to %ProgramFiles%\microsoft visual studio .net 2003\common7\packages\debugger\mcee_mc.dat.gоod
from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02218_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02218_.gif.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0195812.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0195812.wmf.gоod
from %ProgramFiles%\cabalmain\cabalmain.exe to %ProgramFiles%\cabalmain\cabalmain.exe.gоod
from %APPDATA%\opera software\opera stable\extension state\current to %APPDATA%\opera software\opera stable\extension state\current.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0199036.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0199036.wmf.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme fonts\aspect.xml to %ProgramFiles%\microsoft office\document themes 12\theme fonts\aspect.xml.gоod
from %APPDATA%\icqm\icq\smiles\smiles\8march\joy.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\joy.gif.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme effects\concourse.eftx to %ProgramFiles%\microsoft office\document themes 12\theme effects\concourse.eftx.gоod
from %ProgramFiles%\cavuserupd\cavuserupd.exe to %ProgramFiles%\cavuserupd\cavuserupd.exe.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\ctype.h to %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\ctype.h.gоod
from %ProgramFiles%\microsoft office\media\office12\autoshap\bd18187_.wmf to %ProgramFiles%\microsoft office\media\office12\autoshap\bd18187_.wmf.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04332_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04332_.wmf.gоod
from %ProgramFiles%\microsoft office\media\office12\autoshap\bd18185_.wmf to %ProgramFiles%\microsoft office\media\office12\autoshap\bd18185_.wmf.gоod
from %ProgramFiles%\microsoft office\office12\mysl.ico to %ProgramFiles%\microsoft office\office12\mysl.ico.gоod
from %APPDATA%\icqm\icq\smiles\statuses\gtalk\gtalk_status_online.ico to %APPDATA%\icqm\icq\smiles\statuses\gtalk\gtalk_status_online.ico.gоod
from %APPDATA%\icqm\icq\smiles\flash\duh.swf to %APPDATA%\icqm\icq\smiles\flash\duh.swf.gоod
from %ProgramFiles%\defwatch\defwatch.exe to %ProgramFiles%\defwatch\defwatch.exe.gоod
from %APPDATA%\opera software\opera stable\extension state\000003.log to %APPDATA%\opera software\opera stable\extension state\000003.log.gоod
from %ProgramFiles%\cmain\cmain.exe to %ProgramFiles%\cmain\cmain.exe.gоod
from %ProgramFiles%\microsoft office\templates\1033\widescreenpresentation.potx to %ProgramFiles%\microsoft office\templates\1033\widescreenpresentation.potx.gоod
from %TEMP%\dd_dotnetfx35error.txt to %TEMP%\dd_dotnetfx35error.txt.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0196400.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0196400.wmf.gоod
from %ProgramFiles%\cavasm\cavasm.exe to %ProgramFiles%\cavasm\cavasm.exe.gоod
from %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\searchplugins\yandex.ru-125841.xml to %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\searchplugins\yandex.ru-125841.xml.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme fonts\apex.xml to %ProgramFiles%\microsoft office\document themes 12\theme fonts\apex.xml.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\direct.h to %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\direct.h.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme effects\equity.eftx to %ProgramFiles%\microsoft office\document themes 12\theme effects\equity.eftx.gоod
from %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\sessionstore-backups\recovery.js to %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\sessionstore-backups\recovery.js.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\dos.h to %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\dos.h.gоod
from %APPDATA%\opera software\opera stable\extension state\log to %APPDATA%\opera software\opera stable\extension state\log.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0199283.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0199283.wmf.gоod
from %TEMP%\dd_dotnetfx40_full_x86_x64_decompression_log.txt to %TEMP%\dd_dotnetfx40_full_x86_x64_decompression_log.txt.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme fonts\civic.xml to %ProgramFiles%\microsoft office\document themes 12\theme fonts\civic.xml.gоod
from %APPDATA%\icqm\icq\smiles\flash\gangsta.swf to %APPDATA%\icqm\icq\smiles\flash\gangsta.swf.gоod
from %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\sessionstore-backups\previous.js to %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\sessionstore-backups\previous.js.gоod
from %APPDATA%\icqm\icq\smiles\smiles\8march\love.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\love.gif.gоod
from %APPDATA%\icqm\icq\smiles\statuses\icq\24bit.ico to %APPDATA%\icqm\icq\smiles\statuses\icq\24bit.ico.gоod
from %TEMP%\dd_dotnetfx35install.txt to %TEMP%\dd_dotnetfx35install.txt.gоod
from %APPDATA%\opera software\opera stable\extension state\lock to %APPDATA%\opera software\opera stable\extension state\lock.gоod
from %ProgramFiles%\cavvl\cavvl.exe to %ProgramFiles%\cavvl\cavvl.exe.gоod
from %ProgramFiles%\dekaron\dekaron.exe to %ProgramFiles%\dekaron\dekaron.exe.gоod
from %ProgramFiles%\microsoft office\media\office12\autoshap\bd18189_.wmf to %ProgramFiles%\microsoft office\media\office12\autoshap\bd18189_.wmf.gоod
from %ProgramFiles%\cavaud\cavaud.exe to %ProgramFiles%\cavaud\cavaud.exe.gоod
from %ProgramFiles%\microsoft office\office12\oemprint.cat to %ProgramFiles%\microsoft office\office12\oemprint.cat.gоod
from %ProgramFiles%\cmgrdian\cmgrdian.exe to %ProgramFiles%\cmgrdian\cmgrdian.exe.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04355_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04355_.wmf.gоod
from %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\searchplugins\yandex.ru-130023.xml to %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\searchplugins\yandex.ru-130023.xml.gоod
from %ProgramFiles%\microsoft office\templates\1033\access\assets.accdt to %ProgramFiles%\microsoft office\templates\1033\access\assets.accdt.gоod
from %ProgramFiles%\microsoft office\office12\msqry32.exe to %ProgramFiles%\microsoft office\office12\msqry32.exe.gоod
from %APPDATA%\icqm\icq\smiles\statuses\gtalk\gtalk_status_away.ico to %APPDATA%\icqm\icq\smiles\statuses\gtalk\gtalk_status_away.ico.gоod
from %APPDATA%\icqm\icq\smiles\smiles\8march\hug.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\hug.gif.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04269_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04269_.wmf.gоod
from %APPDATA%\opera software\opera stable\web data_20150820130020.backup to %APPDATA%\opera software\opera stable\web data_20150820130020.backup.gоod
from %ProgramFiles%\cavsubmit\cavsubmit.exe to %ProgramFiles%\cavsubmit\cavsubmit.exe.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0196164.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0196164.wmf.gоod
from %ProgramFiles%\dbtool\dbtool.exe to %ProgramFiles%\dbtool\dbtool.exe.gоod
from %ProgramFiles%\clisvc\clisvc.exe to %ProgramFiles%\clisvc\clisvc.exe.gоod
from %APPDATA%\icqm\icq\smiles\statuses\gtalk\gtalk_status_busy.ico to %APPDATA%\icqm\icq\smiles\statuses\gtalk\gtalk_status_busy.ico.gоod
from %APPDATA%\icqm\icq\smiles\smiles\8march\drink.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\drink.gif.gоod
from %ProgramFiles%\microsoft office\media\office12\autoshap\bd18181_.wmf to %ProgramFiles%\microsoft office\media\office12\autoshap\bd18181_.wmf.gоod
from %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\gmp-gmpopenh264\1.4\gmpopenh264.info to %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\gmp-gmpopenh264\1.4\gmpopenh264.info.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme colors\verve.xml to %ProgramFiles%\microsoft office\document themes 12\theme colors\verve.xml.gоod
from %APPDATA%\icqm\icq\smiles\statuses\gtalk\gtalk_status_offline.ico to %APPDATA%\icqm\icq\smiles\statuses\gtalk\gtalk_status_offline.ico.gоod
from %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\datareporting\state.json to %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\datareporting\state.json.gоod
from %APPDATA%\sun\java\au\au.msi to %APPDATA%\sun\java\au\au.msi.gоod
from %TEMP%\dd_depcheck_netfx_exp_35.txt to %TEMP%\dd_depcheck_netfx_exp_35.txt.gоod
from %ProgramFiles%\microsoft office\templates\1033\urbanmergeletter.dotx to %ProgramFiles%\microsoft office\templates\1033\urbanmergeletter.dotx.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\bin\link.exe.config to %ProgramFiles%\microsoft visual studio .net 2003\vc7\bin\link.exe.config.gоod
from %APPDATA%\icqm\icq\smiles\flash\drako_zombie.swf to %APPDATA%\icqm\icq\smiles\flash\drako_zombie.swf.gоod
from %APPDATA%\opera software\opera stable\web data_20150820125838.backup to %APPDATA%\opera software\opera stable\web data_20150820125838.backup.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme effects\apex.eftx to %ProgramFiles%\microsoft office\document themes 12\theme effects\apex.eftx.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme colors\urban.xml to %ProgramFiles%\microsoft office\document themes 12\theme colors\urban.xml.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme effects\civic.eftx to %ProgramFiles%\microsoft office\document themes 12\theme effects\civic.eftx.gоod
from %ProgramFiles%\microsoft office\media\office12\autoshap\bd18182_.wmf to %ProgramFiles%\microsoft office\media\office12\autoshap\bd18182_.wmf.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0196374.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0196374.wmf.gоod
from %ProgramFiles%\defensewall\defensewall.exe to %ProgramFiles%\defensewall\defensewall.exe.gоod
from %TEMP%\dd_dotnetfx20install.txt to %TEMP%\dd_dotnetfx20install.txt.gоod
from %ProgramFiles%\cavapp\cavapp.exe to %ProgramFiles%\cavapp\cavapp.exe.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04326_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04326_.wmf.gоod
from %ProgramFiles%\cavumas\cavumas.exe to %ProgramFiles%\cavumas\cavumas.exe.gоod
from %ProgramFiles%\microsoft office\templates\1033\urbanresume.dotx to %ProgramFiles%\microsoft office\templates\1033\urbanresume.dotx.gоod
from %ProgramFiles%\microsoft office\office12\mstore.exe to %ProgramFiles%\microsoft office\office12\mstore.exe.gоod
from %ProgramFiles%\microsoft office\media\office12\autoshap\bd18184_.wmf to %ProgramFiles%\microsoft office\media\office12\autoshap\bd18184_.wmf.gоod
from %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\healthreport\state.json to %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\healthreport\state.json.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\conio.h to %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\conio.h.gоod
from %TEMP%\dd_dotnetfx20error.txt to %TEMP%\dd_dotnetfx20error.txt.gоod
from %ProgramFiles%\microsoft office\office12\mstordb.exe to %ProgramFiles%\microsoft office\office12\mstordb.exe.gоod
from %APPDATA%\icqm\icq\smiles\statuses\gtalk\gtalk_status_gray.ico to %APPDATA%\icqm\icq\smiles\statuses\gtalk\gtalk_status_gray.ico.gоod
from %ProgramFiles%\clrcche\clrcche.exe to %ProgramFiles%\clrcche\clrcche.exe.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\assert.h to %ProgramFiles%\microsoft visual studio .net 2003\vc7\include\assert.h.gоod
from %APPDATA%\icqm\icq\smiles\smiles\8march\flowers.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\flowers.gif.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04323_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04323_.wmf.gоod
from %ProgramFiles%\microsoft office\templates\1033\urbanreport.dotx to %ProgramFiles%\microsoft office\templates\1033\urbanreport.dotx.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme effects\aspect.eftx to %ProgramFiles%\microsoft office\document themes 12\theme effects\aspect.eftx.gоod
from %ProgramFiles%\cafix\cafix.exe to %ProgramFiles%\cafix\cafix.exe.gоod
from %APPDATA%\opera software\opera stable\dictionaries\dictionaries.xml to %APPDATA%\opera software\opera stable\dictionaries\dictionaries.xml.gоod
from %ProgramFiles%\clamscan\clamscan.exe to %ProgramFiles%\clamscan\clamscan.exe.gоod
from %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\search-metadata.json to %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\search-metadata.json.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\common7\packages\debugger\manageddbgca.exe.config to %ProgramFiles%\microsoft visual studio .net 2003\common7\packages\debugger\manageddbgca.exe.config.gоod
from %APPDATA%\opera software\opera stable\login data to %APPDATA%\opera software\opera stable\login data.gоod
from %ProgramFiles%\microsoft office\office12\microsoft.office.interop.infopath.semitrust.xml to %ProgramFiles%\microsoft office\office12\microsoft.office.interop.infopath.semitrust.xml.gоod
from %ProgramFiles%\avnotify\avnotify.exe to %ProgramFiles%\avnotify\avnotify.exe.gоod
from %APPDATA%\icqm\icq\sounds\ring.mp3 to %APPDATA%\icqm\icq\sounds\ring.mp3.gоod
from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02074_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02074_.gif.gоod
from %ProgramFiles%\avgrssvc\avgrssvc.exe to %ProgramFiles%\avgrssvc\avgrssvc.exe.gоod
from %ProgramFiles%\avcenter\avcenter.exe to %ProgramFiles%\avcenter\avcenter.exe.gоod
from %ProgramFiles%\microsoft office\templates\1033\orielmergefax.dotx to %ProgramFiles%\microsoft office\templates\1033\orielmergefax.dotx.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0149887.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0149887.wmf.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0149627.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0149627.wmf.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\an01251_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01251_.wmf.gоod
from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02073_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02073_.gif.gоod
from %APPDATA%\opera software\opera stable\local state to %APPDATA%\opera software\opera stable\local state.gоod
from %ProgramFiles%\microsoft office\office12\microsoft.office.infopath.xml to %ProgramFiles%\microsoft office\office12\microsoft.office.infopath.xml.gоod
from %APPDATA%\icqm\icq\smiles\flash\canthearu.swf to %APPDATA%\icqm\icq\smiles\flash\canthearu.swf.gоod
from %APPDATA%\icqm\icq\sounds\otprav.wav to %APPDATA%\icqm\icq\sounds\otprav.wav.gоod
from %ProgramFiles%\avkwctl\avkwctl.exe to %ProgramFiles%\avkwctl\avkwctl.exe.gоod
from %ProgramFiles%\avadmin\avadmin.exe to %ProgramFiles%\avadmin\avadmin.exe.gоod
from %ProgramFiles%\avgnpsvc\avgnpsvc.exe to %ProgramFiles%\avgnpsvc\avgnpsvc.exe.gоod
from %ProgramFiles%\microsoft office\document themes 12\trek.thmx to %ProgramFiles%\microsoft office\document themes 12\trek.thmx.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\an01218_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01218_.wmf.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0157995.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0157995.wmf.gоod
from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02055_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02055_.gif.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\an02122_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an02122_.wmf.gоod
from %ProgramFiles%\avpm\avpm.exe to %ProgramFiles%\avpm\avpm.exe.gоod
from %ProgramFiles%\avgupsvc\avgupsvc.exe to %ProgramFiles%\avgupsvc\avgupsvc.exe.gоod
from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02085_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02085_.gif.gоod
from %ProgramFiles%\microsoft office\office12\microsoft.office.interop.infopath.xml.xml to %ProgramFiles%\microsoft office\office12\microsoft.office.interop.infopath.xml.xml.gоod
from %ProgramFiles%\microsoft office\templates\1033\orielreport.dotx to %ProgramFiles%\microsoft office\templates\1033\orielreport.dotx.gоod
from %APPDATA%\icqm\icq\smiles\flash\devochka.swf to %APPDATA%\icqm\icq\smiles\flash\devochka.swf.gоod
from %ProgramFiles%\microsoft office\document themes 12\verve.thmx to %ProgramFiles%\microsoft office\document themes 12\verve.thmx.gоod
from %ProgramFiles%\avcmd\avcmd.exe to %ProgramFiles%\avcmd\avcmd.exe.gоod
from %APPDATA%\icqm\icq\smiles\flash\chillout.swf to %APPDATA%\icqm\icq\smiles\flash\chillout.swf.gоod
from %ProgramFiles%\microsoft office\document themes 12\urban.thmx to %ProgramFiles%\microsoft office\document themes 12\urban.thmx.gоod
from %APPDATA%\opera software\opera stable\login data-journal to %APPDATA%\opera software\opera stable\login data-journal.gоod
from %APPDATA%\icqm\icq\sounds\start.wav to %APPDATA%\icqm\icq\sounds\start.wav.gоod
from %ProgramFiles%\avpcc\avpcc.exe to %ProgramFiles%\avpcc\avpcc.exe.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0157763.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0157763.wmf.gоod
from %ProgramFiles%\avgupden\avgupden.exe to %ProgramFiles%\avgupden\avgupden.exe.gоod
from %ProgramFiles%\avciman\avciman.exe to %ProgramFiles%\avciman\avciman.exe.gоod
from %ProgramFiles%\microsoft office\templates\1033\orielmergeletter.dotx to %ProgramFiles%\microsoft office\templates\1033\orielmergeletter.dotx.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\an01545_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01545_.wmf.gоod
from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02077_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02077_.gif.gоod
from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02082_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02082_.gif.gоod
from %APPDATA%\mozilla\firefox\crash reports\installtime20150812163655 to %APPDATA%\mozilla\firefox\crash reports\installtime20150812163655.gоod
from %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\addons.json to %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\addons.json.gоod
from %ProgramFiles%\microsoft office\document themes 12\technic.thmx to %ProgramFiles%\microsoft office\document themes 12\technic.thmx.gоod
from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02039_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02039_.gif.gоod
from %ProgramFiles%\microsoft office\templates\1033\medianresume.dotx to %ProgramFiles%\microsoft office\templates\1033\medianresume.dotx.gоod
from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb00780l.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb00780l.gif.gоod
from %APPDATA%\icqm\icq\sounds\letter.wav to %APPDATA%\icqm\icq\sounds\letter.wav.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0090386.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0090386.wmf.gоod
from %ProgramFiles%\autodown\autodown.exe to %ProgramFiles%\autodown\autodown.exe.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\an01174_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01174_.wmf.gоod
from %ProgramFiles%\microsoft office\templates\1033\medianreport.dotx to %ProgramFiles%\microsoft office\templates\1033\medianreport.dotx.gоod
from %ProgramFiles%\ashsimpl\ashsimpl.exe to %ProgramFiles%\ashsimpl\ashsimpl.exe.gоod
from %ProgramFiles%\avginet\avginet.exe to %ProgramFiles%\avginet\avginet.exe.gоod
from %ProgramFiles%\microsoft office\document themes 12\origin.thmx to %ProgramFiles%\microsoft office\document themes 12\origin.thmx.gоod
from %APPDATA%\opera software\opera stable\favorites.db-journal to %APPDATA%\opera software\opera stable\favorites.db-journal.gоod
from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb00760l.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb00760l.gif.gоod
from %APPDATA%\icqm\icq\smiles\flash\bodun.swf to %APPDATA%\icqm\icq\smiles\flash\bodun.swf.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0090070.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0090070.wmf.gоod
from %APPDATA%\icqm\icq\sounds\error.wav to %APPDATA%\icqm\icq\sounds\error.wav.gоod
from %ProgramFiles%\ashsimp2\ashsimp2.exe to %ProgramFiles%\ashsimp2\ashsimp2.exe.gоod
from %ProgramFiles%\aswupdsv\aswupdsv.exe to %ProgramFiles%\aswupdsv\aswupdsv.exe.gоod
from %ProgramFiles%\microsoft office\office12\infopath.exe to %ProgramFiles%\microsoft office\office12\infopath.exe.gоod
from %APPDATA%\opera software\opera stable\favorites.db to %APPDATA%\opera software\opera stable\favorites.db.gоod
from %ProgramFiles%\avgfwsrv\avgfwsrv.exe to %ProgramFiles%\avgfwsrv\avgfwsrv.exe.gоod
from %APPDATA%\opera software\opera stable\last session to %APPDATA%\opera software\opera stable\last session.gоod
from %APPDATA%\icqm\icq\sounds\test_sound.wav to %APPDATA%\icqm\icq\sounds\test_sound.wav.gоod
from %APPDATA%\opera software\opera stable\history to %APPDATA%\opera software\opera stable\history.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0149481.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0149481.wmf.gоod
from %ProgramFiles%\microsoft office\templates\1033\orielletter.dotx to %ProgramFiles%\microsoft office\templates\1033\orielletter.dotx.gоod
from %ProgramFiles%\microsoft office\office12\ipirmv.xml to %ProgramFiles%\microsoft office\office12\ipirmv.xml.gоod
from %ProgramFiles%\autotrace\autotrace.exe to %ProgramFiles%\autotrace\autotrace.exe.gоod
from %APPDATA%\icqm\icq\sounds\otprav.mp3 to %APPDATA%\icqm\icq\sounds\otprav.mp3.gоod
from %ProgramFiles%\avkservice\avkservice.exe to %ProgramFiles%\avkservice\avkservice.exe.gоod
from %APPDATA%\icqm\icq\html\uz\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\uz\loading\progress_agent.gif.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\an01216_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01216_.wmf.gоod
from %ProgramFiles%\avgnpdln\avgnpdln.exe to %ProgramFiles%\avgnpdln\avgnpdln.exe.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\an01184_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01184_.wmf.gоod
from %ProgramFiles%\ashskpcc\ashskpcc.exe to %ProgramFiles%\ashskpcc\ashskpcc.exe.gоod
from %APPDATA%\opera software\opera stable\history-journal to %APPDATA%\opera software\opera stable\history-journal.gоod
from %ProgramFiles%\microsoft office\templates\1033\office word 2003 look.dotx to %ProgramFiles%\microsoft office\templates\1033\office word 2003 look.dotx.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0149407.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0149407.wmf.gоod
from %APPDATA%\icqm\icq\smiles\flash\boo.swf to %APPDATA%\icqm\icq\smiles\flash\boo.swf.gоod
from %ProgramFiles%\microsoft office\office12\ipirm.xml to %ProgramFiles%\microsoft office\office12\ipirm.xml.gоod
from %APPDATA%\icqm\icq\sounds\message.mp3 to %APPDATA%\icqm\icq\sounds\message.mp3.gоod
from %APPDATA%\opera software\opera stable\history provider cache to %APPDATA%\opera software\opera stable\history provider cache.gоod
from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb01741l.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb01741l.gif.gоod
from %ProgramFiles%\autostartexplorer\autostartexplorer.exe to %ProgramFiles%\autostartexplorer\autostartexplorer.exe.gоod
from %ProgramFiles%\microsoft office\document themes 12\solstice.thmx to %ProgramFiles%\microsoft office\document themes 12\solstice.thmx.gоod
from %ProgramFiles%\microsoft office\document themes 12\paper.thmx to %ProgramFiles%\microsoft office\document themes 12\paper.thmx.gоod
from %ProgramFiles%\avgscan\avgscan.exe to %ProgramFiles%\avgscan\avgscan.exe.gоod
from %APPDATA%\opera software\opera stable\network persistent state to %APPDATA%\opera software\opera stable\network persistent state.gоod
from %ProgramFiles%\bdswitch\bdswitch.exe to %ProgramFiles%\bdswitch\bdswitch.exe.gоod
from %ProgramFiles%\bdagent\bdagent.exe to %ProgramFiles%\bdagent\bdagent.exe.gоod
from %ProgramFiles%\avkserv\avkserv.exe to %ProgramFiles%\avkserv\avkserv.exe.gоod
from %APPDATA%\icqm\icq\translation\mralang_pt.xml to %APPDATA%\icqm\icq\translation\mralang_pt.xml.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme colors\median.xml to %ProgramFiles%\microsoft office\document themes 12\theme colors\median.xml.gоod
from %ProgramFiles%\microsoft office\templates\1033\originresume.dotx to %ProgramFiles%\microsoft office\templates\1033\originresume.dotx.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04134_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04134_.wmf.gоod
from %APPDATA%\icqm\icq\smiles\statuses\aim\aim_status_away.ico to %APPDATA%\icqm\icq\smiles\statuses\aim\aim_status_away.ico.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0183328.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0183328.wmf.gоod
from %APPDATA%\opera software\opera stable\preferences to %APPDATA%\opera software\opera stable\preferences.gоod
from %ProgramFiles%\backweb-4476822\backweb-4476822.exe to %ProgramFiles%\backweb-4476822\backweb-4476822.exe.gоod
from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02201_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02201_.gif.gоod
from %ProgramFiles%\microsoft office\office12\mscol11.inf to %ProgramFiles%\microsoft office\office12\mscol11.inf.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04117_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04117_.wmf.gоod
from %ProgramFiles%\bdsurvey\bdsurvey.exe to %ProgramFiles%\bdsurvey\bdsurvey.exe.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0183290.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0183290.wmf.gоod
from %APPDATA%\icqm\icq\smiles\flash\drako_koster.swf to %APPDATA%\icqm\icq\smiles\flash\drako_koster.swf.gоod
from %APPDATA%\icqm\icq\translation\mralang_kz.xml to %APPDATA%\icqm\icq\translation\mralang_kz.xml.gоod
from %ProgramFiles%\avinitnt\avinitnt.exe to %ProgramFiles%\avinitnt\avinitnt.exe.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme colors\foundry.xml to %ProgramFiles%\microsoft office\document themes 12\theme colors\foundry.xml.gоod
from %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\prefs.js_20150820125841.backup to %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\prefs.js_20150820125841.backup.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme colors\grayscale.xml to %ProgramFiles%\microsoft office\document themes 12\theme colors\grayscale.xml.gоod
from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02198_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02198_.gif.gоod
from %APPDATA%\opera software\opera stable\preferences_20150820125838.backup to %APPDATA%\opera software\opera stable\preferences_20150820125838.backup.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme colors\metro.xml to %ProgramFiles%\microsoft office\document themes 12\theme colors\metro.xml.gоod
from %ProgramFiles%\cavoar\cavoar.exe to %ProgramFiles%\cavoar\cavoar.exe.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04174_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04174_.wmf.gоod
from %APPDATA%\icqm\icq\translation\mralang_ru.xml to %APPDATA%\icqm\icq\translation\mralang_ru.xml.gоod
from %TEMP%\adobearm_notlocked.log to %TEMP%\adobearm_notlocked.log.gоod
from %ProgramFiles%\bdnews\bdnews.exe to %ProgramFiles%\bdnews\bdnews.exe.gоod
from %ProgramFiles%\cavq\cavq.exe to %ProgramFiles%\cavq\cavq.exe.gоod
from %ProgramFiles%\bdwizreg\bdwizreg.exe to %ProgramFiles%\bdwizreg\bdwizreg.exe.gоod
from %ProgramFiles%\microsoft office\templates\1033\personalmonthlybudget.xltx to %ProgramFiles%\microsoft office\templates\1033\personalmonthlybudget.xltx.gоod
from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02214_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02214_.gif.gоod
from %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\revocations.txt to %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\revocations.txt.gоod
from %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\prefs.js_20150820130023.backup to %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\prefs.js_20150820130023.backup.gоod
from %APPDATA%\icqm\icq\smiles\flash\drako_love.swf to %APPDATA%\icqm\icq\smiles\flash\drako_love.swf.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0185604.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0185604.wmf.gоod
from %APPDATA%\icqm\icq\smiles\statuses\aim\aim_status_busy.ico to %APPDATA%\icqm\icq\smiles\statuses\aim\aim_status_busy.ico.gоod
from %APPDATA%\oracle\java\jre1.8.0_60\jre1.8.0_60patch.msi to %APPDATA%\oracle\java\jre1.8.0_60\jre1.8.0_60patch.msi.gоod
from %ProgramFiles%\microsoft visual studio .net 2003\common7\packages\debugger\manageddbgca.exe to %ProgramFiles%\microsoft visual studio .net 2003\common7\packages\debugger\manageddbgca.exe.gоod
from %ProgramFiles%\bdmcon\bdmcon.exe to %ProgramFiles%\bdmcon\bdmcon.exe.gоod
from %ProgramFiles%\microsoft office\office12\mscol11.ppd to %ProgramFiles%\microsoft office\office12\mscol11.ppd.gоod
from %APPDATA%\icqm\icq\smiles\smiles\s008.gif to %APPDATA%\icqm\icq\smiles\smiles\s008.gif.gоod
from %TEMP%\adobearm.log to %TEMP%\adobearm.log.gоod
from %APPDATA%\opera software\opera stable\preferences_20150820130020.backup to %APPDATA%\opera software\opera stable\preferences_20150820130020.backup.gоod
from %ProgramFiles%\microsoft office\office12\mscal.hlp to %ProgramFiles%\microsoft office\office12\mscal.hlp.gоod
from %ProgramFiles%\microsoft office\templates\1033\originreport.dotx to %ProgramFiles%\microsoft office\templates\1033\originreport.dotx.gоod
from %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\blocklist.xml to %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\blocklist.xml.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\an02724_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an02724_.wmf.gоod
from %ProgramFiles%\microsoft office\office12\msaccess.exe to %ProgramFiles%\microsoft office\office12\msaccess.exe.gоod
from %APPDATA%\icqm\icq\smiles\flash\drako_bolnoy.swf to %APPDATA%\icqm\icq\smiles\flash\drako_bolnoy.swf.gоod
from %ProgramFiles%\microsoft office\templates\1033\originletter.dotx to %ProgramFiles%\microsoft office\templates\1033\originletter.dotx.gоod
from %APPDATA%\opera software\opera stable\opera_shutdown_ms.txt to %APPDATA%\opera software\opera stable\opera_shutdown_ms.txt.gоod
from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02106_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02106_.gif.gоod
from %APPDATA%\icqm\icq\translation\mralang_cz.xml to %APPDATA%\icqm\icq\translation\mralang_cz.xml.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0158007.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0158007.wmf.gоod
from %ProgramFiles%\avsynmgr\avsynmgr.exe to %ProgramFiles%\avsynmgr\avsynmgr.exe.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme colors\aspect.xml to %ProgramFiles%\microsoft office\document themes 12\theme colors\aspect.xml.gоod
from %ProgramFiles%\avscan\avscan.exe to %ProgramFiles%\avscan\avscan.exe.gоod
from %ProgramFiles%\avgvv\avgvv.exe to %ProgramFiles%\avgvv\avgvv.exe.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\an02559_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an02559_.wmf.gоod
from %ProgramFiles%\microsoft office\office12\mml2omml.xsl to %ProgramFiles%\microsoft office\office12\mml2omml.xsl.gоod
from %ProgramFiles%\avconfig\avconfig.exe to %ProgramFiles%\avconfig\avconfig.exe.gоod
from %APPDATA%\opera software\opera stable\opera_autoupdate.log to %APPDATA%\opera software\opera stable\opera_autoupdate.log.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme colors\apex.xml to %ProgramFiles%\microsoft office\document themes 12\theme colors\apex.xml.gоod
from %ProgramFiles%\microsoft office\templates\1033\orielresume.dotx to %ProgramFiles%\microsoft office\templates\1033\orielresume.dotx.gоod
from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02097_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02097_.gif.gоod
from %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\extensions.json to %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\extensions.json.gоod
from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02116_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02116_.gif.gоod
from %ProgramFiles%\avconsol\avconsol.exe to %ProgramFiles%\avconsol\avconsol.exe.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme colors\civic.xml to %ProgramFiles%\microsoft office\document themes 12\theme colors\civic.xml.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme colors\flow.xml to %ProgramFiles%\microsoft office\document themes 12\theme colors\flow.xml.gоod
from %ProgramFiles%\avgamsvr\avgamsvr.exe to %ProgramFiles%\avgamsvr\avgamsvr.exe.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04108_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04108_.wmf.gоod
from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02187_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02187_.gif.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme colors\equity.xml to %ProgramFiles%\microsoft office\document themes 12\theme colors\equity.xml.gоod
from %ProgramFiles%\avgwizfw\avgwizfw.exe to %ProgramFiles%\avgwizfw\avgwizfw.exe.gоod
from %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\prefs.js to %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\prefs.js.gоod
from %APPDATA%\opera software\opera stable\origin bound certs-journal to %APPDATA%\opera software\opera stable\origin bound certs-journal.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\an03500_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an03500_.wmf.gоod
from %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\pluginreg.dat to %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\pluginreg.dat.gоod
from %ProgramFiles%\microsoft office\templates\1033\originmergeletter.dotx to %ProgramFiles%\microsoft office\templates\1033\originmergeletter.dotx.gоod
from %ProgramFiles%\b2\b2.exe to %ProgramFiles%\b2\b2.exe.gоod
from %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\healthreport.sqlite to %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\healthreport.sqlite.gоod
from %ProgramFiles%\microsoft office\document themes 12\theme colors\concourse.xml to %ProgramFiles%\microsoft office\document themes 12\theme colors\concourse.xml.gоod
from %APPDATA%\icqm\icq\translation\mralang_en.xml to %APPDATA%\icqm\icq\translation\mralang_en.xml.gоod
from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02134_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02134_.gif.gоod
from %ProgramFiles%\microsoft office\media\cagcat10\j0183168.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0183168.wmf.gоod
from %ProgramFiles%\microsoft office\office12\mscal.cnt to %ProgramFiles%\microsoft office\office12\mscal.cnt.gоod
from %ProgramFiles%\avgw\avgw.exe to %ProgramFiles%\avgw\avgw.exe.gоod
from %APPDATA%\icqm\icq\translation\mralang_de.xml to %APPDATA%\icqm\icq\translation\mralang_de.xml.gоod
from %APPDATA%\opera software\opera stable\origin bound certs to %APPDATA%\opera software\opera stable\origin bound certs.gоod
from %ProgramFiles%\microsoft office\templates\1033\originmergefax.dotx to %ProgramFiles%\microsoft office\templates\1033\originmergefax.dotx.gоod
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04369_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04369_.wmf.gоod
from %ProgramFiles%\microsoft office\media\office12\lines\bd21315_.gif to %ProgramFiles%\microsoft office\media\office12\lines\bd21315_.gif.gоod

Modifies user data files (Trojan.Encoder).

Changes user data files extensions (Trojan.Encoder).

Network activity

TCP

HTTP GET requests

http://19#.#89.17.172/dsetjqrreqm
http://19#.#89.17.172/write.php?in###################################################################

Miscellaneous

Searches for the following windows

ClassName: '' WindowName: ''

Creates and executes the following

'<SYSTEM32>\cmd.exe' /C wmic SHADOWCOPY DELETE' (with hidden window)
'<SYSTEM32>\cmd.exe' /C vssadmin Delete Shadows /All /Quiet' (with hidden window)
'<SYSTEM32>\cmd.exe' /C taskkill /F /IM sqlservr.exe /T && taskkill /F /IM mysqld.exe /T && taskkill /F /IM msmdsrv.exe /T && taskkill /F /IM postgres.exe /T && taskkill /F /IM sqlwriter.exe /T' (with hidden window)

Executes the following

'<SYSTEM32>\cmd.exe' /C wmic SHADOWCOPY DELETE
'<SYSTEM32>\cmd.exe' /C vssadmin Delete Shadows /All /Quiet
'<SYSTEM32>\cmd.exe' /C taskkill /F /IM sqlservr.exe /T && taskkill /F /IM mysqld.exe /T && taskkill /F /IM msmdsrv.exe /T && taskkill /F /IM postgres.exe /T && taskkill /F /IM sqlwriter.exe /T

Tecnologie

Termini

Formazione ed informazione

Falsi miti

Technical Information

Curing recommendations

Free trial