Trojan.Encoder.37114

Technical Information

To ensure autorun and distribution

Creates or modifies the following files

%APPDATA%\microsoft\windows\start menu\programs\startup\desktop.ini

Malicious functions

Reads files which store third party applications passwords

%LOCALAPPDATA%\google\chrome\user data\default\cookies
%HOMEPATH%\desktop\tileimage.bmp
%HOMEPATH%\desktop\testee.cer
%HOMEPATH%\desktop\sdksampleprivdeveloper.cer
%HOMEPATH%\desktop\pmd.cer
%HOMEPATH%\desktop\nwfieldnotes1966.docx
%HOMEPATH%\desktop\lisp_success.doc
%HOMEPATH%\desktop\iisstart.htm
%HOMEPATH%\desktop\glidescope_review_rev_010.docx
%HOMEPATH%\desktop\fi51.doc
%HOMEPATH%\desktop\february_catalogue__2015.doc
%HOMEPATH%\desktop\dial.bmp
%HOMEPATH%\desktop\dashborder_144.bmp
%HOMEPATH%\desktop\dashborder_120.bmp
%HOMEPATH%\desktop\cveuropeo.doc
%HOMEPATH%\desktop\contoso_1.cer
%HOMEPATH%\desktop\coffee.bmp
%HOMEPATH%\desktop\alert.htm
%HOMEPATH%\desktop\about.htm
%HOMEPATH%\desktop\64bit_notes.htm
%HOMEPATH%\desktop\508softwareandos.doc
%APPDATA%\thunderbird\profiles.ini
%APPDATA%\opera software\opera stable\login data
%APPDATA%\mozilla\firefox\profiles.ini
%LOCALAPPDATA%\google\chrome\user data\default\web data
%LOCALAPPDATA%\google\chrome\user data\default\login data
%HOMEPATH%\desktop\tree_view.htm
%HOMEPATH%\desktop\uep_form_786_bulletin_1726i602.doc

Modifies file system

Creates the following files

%LOCALAPPDATA%\google\chrome\user data\default\web applications\_crx_aohghmighlieiainnegkcijnfilokake\документы google.ico
%LOCALAPPDATA%\google\chrome\user data\default\web applications\_crx_aohghmighlieiainnegkcijnfilokake\документы google.ico.md5
%APPDATA%\microsoft\crypto\rsa\s-1-5-21-1960123792-2022915161-3775307078-1001\fa3a3f4ec248d39c7af76abd333c7117_36d1130a-ac2e-44f7-9dc1-e424fbcbe0ee
%APPDATA%\enckey.cryptojoker
%APPDATA%\jokingwithyou.cryptojoker
%HOMEPATH%\desktop\cryptojoker recovery information.txt

Deletes the following files

%APPDATA%\microsoft\crypto\rsa\s-1-5-21-1960123792-2022915161-3775307078-1001\fa3a3f4ec248d39c7af76abd333c7117_36d1130a-ac2e-44f7-9dc1-e424fbcbe0ee

Moves the following files

from %LOCALAPPDATA%\google\chrome\user data\default\web applications\_crx_aohghmighlieiainnegkcijnfilokake\документы google.ico to %LOCALAPPDATA%\google\chrome\user data\default\web applications\_crx_aohghmighlieiainnegkcijnfilokake\документы google.ico.crypto_kzhq1sov05
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\undress.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\undress.gif.crypto_zc9vzzh6fh
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\on_wings.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\on_wings.gif.crypto_mn2grzb5gk
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\lets_play.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\lets_play.gif.crypto_mn2grzb5gk
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\kissed.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\kissed.gif.crypto_mn2grzb5gk
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\kiss.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\kiss.gif.crypto_s8l8zwlml1
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\jealousy.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\jealousy.gif.crypto_s8l8zwlml1
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\in_love.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\in_love.gif.crypto_s8l8zwlml1
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\dont_be_late.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\dont_be_late.gif.crypto_fjeurwflm5
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\broken_heart.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\broken_heart.gif.crypto_fjeurwflm5
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\zloradstvo.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\zloradstvo.gif.crypto_agjykkocai
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\victory.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\victory.gif.crypto_agjykkocai
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\vampire.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\vampire.gif.crypto_xrdjckibbm
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\think.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\think.gif.crypto_xrdjckibbm
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\tears.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\tears.gif.crypto_xrdjckibbm
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\smile.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\smile.gif.crypto_xrdjckibbm
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\sleepy.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\sleepy.gif.crypto_qopxchmsh6
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\shy.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\shy.gif.crypto_dzii4igrha
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\sceptic.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\sceptic.gif.crypto_dzii4igrha
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\rrr.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\rrr.gif.crypto_dzii4igrha
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\really.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\really.gif.crypto_dzii4igrha
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\plug.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\plug.gif.crypto_6vuv4ek7nu
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\want_you.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\want_you.gif.crypto_zc9vzzh6fh
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\aim\aim_status_away.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\aim\aim_status_away.ico.crypto_c1fa7yn7ed
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\aim\aim_status_busy.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\aim\aim_status_busy.ico.crypto_6fxhz2dq9w
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\aim\aim_status_gray.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\aim\aim_status_gray.ico.crypto_6fxhz2dq9w
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s015.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s015.gif.crypto_3tsqpt0au1
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\ok.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\ok.gif.crypto_6vuv4ek7nu
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\icq\status_mobile.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\icq\status_mobile.ico.crypto_ushknajgpw
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\icq\seekfriends_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\icq\seekfriends_xp.ico.crypto_h3a5fbdfq0
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\icq\seekfriends.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\icq\seekfriends.ico.crypto_h3a5fbdfq0
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\icq\icq_status_wrong_data.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\icq\icq_status_wrong_data.ico.crypto_a0mjf7hvwk
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\icq\icq_status_online.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\icq\icq_status_online.ico.crypto_a0mjf7hvwk
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\icq\icq_status_offline.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\icq\icq_status_offline.ico.crypto_a0mjf7hvwk
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\icq\icq_status_invisible.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\icq\icq_status_invisible.ico.crypto_a0mjf7hvwk
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\icq\icq_status_gray.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\icq\icq_status_gray.ico.crypto_a0mjf7hvwk
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\pig.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\pig.gif.crypto_6vuv4ek7nu
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\icq\icq_status_dnd.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\icq\icq_status_dnd.ico.crypto_xbg478buwo
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\icq\icq_status_chat.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\icq\icq_status_chat.ico.crypto_xbg478buwo
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\jabber_odkl_connecting.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\jabber_odkl_connecting.ico.crypto_ssouujd563
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\icq\24bit.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\icq\24bit.ico.crypto_q8si75fa28
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\gtalk\gtalk_status_online.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\gtalk\gtalk_status_online.ico.crypto_q8si75fa28
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\gtalk\gtalk_status_offline.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\gtalk\gtalk_status_offline.ico.crypto_q8si75fa28
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\gtalk\gtalk_status_gray.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\gtalk\gtalk_status_gray.ico.crypto_djl3z5993c
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\gtalk\gtalk_status_busy.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\gtalk\gtalk_status_busy.ico.crypto_djl3z5993c
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\gtalk\gtalk_status_away.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\gtalk\gtalk_status_away.ico.crypto_djl3z5993c
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\aim\aim_status_online.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\aim\aim_status_online.ico.crypto_6fxhz2dq9w
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\aim\aim_status_offline.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\aim\aim_status_offline.ico.crypto_6fxhz2dq9w
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\icq\icq_status_connecting.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\icq\icq_status_connecting.ico.crypto_xbg478buwo
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\jabber_odkl_gray.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\jabber_odkl_gray.ico.crypto_m651mn3o1m
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\oo.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\oo.gif.crypto_6vuv4ek7nu
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\live.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\live.gif.crypto_chcocbuotb
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s020.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s020.gif.crypto_8wnmw5qi6n
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s019.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s019.gif.crypto_8wnmw5qi6n
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s018.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s018.gif.crypto_8wnmw5qi6n
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s017.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s017.gif.crypto_v7g7o6kh7r
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s016.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s016.gif.crypto_v7g7o6kh7r
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s015.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s015.gif.crypto_v7g7o6kh7r
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s014.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s014.gif.crypto_1tz0x2uyc8
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s013.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s013.gif.crypto_1tz0x2uyc8
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s012.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s012.gif.crypto_1tz0x2uyc8
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s011.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s011.gif.crypto_o4slo3oxdb
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s010.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s010.gif.crypto_o4slo3oxdb
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s009.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s009.gif.crypto_o4slo3oxdb
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s008.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s008.gif.crypto_o4slo3oxdb
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s006.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s006.gif.crypto_upbexzyeis
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s004.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s004.gif.crypto_upbexzyeis
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s003.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s003.gif.crypto_upbexzyeis
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s002.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s002.gif.crypto_upbexzyeis
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s001.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s001.gif.crypto_axgcpwwtog
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s020.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s020.gif.crypto_axgcpwwtog
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s019.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s019.gif.crypto_x8axhxqtpk
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s018.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s018.gif.crypto_x8axhxqtpk
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\aaa.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\aaa.gif.crypto_llu145wj5k
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\amazed.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\amazed.gif.crypto_llu145wj5k
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\angry.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\angry.gif.crypto_llu145wj5k
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\ass.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\ass.gif.crypto_llu145wj5k
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\cry.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\cry.gif.crypto_spin48s3zz
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\laughter.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\laughter.gif.crypto_chcocbuotb
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\koza_right.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\koza_right.gif.crypto_chcocbuotb
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\koza_left.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\koza_left.gif.crypto_chcocbuotb
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\kiss.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\kiss.gif.crypto_zs694bontf
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\hm.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\hm.gif.crypto_zs694bontf
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\heart.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\heart.gif.crypto_zs694bontf
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\fuck.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\fuck.gif.crypto_m3zuwcimui
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\fist.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\fist.gif.crypto_m3zuwcimui
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\disappointed.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\disappointed.gif.crypto_m3zuwcimui
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\icq\icq_status_away.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\icq\icq_status_away.ico.crypto_xbg478buwo
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\die.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\die.gif.crypto_m3zuwcimui
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\detzl.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\detzl.gif.crypto_spin48s3zz
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\kukes.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\kukes.gif.crypto_chcocbuotb
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\crocodile.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\crocodile.gif.crypto_spin48s3zz
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\coolguy.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\coolguy.gif.crypto_spin48s3zz
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\bullshit.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\bullshit.gif.crypto_spin48s3zz
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\blink.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\blink.gif.crypto_fzb8w9m203
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\biggrin.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\biggrin.gif.crypto_fzb8w9m203
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\biganger.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\biganger.gif.crypto_fzb8w9m203
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\bee.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\bee.gif.crypto_fzb8w9m203
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\bazilio.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\bazilio.gif.crypto_fzb8w9m203
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\devil.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\devil.gif.crypto_m3zuwcimui
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s017.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s017.gif.crypto_x8axhxqtpk
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\jabber_odkl_online.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\jabber_odkl_online.ico.crypto_zvcgum9p0i
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\jabber_odkl_wrong_data.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\jabber_odkl_wrong_data.ico.crypto_zvcgum9p0i
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\74.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\74.ico.crypto_nxerqo8mko
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\79.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\79.ico.crypto_kff76qg7cw
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\78_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\78_xp.ico.crypto_kff76qg7cw
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\78.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\78.ico.crypto_kff76qg7cw
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\77_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\77_xp.ico.crypto_7q8syra7d0
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\77.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\77.ico.crypto_7q8syra7d0
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\76_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\76_xp.ico.crypto_u12dqr46e4
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\76.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\76.ico.crypto_u12dqr46e4
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\75_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\75_xp.ico.crypto_0mk5ynenjl
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\75.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\75.ico.crypto_0mk5ynenjl
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\74_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\74_xp.ico.crypto_nxerqo8mko
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\73_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\73_xp.ico.crypto_tjwjyki3p5
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\80.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\80.ico.crypto_etweyu6q7g
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\73.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\73.ico.crypto_tjwjyki3p5
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\72_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\72_xp.ico.crypto_guq4qlc2q9
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\72.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\72.ico.crypto_guq4qlc2q9
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\71_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\71_xp.ico.crypto_35jpil61qc
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\71.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\71.ico.crypto_35jpil61qc
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\70_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\70_xp.ico.crypto_35jpil61qc
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\70.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\70.ico.crypto_9q1iqhgiwt
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\69_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\69_xp.ico.crypto_w1v3iiahwx
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\50a.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\50a.gif.crypto_3ap5u57r9z
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\80_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\80_xp.ico.crypto_etweyu6q7g
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\92.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\92.ico.crypto_27ghm2chnf
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\86_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\86_xp.ico.crypto_5pf1604vu7
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\87.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\87.ico.crypto_5pf1604vu7
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\91_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\91_xp.ico.crypto_pia2e26goj
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\91.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\91.ico.crypto_pia2e26goj
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\90_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\90_xp.ico.crypto_pia2e26goj
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\90.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\90.ico.crypto_ct3n530fpn
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\89_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\89_xp.ico.crypto_ct3n530fpn
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\89.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\89.ico.crypto_ct3n530fpn
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\88_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\88_xp.ico.crypto_iemgezawu3
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\88.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\88.ico.crypto_iemgezawu3
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\87_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\87_xp.ico.crypto_iemgezawu3
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\69.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\69.ico.crypto_w1v3iiahwx
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\68_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\68_xp.ico.crypto_2ndwqeky1e
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\81.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\81.ico.crypto_ri3t6tcr6c
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\85_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\85_xp.ico.crypto_bbyuewec0o
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\85.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\85.ico.crypto_bbyuewec0o
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\84_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\84_xp.ico.crypto_bbyuewec0o
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\84.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\84.ico.crypto_ymrf6x8b0r
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\83_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\83_xp.ico.crypto_ymrf6x8b0r
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\83.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\83.ico.crypto_ymrf6x8b0r
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\82_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\82_xp.ico.crypto_lxk0yx2a1v
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\82.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\82.ico.crypto_lxk0yx2a1v
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\81_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\81_xp.ico.crypto_ri3t6tcr6c
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\86.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\86.ico.crypto_5pf1604vu7
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\12.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\12.ico.crypto_9nvb06vgop
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\79_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\79_xp.ico.crypto_kff76qg7cw
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\68.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\68.ico.crypto_2ndwqeky1e
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\13.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\13.ico.crypto_nu8k0dnkdk
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\12_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\12_xp.ico.crypto_9nvb06vgop
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\11.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\11.ico.crypto_wypws7pfpt
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\104_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\104_xp.ico.crypto_2k7p03zwua
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\104.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\104.ico.crypto_c6uvk4nuwh
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\103_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\103_xp.ico.crypto_5269k1ra22
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\103.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\103.ico.crypto_j7a3xd4sfw
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\102_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\102_xp.ico.crypto_b4mgx989lh
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\102.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\102.ico.crypto_b4mgx989lh
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\101_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\101_xp.ico.crypto_l83tq4a4yp
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\101.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\101.ico.crypto_8jwei443zt
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\100_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\100_xp.ico.crypto_1g8si18j5d
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\100.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\100.ico.crypto_1g8si18j5d
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\seekfriends.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\seekfriends.ico.crypto_qrv32s8toa
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\jabber_status_online.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\jabber_status_online.ico.crypto_6z02uq59vy
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\jabber_status_offline.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\jabber_status_offline.ico.crypto_6z02uq59vy
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\jabber_status_invisible.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\jabber_status_invisible.ico.crypto_6z02uq59vy
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\jabber_status_gray.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\jabber_status_gray.ico.crypto_ckiv2mfq0f
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\jabber_status_dnd.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\jabber_status_dnd.ico.crypto_ckiv2mfq0f
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\jabber_status_chat.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\jabber_status_chat.ico.crypto_ckiv2mfq0f
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\jabber_status_away.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\jabber_status_away.ico.crypto_ckiv2mfq0f
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\13_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\13_xp.ico.crypto_nu8k0dnkdk
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\66_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\66_xp.ico.crypto_55cgbccc95
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\61.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\61.ico.crypto_tzty3wpk33
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\56.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\56.ico.crypto_yil8gln9to
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\67.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\67.ico.crypto_iujvjcid82
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\61_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\61_xp.ico.crypto_tzty3wpk33
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\66.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\66.ico.crypto_55cgbccc95
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\65_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\65_xp.ico.crypto_y2oub9gsfq
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\65.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\65.ico.crypto_ldhf3aargt
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\64_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\64_xp.ico.crypto_rz07b6k8la
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\64.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\64.ico.crypto_rz07b6k8la
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\63_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\63_xp.ico.crypto_kvclb2oprv
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\63.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\63.ico.crypto_kvclb2oprv
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\62_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\62_xp.ico.crypto_uhzrv4bns2
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\jabber_odkl_offline.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\jabber_odkl_offline.ico.crypto_zvcgum9p0i
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\62.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\62.ico.crypto_03hk30l4xj
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\60_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\60_xp.ico.crypto_3lg4nydi5a
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\11_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\11_xp.ico.crypto_9nvb06vgop
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\60.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\60.ico.crypto_3lg4nydi5a
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\59_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\59_xp.ico.crypto_wisinuhybv
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\59.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\59.ico.crypto_wisinuhybv
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\58_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\58_xp.ico.crypto_wisinuhybv
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\58.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\58.ico.crypto_wisinuhybv
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\57_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\57_xp.ico.crypto_pe4wnrlehf
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\57.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\57.ico.crypto_b7snoltask
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\56_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\56_xp.ico.crypto_b7snoltask
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\67_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\67_xp.ico.crypto_c902af8w3l
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s016.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s016.gif.crypto_3tsqpt0au1
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s014.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s014.gif.crypto_3tsqpt0au1
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s013.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s013.gif.crypto_q4mbhtu9v4
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\lol.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\lol.gif.crypto_gptoqbvwes
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\i_am_so_happy.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\i_am_so_happy.gif.crypto_9m52q8zdkc
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\ireful.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\ireful.gif.crypto_9m52q8zdkc
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\hi.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\hi.gif.crypto_9m52q8zdkc
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\hang1.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\hang1.gif.crypto_9m52q8zdkc
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\good.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\good.gif.crypto_9m52q8zdkc
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\give_rose.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\give_rose.gif.crypto_wxyni8tclg
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\give_heart.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\give_heart.gif.crypto_wxyni8tclg
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\girl_angel.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\girl_angel.gif.crypto_wxyni8tclg
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\gamer.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\gamer.gif.crypto_2jhfq43tqx
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\drinks.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\drinks.gif.crypto_2jhfq43tqx
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\diablo.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\diablo.gif.crypto_2jhfq43tqx
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\dance.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\dance.gif.crypto_2jhfq43tqx
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\cry.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\cry.gif.crypto_pua0i5xsr1
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\crazy.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\crazy.gif.crypto_pua0i5xsr1
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\cool.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\cool.gif.crypto_pua0i5xsr1
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\bye2.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\bye2.gif.crypto_vfttq179wh
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\bomb.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\bomb.gif.crypto_vfttq179wh
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\blush.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\blush.gif.crypto_vfttq179wh
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\blum1.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\blum1.gif.crypto_vfttq179wh
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\biggrin.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\biggrin.gif.crypto_iqmei218xl
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\mad.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\mad.gif.crypto_gptoqbvwes
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\man_in_love.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\man_in_love.gif.crypto_gptoqbvwes
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\07a.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\07a.gif.crypto_fw516x10tz
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\sorry.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\sorry.gif.crypto_zluwopijf8
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\unknown.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\unknown.gif.crypto_36jy4ump2v
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\06a.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\06a.gif.crypto_fw516x10tz
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\04b.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\04b.gif.crypto_fw516x10tz
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\03a.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\03a.gif.crypto_1ptt6r9w54
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\02.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\02.gif.crypto_hxysyo7cbs
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\01.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\01.gif.crypto_x44rrm5rig
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\yes.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\yes.gif.crypto_3qmjzif8nx
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\yahoo.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\yahoo.gif.crypto_cu3wrch306
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\wink.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\wink.gif.crypto_lyl9j6iyce
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\wacko1.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\wacko1.gif.crypto_89eub6cxdi
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\kiss3.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\kiss3.gif.crypto_mbbhy75ek9
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\bad.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\bad.gif.crypto_iqmei218xl
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\air_kiss.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\air_kiss.gif.crypto_51fza2u7yp
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\shout.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\shout.gif.crypto_aq4z8aqqa9
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\shok.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\shok.gif.crypto_75fxt4lknl
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\scratch_one-s_head.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\scratch_one-s_head.gif.crypto_uzwflpzsij
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\sad.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\sad.gif.crypto_b61ddmx7p7
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\rofl.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\rofl.gif.crypto_d7u46d3i70
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\pardon.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\pardon.gif.crypto_nthaqerg98
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\nea.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\nea.gif.crypto_nthaqerg98
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\music.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\music.gif.crypto_te03ya1xeo
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\mocking.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\mocking.gif.crypto_te03ya1xeo
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\smile.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\smile.gif.crypto_8pb8gjkesg
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\kiss.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\koloboks\kiss.gif.crypto_mbbhy75ek9
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\08a.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\08a.gif.crypto_slcgex71sw
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\09a.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\09a.gif.crypto_slcgex71sw
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\icq6.0-emoticons\blinking.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\icq6.0-emoticons\blinking.gif.crypto_729q2t0igi
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\cat\cat_mouse.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\cat\cat_mouse.gif.crypto_ai1cipnjsp
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\cat\cat_meow.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\cat\cat_meow.gif.crypto_ai1cipnjsp
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\cat\cat_lick.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\cat\cat_lick.gif.crypto_ai1cipnjsp
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\cat\cat_hand.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\cat\cat_hand.gif.crypto_ai1cipnjsp
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\cat\cat_attack.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\cat\cat_attack.gif.crypto_xtvxaphitt
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\wonder.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\wonder.gif.crypto_xtvxaphitt
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\victory.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\victory.gif.crypto_xtvxaphitt
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\tongue.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\tongue.gif.crypto_xtvxaphitt
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\smile.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\smile.gif.crypto_3fdpilrzy9
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\sleep.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\sleep.gif.crypto_3fdpilrzy9
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\skuka.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\skuka.gif.crypto_3fdpilrzy9
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\sing.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\sing.gif.crypto_3fdpilrzy9
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\sad.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\sad.gif.crypto_3fdpilrzy9
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\red.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\red.gif.crypto_qq7aamlyyd
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\rainbow.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\rainbow.gif.crypto_qq7aamlyyd
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\poison.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\poison.gif.crypto_qq7aamlyyd
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\pistolet.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\pistolet.gif.crypto_qq7aamlyyd
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\love.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\love.gif.crypto_wbp3iivf4u
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\kiss.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\kiss.gif.crypto_wbp3iivf4u
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\hungry.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\hungry.gif.crypto_wbp3iivf4u
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\icq6.0-emoticons\blushing.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\icq6.0-emoticons\blushing.gif.crypto_729q2t0igi
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\icq6.0-emoticons\bomb.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\icq6.0-emoticons\bomb.gif.crypto_729q2t0igi
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\icq6.0-emoticons\thank you.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\icq6.0-emoticons\thank you.gif.crypto_51fza2u7yp
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\icq6.0-emoticons\kissing.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\icq6.0-emoticons\kissing.gif.crypto_4ja6iv849q
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\icq6.0-emoticons\laughing out loud (lol).gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\icq6.0-emoticons\laughing out loud (lol).gif.crypto_4ja6iv849q
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\icq6.0-emoticons\surprised.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\icq6.0-emoticons\surprised.gif.crypto_51fza2u7yp
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\icq6.0-emoticons\stop.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\icq6.0-emoticons\stop.gif.crypto_bnysiy4o35
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\icq6.0-emoticons\smile.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\icq6.0-emoticons\smile.gif.crypto_bnysiy4o35
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\icq6.0-emoticons\scream.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\icq6.0-emoticons\scream.gif.crypto_bnysiy4o35
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\icq6.0-emoticons\sad.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\icq6.0-emoticons\sad.gif.crypto_yyrdazyn49
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\icq6.0-emoticons\nothing to say.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\icq6.0-emoticons\nothing to say.gif.crypto_yyrdazyn49
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\icq6.0-emoticons\mad.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\icq6.0-emoticons\mad.gif.crypto_yyrdazyn49
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\icq6.0-emoticons\listening to music.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\icq6.0-emoticons\listening to music.gif.crypto_4ja6iv849q
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\icq6.0-emoticons\laughing.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\icq6.0-emoticons\laughing.gif.crypto_4ja6iv849q
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\icq6.0-emoticons\thumbs up.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\icq6.0-emoticons\thumbs up.gif.crypto_51fza2u7yp
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\icq6.0-emoticons\tongue out.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\icq6.0-emoticons\tongue out.gif.crypto_51fza2u7yp
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\cat\cat_paper.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\cat\cat_paper.gif.crypto_n78qqotkrl
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\icq6.0-emoticons\kiss.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\icq6.0-emoticons\kiss.gif.crypto_ru3raw23au
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\icq6.0-emoticons\in love.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\icq6.0-emoticons\in love.gif.crypto_e5xc2ww2ax
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\icq6.0-emoticons\gross.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\icq6.0-emoticons\gross.gif.crypto_e5xc2ww2ax
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\icq6.0-emoticons\falling asleep.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\icq6.0-emoticons\falling asleep.gif.crypto_e5xc2ww2ax
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\icq6.0-emoticons\drinking.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\icq6.0-emoticons\drinking.gif.crypto_e5xc2ww2ax
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\icq6.0-emoticons\devil.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\icq6.0-emoticons\devil.gif.crypto_krf5as6jge
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\icq6.0-emoticons\crying.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\icq6.0-emoticons\crying.gif.crypto_krf5as6jge
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\icq6.0-emoticons\cool.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\icq6.0-emoticons\cool.gif.crypto_krf5as6jge
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\icq6.0-emoticons\can't say-shut up.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\icq6.0-emoticons\can't say-shut up.gif.crypto_krf5as6jge
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\icq6.0-emoticons\kissed.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\icq6.0-emoticons\kissed.gif.crypto_ru3raw23au
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\10a.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\10a.gif.crypto_slcgex71sw
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\s001.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\s001.gif.crypto_fg8n1luje1
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\12a.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\12a.gif.crypto_m0to61xknf
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\s004.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\s004.gif.crypto_s5f29k0kex
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\s003.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\s003.gif.crypto_fg8n1luje1
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\yahoo.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\yahoo.gif.crypto_l1rf9h40ki
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\wink.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\wink.gif.crypto_l1rf9h40ki
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\wacko2.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\wacko2.gif.crypto_8ck11iyzkm
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\unknw.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\unknw.gif.crypto_8ck11iyzkm
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\smile.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\smile.gif.crypto_8ck11iyzkm
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\shout.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\shout.gif.crypto_vndmtirylp
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\shok.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\shok.gif.crypto_vndmtirylp
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\scratch_one-s_head.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\scratch_one-s_head.gif.crypto_vndmtirylp
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\sad.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\sad.gif.crypto_vndmtirylp
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\rolleyes.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\rolleyes.gif.crypto_19we1e1fq6
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\rofl.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\rofl.gif.crypto_19we1e1fq6
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\pardon.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\pardon.gif.crypto_19we1e1fq6
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\nea.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\nea.gif.crypto_19we1e1fq6
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\music.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\music.gif.crypto_okpztfvera
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\mocking.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\mocking.gif.crypto_okpztfvera
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\man_in_love.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\man_in_love.gif.crypto_okpztfvera
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\kiss_mini.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\kiss_mini.gif.crypto_u58s2b5vwq
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\good.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\good.gif.crypto_u58s2b5vwq
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\give_rose.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\give_rose.gif.crypto_u58s2b5vwq
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\s005.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\s005.gif.crypto_s5f29k0kex
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s011.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s011.gif.crypto_q4mbhtu9v4
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\s016.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\s016.gif.crypto_cx93hn2579
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\s006.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\s006.gif.crypto_s5f29k0kex
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s012.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s012.gif.crypto_q4mbhtu9v4
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s001.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s001.gif.crypto_cx93hn2579
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s010.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s010.gif.crypto_q4mbhtu9v4
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s009.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s009.gif.crypto_dffw9uo8w8
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s008.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s008.gif.crypto_dffw9uo8w8
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s007.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s007.gif.crypto_dffw9uo8w8
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s006.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s006.gif.crypto_j1xphqyp1p
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s005.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s005.gif.crypto_j1xphqyp1p
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s004.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s004.gif.crypto_j1xphqyp1p
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s003.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s003.gif.crypto_j1xphqyp1p
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\fool.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\fool.gif.crypto_hg1duczuxu
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s002.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set05\s002.gif.crypto_cx93hn2579
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\s015.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\s015.gif.crypto_cx93hn2579
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\dirol.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\dirol.gif.crypto_4rvylcttyy
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\s014.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\s014.gif.crypto_z83o9ow48d
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\s013.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\s013.gif.crypto_z83o9ow48d
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\s012.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\s012.gif.crypto_z83o9ow48d
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\s011.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\s011.gif.crypto_z83o9ow48d
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\s010.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\s010.gif.crypto_mjw91oq38h
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\s009.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\s009.gif.crypto_mjw91oq38h
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\s008.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\s008.gif.crypto_mjw91oq38h
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\s007.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\s007.gif.crypto_mjw91oq38h
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\facepalm.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\facepalm.gif.crypto_hg1duczuxu
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\s002.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set04\s002.gif.crypto_fg8n1luje1
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\drinks.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\drinks.gif.crypto_hg1duczuxu
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\diablo.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\diablo.gif.crypto_4rvylcttyy
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\92_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\92_xp.ico.crypto_27ghm2chnf
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\23a.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\23a.gif.crypto_zp02e03lmb
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\33a.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\33a.gif.crypto_6sope3z5gr
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\32a.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\32a.gif.crypto_6sope3z5gr
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\31a.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\31a.gif.crypto_6sope3z5gr
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\30a.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\30a.gif.crypto_6sope3z5gr
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\29a.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\29a.gif.crypto_6sope3z5gr
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\28a.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\28a.gif.crypto_ce6hmz9ml8
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\27a.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\27a.gif.crypto_ce6hmz9ml8
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\26a.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\26a.gif.crypto_ce6hmz9ml8
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\37.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\37.gif.crypto_jhu4m356fn
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\25a.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\25a.gif.crypto_ce6hmz9ml8
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\24a.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\24a.gif.crypto_ce6hmz9ml8
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\22a.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\22a.gif.crypto_zp02e03lmb
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\21a.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\21a.gif.crypto_zp02e03lmb
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\20a.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\20a.gif.crypto_zp02e03lmb
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\19a.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\19a.gif.crypto_zp02e03lmb
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\17a.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\17a.gif.crypto_m0to61xknf
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\16a.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\16a.gif.crypto_m0to61xknf
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\15a.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\15a.gif.crypto_m0to61xknf
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\14a.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\14a.gif.crypto_m0to61xknf
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\13a.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\13a.gif.crypto_m0to61xknf
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\36a.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\36a.gif.crypto_jhu4m356fn
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\history.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\history.gif.crypto_jmjoajpe4x
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\39a.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\39a.gif.crypto_jhu4m356fn
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\41b.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\41b.gif.crypto_dwcbe7vpa6
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\11a.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\11a.gif.crypto_slcgex71sw
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\38a.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\38a.gif.crypto_jhu4m356fn
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\dance.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\dance.gif.crypto_4rvylcttyy
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\crazy.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\crazy.gif.crypto_4rvylcttyy
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\cray.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\cray.gif.crypto_addru93b3f
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\blush.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\blush.gif.crypto_addru93b3f
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\blum.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\blum.gif.crypto_addru93b3f
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\biggrin.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\biggrin.gif.crypto_xo7cm9xa4i
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\bad.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\bad.gif.crypto_xo7cm9xa4i
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\angel.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\set03\angel.gif.crypto_xo7cm9xa4i
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\40a.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\40a.gif.crypto_jhu4m356fn
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\53a.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\53a.gif.crypto_xo7cm9xa4i
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\51a.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\51a.gif.crypto_3ap5u57r9z
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\34a.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\34a.gif.crypto_jhu4m356fn
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\49a.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\49a.gif.crypto_3ap5u57r9z
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\48a.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\48a.gif.crypto_3ap5u57r9z
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\47a.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\47a.gif.crypto_qljqm61qa3
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\46a.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\46a.gif.crypto_qljqm61qa3
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\45a.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\45a.gif.crypto_qljqm61qa3
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\44a.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\44a.gif.crypto_dwcbe7vpa6
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\43a.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\43a.gif.crypto_dwcbe7vpa6
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\42a.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\42a.gif.crypto_dwcbe7vpa6
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\52a.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\odnoklassniki\52a.gif.crypto_3ap5u57r9z
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\icq6.0-emoticons\angel.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\icq6.0-emoticons\angel.gif.crypto_dnribpazlz
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\93.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\93.ico.crypto_27ghm2chnf
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\gizn_gavno.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\gizn_gavno.ico.crypto_kyis1e9qyy
from %APPDATA%\mra\update\languages.aff to %APPDATA%\mra\update\languages.aff.crypto_dqoqqqbhlw
from %APPDATA%\mra\base\opt.dbs to %APPDATA%\mra\base\opt.dbs.crypto_frhhihhs4p
from %APPDATA%\mra\base\mra.dbs to %APPDATA%\mra\base\mra.dbs.crypto_aomlb5rks2
from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\webapps\webapps.json to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\webapps\webapps.json.crypto_js3y3ztf5b
from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\storage\permanent\moz-safe-about+home\idb\818200132aebmoouht.sqlite to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\storage\permanent\moz-safe-about+home\idb\818200132aebmoouht.sqlite.crypto_2i7hfui8jr
from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\storage\permanent\moz-safe-about+home\.metadata to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\storage\permanent\moz-safe-about+home\.metadata.crypto_84q9nqspo8
from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\sessionstore-backups\upgrade.js-20150415140819 to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\sessionstore-backups\upgrade.js-20150415140819.crypto_bmot7ok3wz
from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\sessionstore-backups\recovery.js to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\sessionstore-backups\recovery.js.crypto_bmot7ok3wz
from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\sessionstore-backups\previous.js to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\sessionstore-backups\previous.js.crypto_bmot7ok3wz
from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\gmp-gmpopenh264\1.5.3\gmpopenh264.info to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\gmp-gmpopenh264\1.5.3\gmpopenh264.info.crypto_h87mflul1g
from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\gmp-gmpopenh264\1.5.3\gmpopenh264.dll to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\gmp-gmpopenh264\1.5.3\gmpopenh264.dll.crypto_4j077lok2k
from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\gmp-gmpopenh264\1.3\gmpopenh264.info to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\gmp-gmpopenh264\1.3\gmpopenh264.info.crypto_4j077lok2k
from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\gmp-gmpopenh264\1.3\gmpopenh264.dll to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\gmp-gmpopenh264\1.3\gmpopenh264.dll.crypto_a4j0fhy171
from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\datareporting\state.json to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\datareporting\state.json.crypto_a4j0fhy171
from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\crashes\store.json.mozlz4 to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\crashes\store.json.mozlz4.crypto_a4j0fhy171
from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\bookmarkbackups\bookmarks-2022-08-24_14_x5qkry9yysawyostzmcdfa==.jsonlz4 to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\bookmarkbackups\bookmarks-2022-08-24_14_x5qkry9yysawyostzmcdfa==.jsonlz4.crypto_a4j0fhy171
from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\xulstore.json to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\xulstore.json.crypto_a4j0fhy171
from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\user.js to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\user.js.crypto_xfcl7is084
from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\times.json to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\times.json.crypto_xfcl7is084
from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\sitesecurityservicestate.txt to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\sitesecurityservicestate.txt.crypto_xfcl7is084
from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\sessioncheckpoints.json to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\sessioncheckpoints.json.crypto_xfcl7is084
from %APPDATA%\mra\update\languages.dict to %APPDATA%\mra\update\languages.dict.crypto_fbk2d5abpr
from %APPDATA%\mra\update\languages.hash to %APPDATA%\mra\update\languages.hash.crypto_x2ldth6k0a
from %APPDATA%\mra\update\ver.txt to %APPDATA%\mra\update\ver.txt.crypto_oi7mvax893
from %APPDATA%\opera software\opera stable\bookmarks to %APPDATA%\opera software\opera stable\bookmarks.crypto_17e14a399z
from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\revocations.txt to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\revocations.txt.crypto_kq66zjmz88
from %APPDATA%\opera software\opera stable\quotamanager to %APPDATA%\opera software\opera stable\quotamanager.crypto_xqu5egk5tf
from %APPDATA%\opera software\opera stable\preferences to %APPDATA%\opera software\opera stable\preferences.crypto_xqu5egk5tf
from %APPDATA%\opera software\opera stable\origin bound certs-journal to %APPDATA%\opera software\opera stable\origin bound certs-journal.crypto_xqu5egk5tf
from %APPDATA%\opera software\opera stable\origin bound certs to %APPDATA%\opera software\opera stable\origin bound certs.crypto_2bdymcumyw
from %APPDATA%\opera software\opera stable\opera_shutdown_ms.txt to %APPDATA%\opera software\opera stable\opera_shutdown_ms.txt.crypto_2bdymcumyw
from %APPDATA%\opera software\opera stable\opera_autoupdate.log to %APPDATA%\opera software\opera stable\opera_autoupdate.log.crypto_2bdymcumyw
from %APPDATA%\opera software\opera stable\login data-journal to %APPDATA%\opera software\opera stable\login data-journal.crypto_2bdymcumyw
from %APPDATA%\opera software\opera stable\login data to %APPDATA%\opera software\opera stable\login data.crypto_qm6jecolz0
from %APPDATA%\opera software\opera stable\local state to %APPDATA%\opera software\opera stable\local state.crypto_qm6jecolz0
from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\search.json to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\search.json.crypto_kq66zjmz88
from %APPDATA%\opera software\opera stable\history-journal to %APPDATA%\opera software\opera stable\history-journal.crypto_qm6jecolz0
from %APPDATA%\opera software\opera stable\quotamanager-journal to %APPDATA%\opera software\opera stable\quotamanager-journal.crypto_9f1kmfq6sb
from %APPDATA%\opera software\opera stable\favorites.db-journal to %APPDATA%\opera software\opera stable\favorites.db-journal.crypto_dx046dik03
from %APPDATA%\opera software\opera stable\favicons-journal to %APPDATA%\opera software\opera stable\favicons-journal.crypto_ijixe9s15k
from %APPDATA%\opera software\opera stable\favicons to %APPDATA%\opera software\opera stable\favicons.crypto_ijixe9s15k
from %APPDATA%\opera software\opera stable\cookies-journal to %APPDATA%\opera software\opera stable\cookies-journal.crypto_6uci6am06o
from %APPDATA%\opera software\opera stable\cookies to %APPDATA%\opera software\opera stable\cookies.crypto_6uci6am06o
from %APPDATA%\opera software\opera stable\certificate revocation lists to %APPDATA%\opera software\opera stable\certificate revocation lists.crypto_6uci6am06o
from %APPDATA%\opera software\opera stable\browser.js to %APPDATA%\opera software\opera stable\browser.js.crypto_zqow66qhc8
from %APPDATA%\opera software\opera stable\bookmarksextras to %APPDATA%\opera software\opera stable\bookmarksextras.crypto_m1hhy7jgcc
from %APPDATA%\opera software\opera stable\bookmarks.bak to %APPDATA%\opera software\opera stable\bookmarks.bak.crypto_sn0963txht
from %APPDATA%\opera software\opera stable\history provider cache to %APPDATA%\opera software\opera stable\history provider cache.crypto_qm6jecolz0
from %APPDATA%\microsoft\windows\start menu\mail.ru agent.lnk to %APPDATA%\microsoft\windows\start menu\mail.ru agent.lnk.crypto_ste45i98ag
from %APPDATA%\opera software\opera stable\history to %APPDATA%\opera software\opera stable\history.crypto_dx046dik03
from %APPDATA%\microsoft\windows\start menu\programs\winrar\winrar help.lnk to %APPDATA%\microsoft\windows\start menu\programs\winrar\winrar help.lnk.crypto_sdhp052rwi
from %APPDATA%\microsoft\windows\start menu\programs\icq\icq.lnk to %APPDATA%\microsoft\windows\start menu\programs\icq\icq.lnk.crypto_ho41kx22fe
from %APPDATA%\microsoft\windows\start menu\programs\icq\icq.com.lnk to %APPDATA%\microsoft\windows\start menu\programs\icq\icq.com.lnk.crypto_4zxmcyw1gi
from %APPDATA%\microsoft\windows\start menu\programs\administrative tools\desktop.ini to %APPDATA%\microsoft\windows\start menu\programs\administrative tools\desktop.ini.crypto_4zxmcyw1gi
from %APPDATA%\microsoft\windows\start menu\programs\accessories\system tools\private character editor.lnk to %APPDATA%\microsoft\windows\start menu\programs\accessories\system tools\private character editor.lnk.crypto_algeku6ilz
from %APPDATA%\microsoft\windows\start menu\programs\accessories\system tools\internet explorer (no add-ons).lnk to %APPDATA%\microsoft\windows\start menu\programs\accessories\system tools\internet explorer (no add-ons).lnk.crypto_xw9zcu0hm2
from %APPDATA%\microsoft\windows\start menu\programs\accessories\system tools\desktop.ini to %APPDATA%\microsoft\windows\start menu\programs\accessories\system tools\desktop.ini.crypto_xw9zcu0hm2
from %APPDATA%\microsoft\windows\start menu\programs\accessories\system tools\control panel.lnk to %APPDATA%\microsoft\windows\start menu\programs\accessories\system tools\control panel.lnk.crypto_k73k4vugn6
from %APPDATA%\microsoft\windows\start menu\programs\accessories\system tools\computer.lnk to %APPDATA%\microsoft\windows\start menu\programs\accessories\system tools\computer.lnk.crypto_k73k4vugn6
from %APPDATA%\microsoft\windows\start menu\programs\accessories\accessibility\on-screen keyboard.lnk to %APPDATA%\microsoft\windows\start menu\programs\accessories\accessibility\on-screen keyboard.lnk.crypto_k73k4vugn6
from %APPDATA%\microsoft\windows\start menu\programs\accessories\accessibility\narrator.lnk to %APPDATA%\microsoft\windows\start menu\programs\accessories\accessibility\narrator.lnk.crypto_qsldcr4xsn
from %APPDATA%\microsoft\windows\start menu\programs\accessories\accessibility\magnify.lnk to %APPDATA%\microsoft\windows\start menu\programs\accessories\accessibility\magnify.lnk.crypto_d3fy4sywtq
from %APPDATA%\microsoft\windows\start menu\programs\accessories\accessibility\ease of access.lnk to %APPDATA%\microsoft\windows\start menu\programs\accessories\accessibility\ease of access.lnk.crypto_d3fy4sywtq
from %APPDATA%\microsoft\windows\start menu\programs\accessories\accessibility\desktop.ini to %APPDATA%\microsoft\windows\start menu\programs\accessories\accessibility\desktop.ini.crypto_d3fy4sywtq
from %APPDATA%\microsoft\windows\start menu\programs\accessories\windows explorer.lnk to %APPDATA%\microsoft\windows\start menu\programs\accessories\windows explorer.lnk.crypto_jpxrdo8dy7
from %APPDATA%\microsoft\windows\start menu\programs\accessories\run.lnk to %APPDATA%\microsoft\windows\start menu\programs\accessories\run.lnk.crypto_60qc5o2czb
from %APPDATA%\microsoft\windows\start menu\programs\accessories\notepad.lnk to %APPDATA%\microsoft\windows\start menu\programs\accessories\notepad.lnk.crypto_zw2q5l5s4v
from %APPDATA%\microsoft\windows\start menu\programs\accessories\desktop.ini to %APPDATA%\microsoft\windows\start menu\programs\accessories\desktop.ini.crypto_zw2q5l5s4v
from %APPDATA%\microsoft\windows\start menu\programs\accessories\command prompt.lnk to %APPDATA%\microsoft\windows\start menu\programs\accessories\command prompt.lnk.crypto_zw2q5l5s4v
from %APPDATA%\microsoft\windows\start menu\programs\internet explorer.lnk to %APPDATA%\microsoft\windows\start menu\programs\internet explorer.lnk.crypto_m7wbxmzr5z
from %APPDATA%\microsoft\windows\start menu\programs\internet explorer (64-bit).lnk to %APPDATA%\microsoft\windows\start menu\programs\internet explorer (64-bit).lnk.crypto_m7wbxmzr5z
from %APPDATA%\microsoft\windows\start menu\programs\desktop.ini to %APPDATA%\microsoft\windows\start menu\programs\desktop.ini.crypto_m7wbxmzr5z
from %APPDATA%\microsoft\windows\start menu\programs\icq\uninstall icq.lnk to %APPDATA%\microsoft\windows\start menu\programs\icq\uninstall icq.lnk.crypto_ho41kx22fe
from %APPDATA%\microsoft\windows\start menu\programs\mail.ru\mail.ru agent.lnk to %APPDATA%\microsoft\windows\start menu\programs\mail.ru\mail.ru agent.lnk.crypto_b3l8c1slax
from %APPDATA%\microsoft\windows\start menu\programs\mail.ru\mail.ru portal.lnk to %APPDATA%\microsoft\windows\start menu\programs\mail.ru\mail.ru portal.lnk.crypto_b3l8c1slax
from %APPDATA%\microsoft\windows\start menu\programs\mail.ru\uninstall mail.ru agent.lnk to %APPDATA%\microsoft\windows\start menu\programs\mail.ru\uninstall mail.ru agent.lnk.crypto_ossnk0yl9u
from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\healthreport.sqlite to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\healthreport.sqlite.crypto_dnikzfqfes
from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions.ini to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions.ini.crypto_j90c8b0wj9
from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\compatibility.ini to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\compatibility.ini.crypto_6kux0cuvkd
from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\addons.json to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\addons.json.crypto_tvnisdoulg
from %APPDATA%\mozilla\firefox\crash reports\installtime20150415140819 to %APPDATA%\mozilla\firefox\crash reports\installtime20150415140819.crypto_tvnisdoulg
from %APPDATA%\mozilla\firefox\profiles.ini to %APPDATA%\mozilla\firefox\profiles.ini.crypto_tvnisdoulg
from %APPDATA%\mirc\scripts\popups.ini to %APPDATA%\mirc\scripts\popups.ini.crypto_tvnisdoulg
from %APPDATA%\mirc\scripts\aliases.ini to %APPDATA%\mirc\scripts\aliases.ini.crypto_zg5b09ybqx
from %APPDATA%\mirc\urls.ini to %APPDATA%\mirc\urls.ini.crypto_zg5b09ybqx
from %APPDATA%\mirc\servers.ini to %APPDATA%\mirc\servers.ini.crypto_zg5b09ybqx
from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\prefs.js to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\prefs.js.crypto_qcoz8fwgdp
from %APPDATA%\mirc\mirc.ini to %APPDATA%\mirc\mirc.ini.crypto_zg5b09ybqx
from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions.json to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions.json.crypto_j90c8b0wj9
from %APPDATA%\microsoft\windows\start menu\programs\winrar\what is new in the latest version.lnk to %APPDATA%\microsoft\windows\start menu\programs\winrar\what is new in the latest version.lnk.crypto_fobas6wqxl
from %APPDATA%\microsoft\windows\start menu\programs\winrar\console rar manual.lnk to %APPDATA%\microsoft\windows\start menu\programs\winrar\console rar manual.lnk.crypto_fobas6wqxl
from %APPDATA%\microsoft\windows\start menu\programs\total commander\uninstall or repair total commander.lnk to %APPDATA%\microsoft\windows\start menu\programs\total commander\uninstall or repair total commander.lnk.crypto_2z4vk7qpxp
from %APPDATA%\microsoft\windows\start menu\programs\total commander\total commander help.lnk to %APPDATA%\microsoft\windows\start menu\programs\total commander\total commander help.lnk.crypto_8knos30636
from %APPDATA%\microsoft\windows\start menu\programs\total commander\total commander 64 bit.lnk to %APPDATA%\microsoft\windows\start menu\programs\total commander\total commander 64 bit.lnk.crypto_8knos30636
from %APPDATA%\microsoft\windows\start menu\programs\telegram desktop\uninstall telegram.lnk to %APPDATA%\microsoft\windows\start menu\programs\telegram desktop\uninstall telegram.lnk.crypto_vvg9k3u539
from %APPDATA%\microsoft\windows\start menu\programs\telegram desktop\telegram.lnk to %APPDATA%\microsoft\windows\start menu\programs\telegram desktop\telegram.lnk.crypto_vvg9k3u539
from %APPDATA%\microsoft\windows\start menu\programs\maintenance\help.lnk to %APPDATA%\microsoft\windows\start menu\programs\maintenance\help.lnk.crypto_1hz2s04m9q
from %APPDATA%\microsoft\windows\start menu\programs\maintenance\desktop.ini to %APPDATA%\microsoft\windows\start menu\programs\maintenance\desktop.ini.crypto_ossnk0yl9u
from %APPDATA%\microsoft\windows\start menu\programs\winrar\winrar.lnk to %APPDATA%\microsoft\windows\start menu\programs\winrar\winrar.lnk.crypto_mrzws9sar1
from %APPDATA%\microsoft\windows\start menu\qip 2012.lnk to %APPDATA%\microsoft\windows\start menu\qip 2012.lnk.crypto_ste45i98ag
from %APPDATA%\opera software\opera stable\session.db-journal to %APPDATA%\opera software\opera stable\session.db-journal.crypto_9f1kmfq6sb
from %APPDATA%\opera software\opera stable\jump list icons\516e.tmp to %APPDATA%\opera software\opera stable\jump list icons\516e.tmp.crypto_r63v1rmg3u
from %APPDATA%\telegram desktop\tdata\shortcuts-default.json to %APPDATA%\telegram desktop\tdata\shortcuts-default.json.crypto_5xipwl72dr
from %APPDATA%\telegram desktop\tdata\shortcuts-custom.json to %APPDATA%\telegram desktop\tdata\shortcuts-custom.json.crypto_bj0h5hhji8
from %APPDATA%\telegram desktop\tdata\settings0 to %APPDATA%\telegram desktop\tdata\settings0.crypto_l4nnoi5hjf
from %APPDATA%\telegram desktop\tdata\prefix to %APPDATA%\telegram desktop\tdata\prefix.crypto_l4nnoi5hjf
from %APPDATA%\telegram desktop\tdata\d877f783d5d3ef8c1 to %APPDATA%\telegram desktop\tdata\d877f783d5d3ef8c1.crypto_e1z1pf9yp0
from %APPDATA%\telegram desktop\tdata\90ef50e22e92cb8c0 to %APPDATA%\telegram desktop\tdata\90ef50e22e92cb8c0.crypto_e1z1pf9yp0
from %APPDATA%\telegram desktop\updater.exe to %APPDATA%\telegram desktop\updater.exe.crypto_e1z1pf9yp0
from %APPDATA%\telegram desktop\unins000.exe to %APPDATA%\telegram desktop\unins000.exe.crypto_kniuxbjfvh
from %APPDATA%\telegram desktop\telegram.exe to %APPDATA%\telegram desktop\telegram.exe.crypto_u940hc6dwo
from %APPDATA%\telegram desktop\log.txt to %APPDATA%\telegram desktop\log.txt.crypto_0untp8gu15
from %APPDATA%\qipguard\qipguard_upd.exe to %APPDATA%\qipguard\qipguard_upd.exe.crypto_n5geh9at28
from %APPDATA%\telegram desktop\tdata\d877f783d5d3ef8c\map0 to %APPDATA%\telegram desktop\tdata\d877f783d5d3ef8c\map0.crypto_imo34kd3co
from %APPDATA%\qipguard\qipguard.exe to %APPDATA%\qipguard\qipguard.exe.crypto_trz7p5ka7p
from %APPDATA%\qipguard\chrome.dll to %APPDATA%\qipguard\chrome.dll.crypto_g2ssh6e98t
from %APPDATA%\qipguard\cache to %APPDATA%\qipguard\cache.crypto_g2ssh6e98t
from %APPDATA%\opera software\opera stable\sync extension settings\knohfebhibeknbfioecpdmdkjkjdnjnl\manifest-000001 to %APPDATA%\opera software\opera stable\sync extension settings\knohfebhibeknbfioecpdmdkjkjdnjnl\manifest-000001.crypto_g2ssh6e98t
from %APPDATA%\opera software\opera stable\sync extension settings\knohfebhibeknbfioecpdmdkjkjdnjnl\log.old to %APPDATA%\opera software\opera stable\sync extension settings\knohfebhibeknbfioecpdmdkjkjdnjnl\log.old.crypto_g2ssh6e98t
from %APPDATA%\opera software\opera stable\sync extension settings\knohfebhibeknbfioecpdmdkjkjdnjnl\log to %APPDATA%\opera software\opera stable\sync extension settings\knohfebhibeknbfioecpdmdkjkjdnjnl\log.crypto_g2ssh6e98t
from %APPDATA%\opera software\opera stable\sync extension settings\knohfebhibeknbfioecpdmdkjkjdnjnl\lock to %APPDATA%\opera software\opera stable\sync extension settings\knohfebhibeknbfioecpdmdkjkjdnjnl\lock.crypto_g2ssh6e98t
from %APPDATA%\opera software\opera stable\sync extension settings\knohfebhibeknbfioecpdmdkjkjdnjnl\current to %APPDATA%\opera software\opera stable\sync extension settings\knohfebhibeknbfioecpdmdkjkjdnjnl\current.crypto_g2ssh6e98t
from %APPDATA%\opera software\opera stable\sync extension settings\knohfebhibeknbfioecpdmdkjkjdnjnl\000006.log to %APPDATA%\opera software\opera stable\sync extension settings\knohfebhibeknbfioecpdmdkjkjdnjnl\000006.log.crypto_3dmd96889w
from %APPDATA%\qipguard\sqlite3.dll to %APPDATA%\qipguard\sqlite3.dll.crypto_n5geh9at28
from %APPDATA%\microsoft\windows\start menu\desktop.ini to %APPDATA%\microsoft\windows\start menu\desktop.ini.crypto_f48pxi37bj
from %APPDATA%\thunderbird\profiles.ini to %APPDATA%\thunderbird\profiles.ini.crypto_c06bwo3m77
from %APPDATA%\winamp\plugins\milkdrop2\milk2_img.ini to %APPDATA%\winamp\plugins\milkdrop2\milk2_img.ini.crypto_el2nk31gb2
from %APPDATA%\winamp\winamp.m3u8 to %APPDATA%\winamp\winamp.m3u8.crypto_el2nk31gb2
from %APPDATA%\winamp\winamp.ini to %APPDATA%\winamp\winamp.ini.crypto_k6lfszbygi
from %APPDATA%\winamp\demo.mp3 to %APPDATA%\winamp\demo.mp3.crypto_k6lfszbygi
from %APPDATA%\thunderbird\profiles\wjj9aet2.default\crashes\store.json.mozlz4 to %APPDATA%\thunderbird\profiles\wjj9aet2.default\crashes\store.json.mozlz4.crypto_7he0kz5xhm
from %APPDATA%\thunderbird\profiles\wjj9aet2.default\webappsstore.sqlite to %APPDATA%\thunderbird\profiles\wjj9aet2.default\webappsstore.sqlite.crypto_7he0kz5xhm
from %APPDATA%\thunderbird\profiles\wjj9aet2.default\times.json to %APPDATA%\thunderbird\profiles\wjj9aet2.default\times.json.crypto_7he0kz5xhm
from %APPDATA%\thunderbird\profiles\wjj9aet2.default\sessioncheckpoints.json to %APPDATA%\thunderbird\profiles\wjj9aet2.default\sessioncheckpoints.json.crypto_us7lc0zwiq
from %APPDATA%\thunderbird\profiles\wjj9aet2.default\session.json to %APPDATA%\thunderbird\profiles\wjj9aet2.default\session.json.crypto_us7lc0zwiq
from %APPDATA%\thunderbird\profiles\wjj9aet2.default\prefs.js to %APPDATA%\thunderbird\profiles\wjj9aet2.default\prefs.js.crypto_us7lc0zwiq
from %APPDATA%\opera software\opera stable\sync extension settings\knohfebhibeknbfioecpdmdkjkjdnjnl\000004.log to %APPDATA%\opera software\opera stable\sync extension settings\knohfebhibeknbfioecpdmdkjkjdnjnl\000004.log.crypto_3dmd96889w
from %APPDATA%\telegram desktop\tdata\usertag to %APPDATA%\telegram desktop\tdata\usertag.crypto_imo34kd3co
from %APPDATA%\thunderbird\profiles\wjj9aet2.default\parent.lock to %APPDATA%\thunderbird\profiles\wjj9aet2.default\parent.lock.crypto_0eqekw9dn7
from %APPDATA%\thunderbird\profiles\wjj9aet2.default\history.mab to %APPDATA%\thunderbird\profiles\wjj9aet2.default\history.mab.crypto_ta2sktdttr
from %APPDATA%\thunderbird\profiles\wjj9aet2.default\global-messages-db.sqlite to %APPDATA%\thunderbird\profiles\wjj9aet2.default\global-messages-db.sqlite.crypto_ta2sktdttr
from %APPDATA%\thunderbird\profiles\wjj9aet2.default\foldertree.json to %APPDATA%\thunderbird\profiles\wjj9aet2.default\foldertree.json.crypto_ta2sktdttr
from %APPDATA%\thunderbird\profiles\wjj9aet2.default\extensions.json to %APPDATA%\thunderbird\profiles\wjj9aet2.default\extensions.json.crypto_glvdct7suv
from %APPDATA%\thunderbird\profiles\wjj9aet2.default\extensions.ini to %APPDATA%\thunderbird\profiles\wjj9aet2.default\extensions.ini.crypto_glvdct7suv
from %APPDATA%\thunderbird\profiles\wjj9aet2.default\cookies.sqlite to %APPDATA%\thunderbird\profiles\wjj9aet2.default\cookies.sqlite.crypto_glvdct7suv
from %APPDATA%\thunderbird\profiles\wjj9aet2.default\compatibility.ini to %APPDATA%\thunderbird\profiles\wjj9aet2.default\compatibility.ini.crypto_glvdct7suv
from %APPDATA%\thunderbird\profiles\wjj9aet2.default\blist.sqlite to %APPDATA%\thunderbird\profiles\wjj9aet2.default\blist.sqlite.crypto_9i7rcqb8zf
from %APPDATA%\thunderbird\profiles\wjj9aet2.default\abook.mab to %APPDATA%\thunderbird\profiles\wjj9aet2.default\abook.mab.crypto_2ej5cnfo50
from %APPDATA%\thunderbird\profiles\wjj9aet2.default\permissions.sqlite to %APPDATA%\thunderbird\profiles\wjj9aet2.default\permissions.sqlite.crypto_0eqekw9dn7
from %APPDATA%\thunderbird\crash reports\installtime20150330093429 to %APPDATA%\thunderbird\crash reports\installtime20150330093429.crypto_c06bwo3m77
from %APPDATA%\opera software\opera stable\siteprefs.json to %APPDATA%\opera software\opera stable\siteprefs.json.crypto_gip6mimqmr
from %APPDATA%\opera software\opera stable\session.dbak to %APPDATA%\opera software\opera stable\session.dbak.crypto_9f1kmfq6sb
from %APPDATA%\opera software\opera stable\storage\ext\sync-login\def\gpucache\data_3 to %APPDATA%\opera software\opera stable\storage\ext\sync-login\def\gpucache\data_3.crypto_9y45h3iped
from %APPDATA%\opera software\opera stable\jump list icons\51ce.tmp to %APPDATA%\opera software\opera stable\jump list icons\51ce.tmp.crypto_r63v1rmg3u
from %APPDATA%\opera software\opera stable\jump list icons\50ed.tmp to %APPDATA%\opera software\opera stable\jump list icons\50ed.tmp.crypto_ehwgtrgf4y
from %APPDATA%\opera software\opera stable\extension state\manifest-000001 to %APPDATA%\opera software\opera stable\extension state\manifest-000001.crypto_k3f92oqw9f
from %APPDATA%\opera software\opera stable\extension state\log.old to %APPDATA%\opera software\opera stable\extension state\log.old.crypto_k3f92oqw9f
from %APPDATA%\opera software\opera stable\extension state\log to %APPDATA%\opera software\opera stable\extension state\log.crypto_k3f92oqw9f
from %APPDATA%\opera software\opera stable\extension state\lock to %APPDATA%\opera software\opera stable\extension state\lock.crypto_k3f92oqw9f
from %APPDATA%\opera software\opera stable\extension state\current to %APPDATA%\opera software\opera stable\extension state\current.crypto_7e8uuokvai
from %APPDATA%\opera software\opera stable\extension state\000007.log to %APPDATA%\opera software\opera stable\extension state\000007.log.crypto_7e8uuokvai
from %APPDATA%\opera software\opera stable\extension state\000006.ldb to %APPDATA%\opera software\opera stable\extension state\000006.ldb.crypto_7e8uuokvai
from %APPDATA%\opera software\opera stable\extension state\000003.ldb to %APPDATA%\opera software\opera stable\extension state\000003.ldb.crypto_7e8uuokvai
from %APPDATA%\opera software\opera stable\databases\databases.db-journal to %APPDATA%\opera software\opera stable\databases\databases.db-journal.crypto_vp1fmpeuam
from %APPDATA%\opera software\opera stable\web data-journal to %APPDATA%\opera software\opera stable\web data-journal.crypto_oldsmmiag6
from %APPDATA%\opera software\opera stable\web data to %APPDATA%\opera software\opera stable\web data.crypto_oldsmmiag6
from %APPDATA%\opera software\opera stable\visited links to %APPDATA%\opera software\opera stable\visited links.crypto_t7wluisrmn
from %APPDATA%\opera software\opera stable\update_prefs.json to %APPDATA%\opera software\opera stable\update_prefs.json.crypto_t7wluisrmn
from %APPDATA%\opera software\opera stable\transportsecurity to %APPDATA%\opera software\opera stable\transportsecurity.crypto_t7wluisrmn
from %APPDATA%\opera software\opera stable\thumbnails.db-journal to %APPDATA%\opera software\opera stable\thumbnails.db-journal.crypto_t7wluisrmn
from %APPDATA%\opera software\opera stable\ssdfp2544.3.670597881 to %APPDATA%\opera software\opera stable\ssdfp2544.3.670597881.crypto_t7wluisrmn
from %APPDATA%\opera software\opera stable\ssdfp2512.4.1739910927 to %APPDATA%\opera software\opera stable\ssdfp2512.4.1739910927.crypto_gip6mimqmr
from %APPDATA%\opera software\opera stable\ssdfp2216.0.2078311798 to %APPDATA%\opera software\opera stable\ssdfp2216.0.2078311798.crypto_gip6mimqmr
from %APPDATA%\opera software\opera stable\ssdfp1652.1.1724122967 to %APPDATA%\opera software\opera stable\ssdfp1652.1.1724122967.crypto_gip6mimqmr
from %APPDATA%\opera software\opera stable\jump list icons\51ff.tmp to %APPDATA%\opera software\opera stable\jump list icons\51ff.tmp.crypto_mlk2tvczyd
from %APPDATA%\opera software\opera stable\jump list icons\524f.tmp to %APPDATA%\opera software\opera stable\jump list icons\524f.tmp.crypto_mlk2tvczyd
from %APPDATA%\opera software\opera stable\storage\ext\sync-login\def\gpucache\data_2 to %APPDATA%\opera software\opera stable\storage\ext\sync-login\def\gpucache\data_2.crypto_9y45h3iped
from %APPDATA%\opera software\opera stable\local storage\https_www.yandex.ru_0.localstorage to %APPDATA%\opera software\opera stable\local storage\https_www.yandex.ru_0.localstorage.crypto_i2li9xkkqm
from %APPDATA%\opera software\opera stable\local storage\https_www.yandex.ru_0.localstorage-journal to %APPDATA%\opera software\opera stable\local storage\https_www.yandex.ru_0.localstorage-journal.crypto_i2li9xkkqm
from %APPDATA%\opera software\opera stable\storage\ext\sync-login\def\gpucache\data_1 to %APPDATA%\opera software\opera stable\storage\ext\sync-login\def\gpucache\data_1.crypto_w9yq93cofh
from %APPDATA%\opera software\opera stable\storage\ext\sync-login\def\gpucache\data_0 to %APPDATA%\opera software\opera stable\storage\ext\sync-login\def\gpucache\data_0.crypto_w9yq93cofh
from %APPDATA%\opera software\opera stable\storage\ext\sync-login\def\databases\databases.db-journal to %APPDATA%\opera software\opera stable\storage\ext\sync-login\def\databases\databases.db-journal.crypto_2vgjhzm5ky
from %APPDATA%\opera software\opera stable\storage\ext\sync-login\def\quotamanager-journal to %APPDATA%\opera software\opera stable\storage\ext\sync-login\def\quotamanager-journal.crypto_p69490g4l1
from %APPDATA%\opera software\opera stable\storage\ext\sync-login\def\quotamanager to %APPDATA%\opera software\opera stable\storage\ext\sync-login\def\quotamanager.crypto_p69490g4l1
from %APPDATA%\opera software\opera stable\storage\ext\sync-login\def\cookies-journal to %APPDATA%\opera software\opera stable\storage\ext\sync-login\def\cookies-journal.crypto_p69490g4l1
from %APPDATA%\opera software\opera stable\storage\ext\sync-login\def\cookies to %APPDATA%\opera software\opera stable\storage\ext\sync-login\def\cookies.crypto_ch3p11a3l5
from %APPDATA%\opera software\opera stable\local storage\opera_startpage_0.localstorage-journal to %APPDATA%\opera software\opera stable\local storage\opera_startpage_0.localstorage-journal.crypto_ch3p11a3l5
from %APPDATA%\opera software\opera stable\local storage\opera_startpage_0.localstorage to %APPDATA%\opera software\opera stable\local storage\opera_startpage_0.localstorage.crypto_ch3p11a3l5
from %APPDATA%\opera software\opera stable\sync extension settings\knohfebhibeknbfioecpdmdkjkjdnjnl\000003.ldb to %APPDATA%\opera software\opera stable\sync extension settings\knohfebhibeknbfioecpdmdkjkjdnjnl\000003.ldb.crypto_3dmd96889w
from %APPDATA%\opera software\opera stable\storage\ext\sync-login\def\gpucache\index to %APPDATA%\opera software\opera stable\storage\ext\sync-login\def\gpucache\index.crypto_3dmd96889w
from %APPDATA%\opera software\opera stable\jump list icons\514d.tmp to %APPDATA%\opera software\opera stable\jump list icons\514d.tmp.crypto_ehwgtrgf4y
from %APPDATA%\opera software\opera stable\local storage\chrome-extension_knohfebhibeknbfioecpdmdkjkjdnjnl_0.localstorage to %APPDATA%\opera software\opera stable\local storage\chrome-extension_knohfebhibeknbfioecpdmdkjkjdnjnl_0.localstorage.crypto_5df31xejrp
from %APPDATA%\opera software\opera stable\jump list iconsold\3796.tmp to %APPDATA%\opera software\opera stable\jump list iconsold\3796.tmp.crypto_bzxw9to0w6
from %APPDATA%\opera software\opera stable\jump list iconsold\3765.tmp to %APPDATA%\opera software\opera stable\jump list iconsold\3765.tmp.crypto_bzxw9to0w6
from %APPDATA%\opera software\opera stable\jump list iconsold\3724.tmp to %APPDATA%\opera software\opera stable\jump list iconsold\3724.tmp.crypto_bzxw9to0w6
from %APPDATA%\opera software\opera stable\jump list iconsold\3703.tmp to %APPDATA%\opera software\opera stable\jump list iconsold\3703.tmp.crypto_bzxw9to0w6
from %APPDATA%\opera software\opera stable\jump list iconsold\36c3.tmp to %APPDATA%\opera software\opera stable\jump list iconsold\36c3.tmp.crypto_yarh1ui0xa
from %APPDATA%\opera software\opera stable\jump list iconsold\36a1.tmp to %APPDATA%\opera software\opera stable\jump list iconsold\36a1.tmp.crypto_yarh1ui0xa
from %APPDATA%\opera software\opera stable\jump list iconsold\3651.tmp to %APPDATA%\opera software\opera stable\jump list iconsold\3651.tmp.crypto_yarh1ui0xa
from %APPDATA%\opera software\opera stable\jump list icons\529f.tmp to %APPDATA%\opera software\opera stable\jump list icons\529f.tmp.crypto_mlk2tvczyd
from %APPDATA%\opera software\opera stable\local storage\chrome-extension_knohfebhibeknbfioecpdmdkjkjdnjnl_0.localstorage-journal to %APPDATA%\opera software\opera stable\local storage\chrome-extension_knohfebhibeknbfioecpdmdkjkjdnjnl_0.localstorage-journal.crypto_5df31xejrp
from %APPDATA%\microsoft\windows\start menu\icq.lnk to %APPDATA%\microsoft\windows\start menu\icq.lnk.crypto_f48pxi37bj
from %APPDATA%\microsoft\windows\sendto\mail recipient.mapimail to %APPDATA%\microsoft\windows\sendto\mail recipient.mapimail.crypto_f48pxi37bj
from %APPDATA%\icqm\icq\smiles\statuses\set01\70_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\70_xp.ico.crypto_anqw657rhz
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_offline.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_offline.ico.crypto_uob5bqiq79
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_invisible_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_invisible_xp.ico.crypto_09tyjms7cq
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_invisible_big.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_invisible_big.ico.crypto_09tyjms7cq
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_invisible.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_invisible.ico.crypto_09tyjms7cq
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_connecting_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_connecting_xp.ico.crypto_3ssi3kkmji
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_connecting.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_connecting.ico.crypto_9dbacgu3oy
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_away_xp_big.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_away_xp_big.ico.crypto_wo4v4ho2p2
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_away_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_away_xp.ico.crypto_2amocdyjuj
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_away_big.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_away_big.ico.crypto_plg94esivn
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_away.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_away.ico.crypto_cw9uwelhwq
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_50.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_50.ico.crypto_iisn4avy17
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_49.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_49.ico.crypto_5tl8wbpx2b
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_45.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_45.ico.crypto_ypxmw8td8v
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_44.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_44.ico.crypto_rm90w5xteg
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_43.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_43.ico.crypto_ex2lo5rsej
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_42.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_42.ico.crypto_u48kg3p7l7
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_41.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_41.ico.crypto_u48kg3p7l7
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_40.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_40.ico.crypto_0qqcozzoqo
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_38.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_38.ico.crypto_0qqcozzoqo
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_37.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_37.ico.crypto_0qqcozzoqo
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_36.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_36.ico.crypto_n1kxgztors
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_offline_big.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_offline_big.ico.crypto_7dhkjpor65
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_offline_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_offline_xp.ico.crypto_7dhkjpor65
from %APPDATA%\mail.ru\agent\mra\sounds\call_in.wav to %APPDATA%\mail.ru\agent\mra\sounds\call_in.wav.crypto_cgcgr2e0hs
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\v_institute_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\v_institute_xp.ico.crypto_lkusjwgvu1
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\v_shkole.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\v_shkole.ico.crypto_y907rvmwtx
from %APPDATA%\mail.ru\agent\mra\sounds\busy.wav to %APPDATA%\mail.ru\agent\mra\sounds\busy.wav.crypto_cgcgr2e0hs
from %APPDATA%\mail.ru\agent\mra\sounds\auth.wav to %APPDATA%\mail.ru\agent\mra\sounds\auth.wav.crypto_i1v8zyohm9
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\vk\vkontakte_online.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\vk\vkontakte_online.ico.crypto_i1v8zyohm9
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\vk\vkontakte_offline.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\vk\vkontakte_offline.ico.crypto_i1v8zyohm9
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\vk\vkontakte_gray.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\vk\vkontakte_gray.ico.crypto_5cotrzignc
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\vk\vkontakte_busy.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\vk\vkontakte_busy.ico.crypto_by7mzvsxst
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\vk\vkontakte_away.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\vk\vkontakte_away.ico.crypto_by7mzvsxst
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\wrong_data.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\wrong_data.ico.crypto_by7mzvsxst
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\v_shkole_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\v_shkole_xp.ico.crypto_y907rvmwtx
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_mobile.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_mobile.ico.crypto_uob5bqiq79
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_35.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_35.ico.crypto_n1kxgztors
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_34.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_34.ico.crypto_tm2qov35w9
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\vi_oshiblis_nomerom_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\vi_oshiblis_nomerom_xp.ico.crypto_lkusjwgvu1
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\vi_oshiblis_nomerom.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\vi_oshiblis_nomerom.ico.crypto_r5clrsqczh
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\telefon_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\telefon_xp.ico.crypto_r5clrsqczh
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\telefon.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\telefon.ico.crypto_eg56jtkb0l
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_online_xp_big.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_online_xp_big.ico.crypto_eg56jtkb0l
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_online_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_online_xp.ico.crypto_k2ozrpus52
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_online_big.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_online_big.ico.crypto_k2ozrpus52
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_online.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_online.ico.crypto_k2ozrpus52
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_offline_xp_big.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_offline_xp_big.ico.crypto_7dhkjpor65
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\v_institute.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\v_institute.ico.crypto_lkusjwgvu1
from %APPDATA%\mail.ru\agent\mra\sounds\error.wav to %APPDATA%\mail.ru\agent\mra\sounds\error.wav.crypto_p5jvz1k1ho
from %APPDATA%\mail.ru\agent\mra\sounds\call_waiting.wav to %APPDATA%\mail.ru\agent\mra\sounds\call_waiting.wav.crypto_cgcgr2e0hs
from %APPDATA%\mail.ru\agent\mra\sounds\conference.wav to %APPDATA%\mail.ru\agent\mra\sounds\conference.wav.crypto_p5jvz1k1ho
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\gotovlu.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\gotovlu.ico.crypto_kyis1e9qyy
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\em.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\em.ico.crypto_79bdte3pz2
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\doma.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\doma.ico.crypto_79bdte3pz2
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\dnd_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\dnd_xp.ico.crypto_uk5ylfxoz5
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\dnd.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\dnd.ico.crypto_uk5ylfxoz5
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\cherep.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\cherep.ico.crypto_06nrtb765m
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\chat_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\chat_xp.ico.crypto_06nrtb765m
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\chat.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\chat.ico.crypto_06nrtb765m
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\boleu.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\boleu.ico.crypto_nhhclc155q
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\belka.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\belka.ico.crypto_t3z5t8bma7
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\99_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\99_xp.ico.crypto_t3z5t8bma7
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\99.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\99.ico.crypto_getql85lba
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\98_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\98_xp.ico.crypto_getql85lba
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\98.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\98.ico.crypto_getql85lba
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\97_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\97_xp.ico.crypto_3pmbd9ykce
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\97.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\97.ico.crypto_3pmbd9ykce
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\96_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\96_xp.ico.crypto_9a44l581hv
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\96.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\96.ico.crypto_9a44l581hv
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\95_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\95_xp.ico.crypto_9a44l581hv
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\95.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\95.ico.crypto_9a44l581hv
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\94_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\94_xp.ico.crypto_wlypd620iy
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\gulau.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\gulau.ico.crypto_kyis1e9qyy
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\ia_inoplanet_razum.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\ia_inoplanet_razum.ico.crypto_edzztiz9th
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_30.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_30.ico.crypto_gxwbgwx4xc
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\pivo.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\pivo.ico.crypto_cc691rtyao
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\pivo_bit.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\pivo_bit.ico.crypto_p1do9qzz9l
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_29.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_29.ico.crypto_38pw8xr3yg
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\star.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\star.ico.crypto_38pw8xr3yg
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\splu_bit.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\splu_bit.ico.crypto_9u8pht1k3x
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\splu.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\splu.ico.crypto_9u8pht1k3x
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\seekfriends_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\seekfriends_xp.ico.crypto_9u8pht1k3x
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\seekfriends.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\seekfriends.ico.crypto_9u8pht1k3x
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\rocket.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\rocket.ico.crypto_2qj3hp509h
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\rabotau.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\rabotau.ico.crypto_2qj3hp509h
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\pu_kofe.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\pu_kofe.ico.crypto_p1do9qzz9l
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_32.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_32.ico.crypto_gxwbgwx4xc
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_33.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_33.ico.crypto_tm2qov35w9
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\gde_ia.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\gde_ia.ico.crypto_79bdte3pz2
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\na_rabote.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\na_rabote.ico.crypto_59in1nxeg9
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\music.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\music.ico.crypto_bu1f9k7vlq
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\kut.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\kut.ico.crypto_bu1f9k7vlq
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\kuru.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\kuru.ico.crypto_y5u01k1umt
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\igrau.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\igrau.ico.crypto_y5u01k1umt
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\ia_utko.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\ia_utko.ico.crypto_y5u01k1umt
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\ia_soshl_asuma.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\ia_soshl_asuma.ico.crypto_lgnltlvtnx
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\ia_poteralsa.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\ia_poteralsa.ico.crypto_lgnltlvtnx
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\ia_krivetko.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\ia_krivetko.ico.crypto_r26e1h5ase
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\na_vstreche.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\na_vstreche.ico.crypto_59in1nxeg9
from %APPDATA%\mail.ru\agent\mra\sounds\letter.wav to %APPDATA%\mail.ru\agent\mra\sounds\letter.wav.crypto_p5jvz1k1ho
from %APPDATA%\microsoft\windows\cookies\user@mozilla[2].txt to %APPDATA%\microsoft\windows\cookies\user@mozilla[2].txt.crypto_j5u6h0fuc5
from %APPDATA%\microsoft\document building blocks\1033\14\built-in building blocks.dotx to %APPDATA%\microsoft\document building blocks\1033\14\built-in building blocks.dotx.crypto_tq8xf7o63c
from %APPDATA%\microsoft\windows\cookies\user@246059135.log.optimizely[1].txt to %APPDATA%\microsoft\windows\cookies\user@246059135.log.optimizely[1].txt.crypto_notp2y78kx
from %APPDATA%\microsoft\windows\cookies\user@demdex[2].txt to %APPDATA%\microsoft\windows\cookies\user@demdex[2].txt.crypto_j5u6h0fuc5
from %APPDATA%\microsoft\windows\cookies\user@c.msn[2].txt to %APPDATA%\microsoft\windows\cookies\user@c.msn[2].txt.crypto_7gnr919td9
from %APPDATA%\microsoft\windows\cookies\user@c.msn[1].txt to %APPDATA%\microsoft\windows\cookies\user@c.msn[1].txt.crypto_7gnr919td9
from %APPDATA%\microsoft\windows\cookies\user@c.bing[2].txt to %APPDATA%\microsoft\windows\cookies\user@c.bing[2].txt.crypto_7gnr919td9
from %APPDATA%\microsoft\windows\cookies\user@c.bing[1].txt to %APPDATA%\microsoft\windows\cookies\user@c.bing[1].txt.crypto_7gnr919td9
from %APPDATA%\microsoft\windows\cookies\user@bing[2].txt to %APPDATA%\microsoft\windows\cookies\user@bing[2].txt.crypto_urhc113sed
from %APPDATA%\microsoft\windows\cookies\user@bing[1].txt to %APPDATA%\microsoft\windows\cookies\user@bing[1].txt.crypto_urhc113sed
from %APPDATA%\microsoft\windows\cookies\user@adobe[3].txt to %APPDATA%\microsoft\windows\cookies\user@adobe[3].txt.crypto_zdz4axd9ju
from %APPDATA%\microsoft\windows\cookies\user@adobe[1].txt to %APPDATA%\microsoft\windows\cookies\user@adobe[1].txt.crypto_zdz4axd9ju
from %APPDATA%\microsoft\windows\cookies\user@adnxs[1].txt to %APPDATA%\microsoft\windows\cookies\user@adnxs[1].txt.crypto_notp2y78kx
from %APPDATA%\microsoft\uproof\excludedictionaryen0809.lex to %APPDATA%\microsoft\uproof\excludedictionaryen0809.lex.crypto_notp2y78kx
from %APPDATA%\microsoft\windows\cookies\user@onlinestores.metaservices.microsoft[1].txt to %APPDATA%\microsoft\windows\cookies\user@onlinestores.metaservices.microsoft[1].txt.crypto_q9ish3be6l
from %APPDATA%\microsoft\uproof\excludedictionaryen0409.lex to %APPDATA%\microsoft\uproof\excludedictionaryen0409.lex.crypto_s9biauhppe
from %APPDATA%\microsoft\uproof\custom.dic to %APPDATA%\microsoft\uproof\custom.dic.crypto_s9biauhppe
from %APPDATA%\microsoft\templates\normal.dotm to %APPDATA%\microsoft\templates\normal.dotm.crypto_gk532vboqi
from %APPDATA%\microsoft\protect\s-1-5-21-1960123792-2022915161-3775307078-1001\preferred to %APPDATA%\microsoft\protect\s-1-5-21-1960123792-2022915161-3775307078-1001\preferred.crypto_3vyouv5nql
from %APPDATA%\microsoft\protect\s-1-5-21-1960123792-2022915161-3775307078-1001\f8401b27-0c7a-4d0f-80a5-9679c6328419 to %APPDATA%\microsoft\protect\s-1-5-21-1960123792-2022915161-3775307078-1001\f8401b27-0c7a-4d0f-80a5-9679c6328419.crypto_3vyouv5nql
from %APPDATA%\microsoft\protect\s-1-5-21-1960123792-2022915161-3775307078-1001\e1a8fd7f-48e0-4a09-b85c-950b6e7f7e10 to %APPDATA%\microsoft\protect\s-1-5-21-1960123792-2022915161-3775307078-1001\e1a8fd7f-48e0-4a09-b85c-950b6e7f7e10.crypto_3vyouv5nql
from %APPDATA%\microsoft\protect\s-1-5-21-1960123792-2022915161-3775307078-1001\d524265f-dddf-4bb6-9b50-623f924971ba to %APPDATA%\microsoft\protect\s-1-5-21-1960123792-2022915161-3775307078-1001\d524265f-dddf-4bb6-9b50-623f924971ba.crypto_9hhh2sf5v2
from %APPDATA%\microsoft\protect\s-1-5-21-1960123792-2022915161-3775307078-1001\bd5b067d-34b5-40ef-9a93-eff9fd1771a3 to %APPDATA%\microsoft\protect\s-1-5-21-1960123792-2022915161-3775307078-1001\bd5b067d-34b5-40ef-9a93-eff9fd1771a3.crypto_9hhh2sf5v2
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_invisible_xp_big.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\status_invisible_xp_big.ico.crypto_uob5bqiq79
from %APPDATA%\microsoft\windows\cookies\user@scorecardresearch[2].txt to %APPDATA%\microsoft\windows\cookies\user@scorecardresearch[2].txt.crypto_q9ish3be6l
from %APPDATA%\microsoft\windows\sendto\documents.mydocs to %APPDATA%\microsoft\windows\sendto\documents.mydocs.crypto_3f1apjx6cn
from %APPDATA%\microsoft\protect\s-1-5-21-1960123792-2022915161-3775307078-1001\ae597e89-6b58-4713-b543-846c970a2b49 to %APPDATA%\microsoft\protect\s-1-5-21-1960123792-2022915161-3775307078-1001\ae597e89-6b58-4713-b543-846c970a2b49.crypto_9hhh2sf5v2
from %APPDATA%\microsoft\windows\libraries\music.library-ms to %APPDATA%\microsoft\windows\libraries\music.library-ms.crypto_5gu0ha3iug
from %APPDATA%\microsoft\windows\sendto\desktop.ini to %APPDATA%\microsoft\windows\sendto\desktop.ini.crypto_3f1apjx6cn
from %APPDATA%\microsoft\windows\sendto\desktop (create shortcut).desklink to %APPDATA%\microsoft\windows\sendto\desktop (create shortcut).desklink.crypto_3f1apjx6cn
from %APPDATA%\microsoft\windows\sendto\compressed (zipped) folder.zfsendtotarget to %APPDATA%\microsoft\windows\sendto\compressed (zipped) folder.zfsendtotarget.crypto_3f1apjx6cn
from %APPDATA%\microsoft\windows\recent\automaticdestinations\7e4dca80246863e3.automaticdestinations-ms to %APPDATA%\microsoft\windows\recent\automaticdestinations\7e4dca80246863e3.automaticdestinations-ms.crypto_o8p1pd53os
from %APPDATA%\microsoft\windows\recent\automaticdestinations\74d7f43c1561fc1e.automaticdestinations-ms to %APPDATA%\microsoft\windows\recent\automaticdestinations\74d7f43c1561fc1e.automaticdestinations-ms.crypto_o8p1pd53os
from %APPDATA%\microsoft\windows\recent\automaticdestinations\1b4dd67f29cb1962.automaticdestinations-ms to %APPDATA%\microsoft\windows\recent\automaticdestinations\1b4dd67f29cb1962.automaticdestinations-ms.crypto_cjimhdz2ow
from %APPDATA%\microsoft\windows\recent\desktop.ini to %APPDATA%\microsoft\windows\recent\desktop.ini.crypto_cjimhdz2ow
from %APPDATA%\microsoft\windows\recent\activator.lnk to %APPDATA%\microsoft\windows\recent\activator.lnk.crypto_cjimhdz2ow
from %APPDATA%\microsoft\protect\s-1-5-21-1960123792-2022915161-3775307078-1001\b9ed44f4-c00d-45f3-9d18-c556a9a58c43 to %APPDATA%\microsoft\protect\s-1-5-21-1960123792-2022915161-3775307078-1001\b9ed44f4-c00d-45f3-9d18-c556a9a58c43.crypto_9hhh2sf5v2
from %APPDATA%\microsoft\windows\cookies\user@msn[1].txt to %APPDATA%\microsoft\windows\cookies\user@msn[1].txt.crypto_ekcd945d7p
from %APPDATA%\microsoft\windows\libraries\videos.library-ms to %APPDATA%\microsoft\windows\libraries\videos.library-ms.crypto_h51fp99juc
from %APPDATA%\microsoft\windows\sendto\fax recipient.lnk to %APPDATA%\microsoft\windows\sendto\fax recipient.lnk.crypto_3f1apjx6cn
from %APPDATA%\microsoft\windows\libraries\desktop.ini to %APPDATA%\microsoft\windows\libraries\desktop.ini.crypto_5gu0ha3iug
from %APPDATA%\microsoft\windows\cookies\user@yandex[2].txt to %APPDATA%\microsoft\windows\cookies\user@yandex[2].txt.crypto_a1dtp6dz0x
from %APPDATA%\microsoft\windows\cookies\user@yandex[1].txt to %APPDATA%\microsoft\windows\cookies\user@yandex[1].txt.crypto_a1dtp6dz0x
from %APPDATA%\microsoft\windows\cookies\user@www.msn[3].txt to %APPDATA%\microsoft\windows\cookies\user@www.msn[3].txt.crypto_xc6eh77y01
from %APPDATA%\microsoft\windows\cookies\user@www.msn[2].txt to %APPDATA%\microsoft\windows\cookies\user@www.msn[2].txt.crypto_xc6eh77y01
from %APPDATA%\microsoft\windows\cookies\user@www.bing[1].txt to %APPDATA%\microsoft\windows\cookies\user@www.bing[1].txt.crypto_xc6eh77y01
from %APPDATA%\microsoft\windows\cookies\user@sportiv[2].txt to %APPDATA%\microsoft\windows\cookies\user@sportiv[2].txt.crypto_ln0z971x14
from %APPDATA%\microsoft\windows\cookies\user@scorecardresearch[3].txt to %APPDATA%\microsoft\windows\cookies\user@scorecardresearch[3].txt.crypto_ln0z971x14
from %APPDATA%\microsoft\windows\libraries\pictures.library-ms to %APPDATA%\microsoft\windows\libraries\pictures.library-ms.crypto_h51fp99juc
from %APPDATA%\microsoft\windows\libraries\documents.library-ms to %APPDATA%\microsoft\windows\libraries\documents.library-ms.crypto_5gu0ha3iug
from %APPDATA%\microsoft\windows\cookies\user@msn[2].txt to %APPDATA%\microsoft\windows\cookies\user@msn[2].txt.crypto_ekcd945d7p
from %APPDATA%\microsoft\protect\s-1-5-21-1960123792-2022915161-3775307078-1001\9a5de8c5-f1f1-4a14-bd2a-9a24fc199001 to %APPDATA%\microsoft\protect\s-1-5-21-1960123792-2022915161-3775307078-1001\9a5de8c5-f1f1-4a14-bd2a-9a24fc199001.crypto_wsa2us94w6
from %APPDATA%\microsoft\protect\s-1-5-21-1960123792-2022915161-3775307078-1001\857f1812-3b8b-41fd-99c5-09d06e6d1983 to %APPDATA%\microsoft\protect\s-1-5-21-1960123792-2022915161-3775307078-1001\857f1812-3b8b-41fd-99c5-09d06e6d1983.crypto_wsa2us94w6
from %APPDATA%\microsoft\internet explorer\quick launch\user pinned\taskbar\desktop.ini to %APPDATA%\microsoft\internet explorer\quick launch\user pinned\taskbar\desktop.ini.crypto_rpf6mgivlj
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\93_xp.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\93_xp.ico.crypto_27ghm2chnf
from %APPDATA%\microsoft\internet explorer\quick launch\winamp.lnk to %APPDATA%\microsoft\internet explorer\quick launch\winamp.lnk.crypto_e08regculn
from %APPDATA%\microsoft\internet explorer\quick launch\shows desktop.lnk to %APPDATA%\microsoft\internet explorer\quick launch\shows desktop.lnk.crypto_kmrkmcmbr4
from %APPDATA%\microsoft\internet explorer\quick launch\qip 2012.lnk to %APPDATA%\microsoft\internet explorer\quick launch\qip 2012.lnk.crypto_7wk5edgar7
from %APPDATA%\microsoft\internet explorer\quick launch\mozilla thunderbird.lnk to %APPDATA%\microsoft\internet explorer\quick launch\mozilla thunderbird.lnk.crypto_7wk5edgar7
from %APPDATA%\microsoft\internet explorer\quick launch\mail.ru agent.lnk to %APPDATA%\microsoft\internet explorer\quick launch\mail.ru agent.lnk.crypto_u7eq6ea9sb
from %APPDATA%\microsoft\internet explorer\quick launch\launch internet explorer browser.lnk to %APPDATA%\microsoft\internet explorer\quick launch\launch internet explorer browser.lnk.crypto_u7eq6ea9sb
from %APPDATA%\microsoft\internet explorer\quick launch\icq.lnk to %APPDATA%\microsoft\internet explorer\quick launch\icq.lnk.crypto_n4q46aepyv
from %APPDATA%\microsoft\internet explorer\quick launch\google chrome.lnk to %APPDATA%\microsoft\internet explorer\quick launch\google chrome.lnk.crypto_n4q46aepyv
from %APPDATA%\microsoft\internet explorer\quick launch\user pinned\taskbar\icq.lnk to %APPDATA%\microsoft\internet explorer\quick launch\user pinned\taskbar\icq.lnk.crypto_ys3tmjfffz
from %APPDATA%\microsoft\internet explorer\quick launch\user pinned\startmenu\mail.ru agent.lnk to %APPDATA%\microsoft\internet explorer\quick launch\user pinned\startmenu\mail.ru agent.lnk.crypto_rpf6mgivlj
from %APPDATA%\microsoft\crypto\rsa\s-1-5-21-1960123792-2022915161-3775307078-1001\f58155b4b1d5a524ca0261c3ee99fb50_36d1130a-ac2e-44f7-9dc1-e424fbcbe0ee to %APPDATA%\microsoft\crypto\rsa\s-1-5-21-1960123792-2022915161-3775307078-1001\f58155b4b1d5a524ca0261c3ee99fb50_36d1130a-ac2e-44f7-9dc1-e424fbcbe0ee.crypto_tq8xf7o63c
from %APPDATA%\microsoft\crypto\rsa\s-1-5-21-1960123792-2022915161-3775307078-1001\83aa4cc77f591dfc2374580bbd95f6ba_36d1130a-ac2e-44f7-9dc1-e424fbcbe0ee to %APPDATA%\microsoft\crypto\rsa\s-1-5-21-1960123792-2022915161-3775307078-1001\83aa4cc77f591dfc2374580bbd95f6ba_36d1130a-ac2e-44f7-9dc1-e424fbcbe0ee.crypto_tq8xf7o63c
from %APPDATA%\mail.ru\agent\mra\video\video.swf to %APPDATA%\mail.ru\agent\mra\video\video.swf.crypto_g12i77i54g
from %APPDATA%\mail.ru\agent\mra\sounds\voiceend.wav to %APPDATA%\mail.ru\agent\mra\sounds\voiceend.wav.crypto_w87hz5glb4
from %APPDATA%\mail.ru\agent\mra\sounds\test_sound.wav to %APPDATA%\mail.ru\agent\mra\sounds\test_sound.wav.crypto_w87hz5glb4
from %APPDATA%\mail.ru\agent\mra\sounds\start.wav to %APPDATA%\mail.ru\agent\mra\sounds\start.wav.crypto_w87hz5glb4
from %APPDATA%\mail.ru\agent\mra\sounds\ring.wav to %APPDATA%\mail.ru\agent\mra\sounds\ring.wav.crypto_2uq971q2gl
from %APPDATA%\mail.ru\agent\mra\sounds\otprav.wav to %APPDATA%\mail.ru\agent\mra\sounds\otprav.wav.crypto_2uq971q2gl
from %APPDATA%\mail.ru\agent\mra\sounds\no_answer.wav to %APPDATA%\mail.ru\agent\mra\sounds\no_answer.wav.crypto_2uq971q2gl
from %APPDATA%\mail.ru\agent\mra\sounds\message.wav to %APPDATA%\mail.ru\agent\mra\sounds\message.wav.crypto_p5jvz1k1ho
from %APPDATA%\microsoft\internet explorer\quick launch\desktop.ini to %APPDATA%\microsoft\internet explorer\quick launch\desktop.ini.crypto_n4q46aepyv
from %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\94.ico to %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\94.ico.crypto_wlypd620iy
from %APPDATA%\microsoft\protect\s-1-5-21-1960123792-2022915161-3775307078-1001\5fea2324-401c-4a67-adf5-81a4571f8b7d to %APPDATA%\microsoft\protect\s-1-5-21-1960123792-2022915161-3775307078-1001\5fea2324-401c-4a67-adf5-81a4571f8b7d.crypto_wsa2us94w6
from %APPDATA%\microsoft\internet explorer\quick launch\user pinned\taskbar\internet explorer.lnk to %APPDATA%\microsoft\internet explorer\quick launch\user pinned\taskbar\internet explorer.lnk.crypto_ys3tmjfffz
from %APPDATA%\microsoft\internet explorer\quick launch\user pinned\startmenu\icq.lnk to %APPDATA%\microsoft\internet explorer\quick launch\user pinned\startmenu\icq.lnk.crypto_rpf6mgivlj
from %APPDATA%\microsoft\office\recent\protect.lnk to %APPDATA%\microsoft\office\recent\protect.lnk.crypto_pomgupdk2q
from %APPDATA%\microsoft\protect\s-1-5-21-1960123792-2022915161-3775307078-1001\24a81978-4594-42c5-80e9-bcd9abebab41 to %APPDATA%\microsoft\protect\s-1-5-21-1960123792-2022915161-3775307078-1001\24a81978-4594-42c5-80e9-bcd9abebab41.crypto_wsa2us94w6
from %APPDATA%\microsoft\protect\s-1-5-21-1960123792-2022915161-3775307078-1001\2365fd05-48cb-42f9-a388-5fd82ffd2512 to %APPDATA%\microsoft\protect\s-1-5-21-1960123792-2022915161-3775307078-1001\2365fd05-48cb-42f9-a388-5fd82ffd2512.crypto_wsa2us94w6
from %APPDATA%\microsoft\protect\credhist to %APPDATA%\microsoft\protect\credhist.crypto_wsa2us94w6
from %APPDATA%\microsoft\office\recent\_copy_license_ja.lnk to %APPDATA%\microsoft\office\recent\_copy_license_ja.lnk.crypto_1dtv2ojl1n
from %APPDATA%\microsoft\office\recent\xml_excel_wiki.lnk to %APPDATA%\microsoft\office\recent\xml_excel_wiki.lnk.crypto_1dtv2ojl1n
from %APPDATA%\microsoft\office\recent\xml_excel.lnk to %APPDATA%\microsoft\office\recent\xml_excel.lnk.crypto_1dtv2ojl1n
from %APPDATA%\microsoft\office\recent\vm introspection.lnk to %APPDATA%\microsoft\office\recent\vm introspection.lnk.crypto_1dtv2ojl1n
from %APPDATA%\microsoft\office\recent\virtual-machiene-introspection.lnk to %APPDATA%\microsoft\office\recent\virtual-machiene-introspection.lnk.crypto_1dtv2ojl1n
from %APPDATA%\microsoft\office\recent\license_ja.lnk to %APPDATA%\microsoft\office\recent\license_ja.lnk.crypto_pomgupdk2q
from %APPDATA%\microsoft\office\recent\templates.lnk to %APPDATA%\microsoft\office\recent\templates.lnk.crypto_pomgupdk2q
from %APPDATA%\microsoft\office\recent\license_en.lnk to %APPDATA%\microsoft\office\recent\license_en.lnk.crypto_pomgupdk2q
from %APPDATA%\microsoft\internet explorer\quick launch\window switcher.lnk to %APPDATA%\microsoft\internet explorer\quick launch\window switcher.lnk.crypto_e08regculn
from %APPDATA%\microsoft\office\recent\clarify.lnk to %APPDATA%\microsoft\office\recent\clarify.lnk.crypto_czf1mq7j3u
from %APPDATA%\microsoft\office\mso1033.acl to %APPDATA%\microsoft\office\mso1033.acl.crypto_czf1mq7j3u
from %APPDATA%\microsoft\network\connections\pbk\_hiddenpbk\rasphone.pbk to %APPDATA%\microsoft\network\connections\pbk\_hiddenpbk\rasphone.pbk.crypto_czf1mq7j3u
from %APPDATA%\microsoft\mmc\taskschd to %APPDATA%\microsoft\mmc\taskschd.crypto_ilyuumh08b
from %APPDATA%\microsoft\internet explorer\quick launch\user pinned\taskbar\windows media player.lnk to %APPDATA%\microsoft\internet explorer\quick launch\user pinned\taskbar\windows media player.lnk.crypto_5wrfmmbz9e
from %APPDATA%\microsoft\internet explorer\quick launch\user pinned\taskbar\windows explorer.lnk to %APPDATA%\microsoft\internet explorer\quick launch\user pinned\taskbar\windows explorer.lnk.crypto_bha8uilgev
from %APPDATA%\microsoft\internet explorer\quick launch\user pinned\taskbar\opera.lnk to %APPDATA%\microsoft\internet explorer\quick launch\user pinned\taskbar\opera.lnk.crypto_bha8uilgev
from %APPDATA%\microsoft\internet explorer\quick launch\user pinned\taskbar\mail.ru agent.lnk to %APPDATA%\microsoft\internet explorer\quick launch\user pinned\taskbar\mail.ru agent.lnk.crypto_bha8uilgev
from %APPDATA%\microsoft\internet explorer\quick launch\user pinned\taskbar\google chrome.lnk to %APPDATA%\microsoft\internet explorer\quick launch\user pinned\taskbar\google chrome.lnk.crypto_l3xeek8ef2
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\gift.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\gift.gif.crypto_jmjoajpe4x
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\gg2.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\gg2.gif.crypto_jmjoajpe4x
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\gg.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\gg.gif.crypto_jmjoajpe4x
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\01.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\01.gif.crypto_bd7cz7glvo
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\wink.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\wink.gif.crypto_hzq473q205
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\wacko1.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\wacko1.gif.crypto_hzq473q205
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\unknown.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\unknown.gif.crypto_4ajpz4k119
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\sorry.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\sorry.gif.crypto_4ajpz4k119
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\smile.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\smile.gif.crypto_4ajpz4k119
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\shout.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\shout.gif.crypto_4ajpz4k119
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\shok.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\shok.gif.crypto_rldbr4e02c
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\scratch_one-s_head.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\scratch_one-s_head.gif.crypto_rldbr4e02c
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\sad.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\sad.gif.crypto_rldbr4e02c
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\rofl.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\rofl.gif.crypto_rldbr4e02c
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\pardon.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\pardon.gif.crypto_x6v300oh7t
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\nea.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\nea.gif.crypto_x6v300oh7t
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\music.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\music.gif.crypto_khpor1hg8x
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\mocking.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\mocking.gif.crypto_khpor1hg8x
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\man_in_love.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\man_in_love.gif.crypto_khpor1hg8x
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\mad.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\mad.gif.crypto_khpor1hg8x
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\lol.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\lol.gif.crypto_q37h0xsyde
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\kiss3.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\kiss3.gif.crypto_q37h0xsyde
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\kiss.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\kiss.gif.crypto_q37h0xsyde
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\i_am_so_happy.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\i_am_so_happy.gif.crypto_de12sylxeh
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\02.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\02.gif.crypto_bd7cz7glvo
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\03a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\03a.gif.crypto_bd7cz7glvo
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\27a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\27a.gif.crypto_29qz7deqjg
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\15a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\15a.gif.crypto_v62d79i6p0
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\16a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\16a.gif.crypto_v62d79i6p0
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\26a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\26a.gif.crypto_29qz7deqjg
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\25a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\25a.gif.crypto_29qz7deqjg
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\24a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\24a.gif.crypto_29qz7deqjg
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\23a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\23a.gif.crypto_8v9sf9o7ox
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\22a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\22a.gif.crypto_8v9sf9o7ox
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\21a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\21a.gif.crypto_8v9sf9o7ox
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\20a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\20a.gif.crypto_8v9sf9o7ox
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\19a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\19a.gif.crypto_8v9sf9o7ox
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\17a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\17a.gif.crypto_8v9sf9o7ox
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\yes.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\yes.gif.crypto_hzq473q205
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\ireful.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\ireful.gif.crypto_de12sylxeh
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\hi.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\hi.gif.crypto_de12sylxeh
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\13a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\13a.gif.crypto_v62d79i6p0
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\12a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\12a.gif.crypto_v62d79i6p0
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\11a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\11a.gif.crypto_ihwyzac5p4
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\10a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\10a.gif.crypto_ihwyzac5p4
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\09a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\09a.gif.crypto_ihwyzac5p4
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\08a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\08a.gif.crypto_ihwyzac5p4
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\07a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\07a.gif.crypto_o2er76mmul
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\06a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\06a.gif.crypto_o2er76mmul
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\04b.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\04b.gif.crypto_bd7cz7glvo
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\14a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\14a.gif.crypto_v62d79i6p0
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\29a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\29a.gif.crypto_fyxefckric
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\28a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\28a.gif.crypto_29qz7deqjg
from %APPDATA%\icqm\icq\smiles\smiles\cat\cat_meow.gif to %APPDATA%\icqm\icq\smiles\smiles\cat\cat_meow.gif.crypto_j8dmel1ofc
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\sad.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\sad.gif.crypto_ojb5cjt39j
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\listening to music.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\listening to music.gif.crypto_4qg44grig7
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\laughing.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\laughing.gif.crypto_r1apwhlhgb
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\laughing out loud (lol).gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\laughing out loud (lol).gif.crypto_r1apwhlhgb
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\kissing.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\kissing.gif.crypto_r1apwhlhgb
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\kissed.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\kissed.gif.crypto_r1apwhlhgb
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\kiss.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\kiss.gif.crypto_xnsi4dvyls
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\in love.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\in love.gif.crypto_xnsi4dvyls
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\gross.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\gross.gif.crypto_kym3wdpymv
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\falling asleep.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\falling asleep.gif.crypto_qj4w59zfrc
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\drinking.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\drinking.gif.crypto_duyhxatesg
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\devil.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\devil.gif.crypto_duyhxatesg
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\crying.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\crying.gif.crypto_05r2obndtj
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\cool.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\cool.gif.crypto_05r2obndtj
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\can't say-shut up.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\can't say-shut up.gif.crypto_6ravx7xuy0
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\bomb.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\bomb.gif.crypto_t23gp7rtz4
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\blushing.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\blushing.gif.crypto_znl8x31a4l
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\blinking.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\blinking.gif.crypto_znl8x31a4l
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\angel.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\angel.gif.crypto_znl8x31a4l
from %APPDATA%\icqm\icq\smiles\smiles\cat\cat_paper.gif to %APPDATA%\icqm\icq\smiles\smiles\cat\cat_paper.gif.crypto_dmvt6pq6av
from %APPDATA%\icqm\icq\smiles\smiles\cat\cat_mouse.gif to %APPDATA%\icqm\icq\smiles\smiles\cat\cat_mouse.gif.crypto_j8dmel1ofc
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\scream.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\scream.gif.crypto_ojb5cjt39j
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\smile.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\smile.gif.crypto_ojb5cjt39j
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\give_rose.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\give_rose.gif.crypto_0punkyfwel
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\bomb.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\bomb.gif.crypto_9tb0cshrru
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\bye2.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\bye2.gif.crypto_9tb0cshrru
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\give_heart.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\give_heart.gif.crypto_0punkyfwel
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\girl_angel.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\girl_angel.gif.crypto_0punkyfwel
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\gamer.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\gamer.gif.crypto_6adgsupdk2
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\drinks.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\drinks.gif.crypto_6adgsupdk2
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\diablo.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\diablo.gif.crypto_6adgsupdk2
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\dance.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\dance.gif.crypto_tl61kvjck5
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\cry.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\cry.gif.crypto_z7ousrttqm
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\crazy.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\crazy.gif.crypto_miifksnsqq
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\cool.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\cool.gif.crypto_9tb0cshrru
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\good.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\good.gif.crypto_0punkyfwel
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\hang1.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\hang1.gif.crypto_de12sylxeh
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\mad.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\mad.gif.crypto_bu4q4jn2an
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\blum1.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\blum1.gif.crypto_8b66klvo2v
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\biggrin.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\biggrin.gif.crypto_8b66klvo2v
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\bad.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\bad.gif.crypto_8b66klvo2v
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\air_kiss.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\air_kiss.gif.crypto_vmzrcmpn3z
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\tongue out.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\tongue out.gif.crypto_vmzrcmpn3z
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\thumbs up.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\thumbs up.gif.crypto_ixsc4mjm42
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\thank you.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\thank you.gif.crypto_ixsc4mjm42
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\surprised.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\surprised.gif.crypto_ixsc4mjm42
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\stop.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\stop.gif.crypto_ojb5cjt39j
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\blush.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\blush.gif.crypto_2qnecpl7xe
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\nothing to say.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\nothing to say.gif.crypto_bu4q4jn2an
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\31a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\31a.gif.crypto_fyxefckric
from %APPDATA%\icqm\icq\smiles\smiles\set03\bad.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\bad.gif.crypto_dy4onlefzj
from %APPDATA%\icqm\icq\smiles\smiles\set05\s002.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s002.gif.crypto_dh79i97yll
from %APPDATA%\icqm\icq\smiles\smiles\set05\s001.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s001.gif.crypto_0s0uaa1xmp
from %APPDATA%\icqm\icq\smiles\smiles\set04\s016.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s016.gif.crypto_0s0uaa1xmp
from %APPDATA%\icqm\icq\smiles\smiles\set04\s015.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s015.gif.crypto_0s0uaa1xmp
from %APPDATA%\icqm\icq\smiles\smiles\set04\s014.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s014.gif.crypto_6ejni6bfr6
from %APPDATA%\icqm\icq\smiles\smiles\set04\s013.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s013.gif.crypto_6ejni6bfr6
from %APPDATA%\icqm\icq\smiles\smiles\set04\s012.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s012.gif.crypto_6ejni6bfr6
from %APPDATA%\icqm\icq\smiles\smiles\set04\s011.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s011.gif.crypto_tpc8a64es9
from %APPDATA%\icqm\icq\smiles\smiles\set04\s010.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s010.gif.crypto_tpc8a64es9
from %APPDATA%\icqm\icq\smiles\smiles\set04\s009.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s009.gif.crypto_zav0i2fvxq
from %APPDATA%\icqm\icq\smiles\smiles\set04\s007.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s007.gif.crypto_mloma38uxu
from %APPDATA%\icqm\icq\smiles\smiles\set05\s006.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s006.gif.crypto_q6doq8dzkh
from %APPDATA%\icqm\icq\smiles\smiles\set04\s006.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s006.gif.crypto_mloma38uxu
from %APPDATA%\icqm\icq\smiles\smiles\set04\s005.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s005.gif.crypto_9wh7242tyx
from %APPDATA%\icqm\icq\smiles\smiles\set04\s004.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s004.gif.crypto_9wh7242tyx
from %APPDATA%\icqm\icq\smiles\smiles\set04\s003.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s003.gif.crypto_fi0za0ca3e
from %APPDATA%\icqm\icq\smiles\smiles\set04\s002.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s002.gif.crypto_fi0za0ca3e
from %APPDATA%\icqm\icq\smiles\smiles\set04\s001.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s001.gif.crypto_2ttk20694i
from %APPDATA%\icqm\icq\smiles\smiles\set03\yahoo.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\yahoo.gif.crypto_2ttk20694i
from %APPDATA%\icqm\icq\smiles\smiles\set03\wink.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\wink.gif.crypto_2ttk20694i
from %APPDATA%\icqm\icq\smiles\smiles\set05\s004.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s004.gif.crypto_dh79i97yll
from %APPDATA%\icqm\icq\smiles\smiles\set04\s008.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s008.gif.crypto_mloma38uxu
from %APPDATA%\icqm\icq\smiles\smiles\set06\s013.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s013.gif.crypto_v98kxl38w4
from %APPDATA%\icqm\icq\smiles\smiles\set05\s007.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s007.gif.crypto_q6doq8dzkh
from %APPDATA%\icqm\icq\smiles\smiles\set06\s010.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s010.gif.crypto_o6kxxh7o2o
from %APPDATA%\icqm\icq\smiles\smiles\set06\s009.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s009.gif.crypto_o6kxxh7o2o
from %APPDATA%\icqm\icq\smiles\smiles\set06\s008.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s008.gif.crypto_o6kxxh7o2o
from %APPDATA%\icqm\icq\smiles\smiles\set06\s006.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s006.gif.crypto_o6kxxh7o2o
from %APPDATA%\icqm\icq\smiles\smiles\set06\s004.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s004.gif.crypto_bheipi1n2s
from %APPDATA%\icqm\icq\smiles\smiles\set06\s003.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s003.gif.crypto_bheipi1n2s
from %APPDATA%\icqm\icq\smiles\smiles\set06\s002.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s002.gif.crypto_h2wbyeb489
from %APPDATA%\icqm\icq\smiles\smiles\set06\s001.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s001.gif.crypto_h2wbyeb489
from %APPDATA%\icqm\icq\smiles\smiles\set05\s020.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s020.gif.crypto_4dpwqf538c
from %APPDATA%\icqm\icq\smiles\smiles\set03\wacko2.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\wacko2.gif.crypto_8ecdawgq9z
from %APPDATA%\icqm\icq\smiles\smiles\set05\s019.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s019.gif.crypto_4dpwqf538c
from %APPDATA%\icqm\icq\smiles\smiles\set05\s005.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s005.gif.crypto_dh79i97yll
from %APPDATA%\icqm\icq\smiles\smiles\set05\s016.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s016.gif.crypto_rojhhfz29g
from %APPDATA%\icqm\icq\smiles\smiles\set05\s015.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s015.gif.crypto_rojhhfz29g
from %APPDATA%\icqm\icq\smiles\smiles\set05\s014.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s014.gif.crypto_xa1aqc9jex
from %APPDATA%\icqm\icq\smiles\smiles\set05\s013.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s013.gif.crypto_xa1aqc9jex
from %APPDATA%\icqm\icq\smiles\smiles\set05\s012.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s012.gif.crypto_xa1aqc9jex
from %APPDATA%\icqm\icq\smiles\smiles\set05\s011.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s011.gif.crypto_xa1aqc9jex
from %APPDATA%\icqm\icq\smiles\smiles\set05\s010.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s010.gif.crypto_klvvic3if1
from %APPDATA%\icqm\icq\smiles\smiles\set05\s009.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s009.gif.crypto_klvvic3if1
from %APPDATA%\icqm\icq\smiles\smiles\set05\s008.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s008.gif.crypto_q6doq8dzkh
from %APPDATA%\icqm\icq\smiles\smiles\set05\s018.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s018.gif.crypto_rojhhfz29g
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\30a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\30a.gif.crypto_fyxefckric
from %APPDATA%\icqm\icq\smiles\smiles\set06\s011.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s011.gif.crypto_ik25plx7w8
from %APPDATA%\icqm\icq\smiles\smiles\set05\s003.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s003.gif.crypto_dh79i97yll
from %APPDATA%\icqm\icq\smiles\smiles\set03\unknw.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\unknw.gif.crypto_8ecdawgq9z
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\53a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\53a.gif.crypto_09x9fm8f0n
from %APPDATA%\icqm\icq\smiles\smiles\set03\biggrin.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\biggrin.gif.crypto_dy4onlefzj
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\51a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\51a.gif.crypto_6ug1niiw54
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\50a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\50a.gif.crypto_6ug1niiw54
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\49a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\49a.gif.crypto_6ug1niiw54
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\48a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\48a.gif.crypto_t59mfjcv67
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\47a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\47a.gif.crypto_t59mfjcv67
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\46a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\46a.gif.crypto_t59mfjcv67
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\45a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\45a.gif.crypto_zrsfnfmcbo
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\44a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\44a.gif.crypto_zrsfnfmcbo
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\43a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\43a.gif.crypto_zrsfnfmcbo
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\42a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\42a.gif.crypto_zrsfnfmcbo
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\41b.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\41b.gif.crypto_m2l0ffgbcs
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\40a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\40a.gif.crypto_m2l0ffgbcs
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\39a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\39a.gif.crypto_m2l0ffgbcs
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\38a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\38a.gif.crypto_9del7gaadv
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\37.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\37.gif.crypto_9del7gaadv
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\36a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\36a.gif.crypto_9del7gaadv
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\34a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\34a.gif.crypto_9del7gaadv
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\33a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\33a.gif.crypto_9del7gaadv
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\32a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\32a.gif.crypto_fyxefckric
from %APPDATA%\icqm\icq\smiles\smiles\set03\angel.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\angel.gif.crypto_09x9fm8f0n
from %APPDATA%\icqm\icq\smiles\smiles\set03\blum.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\blum.gif.crypto_dy4onlefzj
from %APPDATA%\icqm\icq\smiles\smiles\set03\shok.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\shok.gif.crypto_i0zjuy4ob6
from %APPDATA%\icqm\icq\smiles\smiles\set03\scratch_one-s_head.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\scratch_one-s_head.gif.crypto_i0zjuy4ob6
from %APPDATA%\icqm\icq\smiles\smiles\cat\cat_lick.gif to %APPDATA%\icqm\icq\smiles\smiles\cat\cat_lick.gif.crypto_j8dmel1ofc
from %APPDATA%\icqm\icq\smiles\smiles\set03\give_rose.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\give_rose.gif.crypto_r4gwms6jne
from %APPDATA%\icqm\icq\smiles\smiles\set03\sad.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\sad.gif.crypto_i0zjuy4ob6
from %APPDATA%\icqm\icq\smiles\smiles\set03\rolleyes.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\rolleyes.gif.crypto_omhc2ue5gn
from %APPDATA%\icqm\icq\smiles\smiles\set03\rofl.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\rofl.gif.crypto_hitq3rilm7
from %APPDATA%\icqm\icq\smiles\smiles\set03\pardon.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\pardon.gif.crypto_hitq3rilm7
from %APPDATA%\icqm\icq\smiles\smiles\set03\nea.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\nea.gif.crypto_hitq3rilm7
from %APPDATA%\icqm\icq\smiles\smiles\set03\music.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\music.gif.crypto_hitq3rilm7
from %APPDATA%\icqm\icq\smiles\smiles\set03\mocking.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\mocking.gif.crypto_4tmburcknb
from %APPDATA%\icqm\icq\smiles\smiles\set03\man_in_love.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\man_in_love.gif.crypto_4tmburcknb
from %APPDATA%\icqm\icq\smiles\smiles\set03\smile.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\smile.gif.crypto_vp5y2xapa2
from %APPDATA%\icqm\icq\smiles\smiles\set03\shout.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\shout.gif.crypto_vp5y2xapa2
from %APPDATA%\icqm\icq\smiles\smiles\set03\kiss_mini.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\kiss_mini.gif.crypto_r4gwms6jne
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\52a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\52a.gif.crypto_6ug1niiw54
from %APPDATA%\icqm\icq\smiles\smiles\set03\facepalm.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\facepalm.gif.crypto_xqypvog0tv
from %APPDATA%\icqm\icq\smiles\smiles\set03\drinks.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\drinks.gif.crypto_xqypvog0tv
from %APPDATA%\icqm\icq\smiles\smiles\set03\dirol.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\dirol.gif.crypto_k1sanpaztz
from %APPDATA%\icqm\icq\smiles\smiles\set03\diablo.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\diablo.gif.crypto_k1sanpaztz
from %APPDATA%\icqm\icq\smiles\smiles\set03\dance.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\dance.gif.crypto_k1sanpaztz
from %APPDATA%\icqm\icq\smiles\smiles\set03\crazy.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\crazy.gif.crypto_k1sanpaztz
from %APPDATA%\icqm\icq\smiles\smiles\set03\cray.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\cray.gif.crypto_qna2vlkgzg
from %APPDATA%\icqm\icq\smiles\smiles\set03\blush.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\blush.gif.crypto_qna2vlkgzg
from %APPDATA%\icqm\icq\smiles\smiles\set03\good.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\good.gif.crypto_r4gwms6jne
from %APPDATA%\icqm\icq\smiles\smiles\set03\fool.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\fool.gif.crypto_r4gwms6jne
from %APPDATA%\icqm\icq\smiles\smiles\cat\cat_hand.gif to %APPDATA%\icqm\icq\smiles\smiles\cat\cat_hand.gif.crypto_6j776mungg
from %APPDATA%\icqm\icq\smiles\smiles\cat\cat_attack.gif to %APPDATA%\icqm\icq\smiles\smiles\cat\cat_attack.gif.crypto_6j776mungg
from %APPDATA%\icq-profile\base\opt.dbs to %APPDATA%\icq-profile\base\opt.dbs.crypto_pxkrpoepyk
from %APPDATA%\ghisler\wincmd.ini to %APPDATA%\ghisler\wincmd.ini.crypto_c8dchp8ozo
from %APPDATA%\adobe\logtransport2\logtransport2.cfg to %APPDATA%\adobe\logtransport2\logtransport2.cfg.crypto_iuw5pli545
from %APPDATA%\adobe\flash player\nativecache\nativecache.directory to %APPDATA%\adobe\flash player\nativecache\nativecache.directory.crypto_iuw5pli545
from %APPDATA%\adobe\acrobat\dc\security\crlcache\ce338828149963dcea4cd26bb86f0363b4ca0ba5.crl to %APPDATA%\adobe\acrobat\dc\security\crlcache\ce338828149963dcea4cd26bb86f0363b4ca0ba5.crl.crypto_iuw5pli545
from %APPDATA%\adobe\acrobat\dc\security\crlcache\0fded5ceb68c302b1cdb2bddd9d0000e76539cb0.crl to %APPDATA%\adobe\acrobat\dc\security\crlcache\0fded5ceb68c302b1cdb2bddd9d0000e76539cb0.crl.crypto_55pqhmc458
from %APPDATA%\adobe\acrobat\dc\security\addressbook.acrodata to %APPDATA%\adobe\acrobat\dc\security\addressbook.acrodata.crypto_55pqhmc458
from %APPDATA%\adobe\acrobat\dc\jscache\globsettings to %APPDATA%\adobe\acrobat\dc\jscache\globsettings.crypto_y113hjgkat
from %APPDATA%\adobe\acrobat\dc\jscache\globdata to %APPDATA%\adobe\acrobat\dc\jscache\globdata.crypto_y113hjgkat
from %APPDATA%\adobe\acrobat\dc\tmgrpprm.sav to %APPDATA%\adobe\acrobat\dc\tmgrpprm.sav.crypto_y113hjgkat
from %APPDATA%\adobe\acrobat\dc\tmdocs.sav to %APPDATA%\adobe\acrobat\dc\tmdocs.sav.crypto_y113hjgkat
from %TEMP%\webinstaller\qnzuposrqouvfisa\variant.js to %TEMP%\webinstaller\qnzuposrqouvfisa\variant.js.crypto_m2d42lidqm
from %TEMP%\webinstaller\qnzuposrqouvfisa\data.txt to %TEMP%\webinstaller\qnzuposrqouvfisa\data.txt.crypto_1sca3cuq7b
from %TEMP%\temp1_fp_13.0.0.182_archive.zip\fp_13.0.0.182_archive\13_0_r0_182\flashplayer13_0r0_182_winax.msi to %TEMP%\temp1_fp_13.0.0.182_archive.zip\fp_13.0.0.182_archive\13_0_r0_182\flashplayer13_0r0_182_winax.msi.crypto_h0i8v9s5ez
from %TEMP%\opera installer\opera_installer_20150506170857.log to %TEMP%\opera installer\opera_installer_20150506170857.log.crypto_dfs6f4ozrb
from %TEMP%\opera installer\opera_installer_20150506170843.log to %TEMP%\opera installer\opera_installer_20150506170843.log.crypto_z8gyfxww3g
from %TEMP%\opera installer\opera_installer_20150506170826.log to %TEMP%\opera installer\opera_installer_20150506170826.log.crypto_z8gyfxww3g
from %TEMP%\adobe_admlogs\adobe_gde.log to %TEMP%\adobe_admlogs\adobe_gde.log.crypto_mjaj7yqv4k
from %TEMP%\adobe_admlogs\adobe_adm.log to %TEMP%\adobe_admlogs\adobe_adm.log.crypto_fflx8vuba4
from %TEMP%\wmsetup.log to %TEMP%\wmsetup.log.crypto_slpqk67toz
from %APPDATA%\icq-profile\update\languages.aff to %APPDATA%\icq-profile\update\languages.aff.crypto_2mr6xokqxh
from %APPDATA%\icq-profile\update\languages.dict to %APPDATA%\icq-profile\update\languages.dict.crypto_2mr6xokqxh
from %APPDATA%\icq-profile\update\languages.hash to %APPDATA%\icq-profile\update\languages.hash.crypto_w18dpsa9s0
from %APPDATA%\icq-profile\update\ver.txt to %APPDATA%\icq-profile\update\ver.txt.crypto_w18dpsa9s0
from %APPDATA%\icqm\icq\html\kz\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\kz\loading\progress_agent.gif.crypto_190yinyaqm
from %APPDATA%\icqm\icq\html\en\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\en\loading\progress_agent.gif.crypto_adhbah062v
from %APPDATA%\icqm\icq\html\de\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\de\loading\progress_agent.gif.crypto_7ts8vcw0g7
from %APPDATA%\icqm\icq\html\cz\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\cz\loading\progress_agent.gif.crypto_3826f6rutj
from %APPDATA%\icqm\icq\html\bg\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\bg\loading\progress_agent.gif.crypto_buepft7nht
from %APPDATA%\icqm\icq\fonts\segoesc.ttf to %APPDATA%\icqm\icq\fonts\segoesc.ttf.crypto_26ursbd9ji
from %APPDATA%\icqm\icq\dll\mratag.dll to %APPDATA%\icqm\icq\dll\mratag.dll.crypto_phnckc78jm
from %APPDATA%\icqm\icq\dll\mousephone.dll to %APPDATA%\icqm\icq\dll\mousephone.dll.crypto_cshxcd17kq
from %APPDATA%\icqm\icq\dll\mailrusputnik.exe to %APPDATA%\icqm\icq\dll\mailrusputnik.exe.crypto_cshxcd17kq
from %APPDATA%\icqm\icq\dll\altergeo.msi to %APPDATA%\icqm\icq\dll\altergeo.msi.crypto_iezqk9bop7
from %TEMP%\setupexe(20160310140634718).log to %TEMP%\setupexe(20160310140634718).log.crypto_lh14l3b9uj
from %APPDATA%\icqm\icq\database\citylist_uz.csv to %APPDATA%\icqm\icq\database\citylist_uz.csv.crypto_5psbc95nqa
from %TEMP%\setupexe(201603101200226dc).log to %TEMP%\setupexe(201603101200226dc).log.crypto_8supd458un
from %APPDATA%\icqm\icq\database\citylist_ru.csv to %APPDATA%\icqm\icq\database\citylist_ru.csv.crypto_lwya4722xy
from %APPDATA%\icqm\icq\database\citylist_kz.csv to %APPDATA%\icqm\icq\database\citylist_kz.csv.crypto_rig3c3dj2f
from %APPDATA%\icqm\icq\database\citylist_en.csv to %APPDATA%\icqm\icq\database\citylist_en.csv.crypto_rig3c3dj2f
from %APPDATA%\icqm\vivo.dll to %APPDATA%\icqm\vivo.dll.crypto_etao446i3j
from %APPDATA%\icqm\sciter32.dll to %APPDATA%\icqm\sciter32.dll.crypto_u0fnw14x97
from %APPDATA%\icqm\mrainplaceviewer.dll to %APPDATA%\icqm\mrainplaceviewer.dll.crypto_gt3exuctlc
from %APPDATA%\icqm\libvoip_x86.dll to %APPDATA%\icqm\libvoip_x86.dll.crypto_34wzpv6smf
from %APPDATA%\icqm\icqsetup.exe to %APPDATA%\icqm\icqsetup.exe.crypto_34wzpv6smf
from %APPDATA%\icqm\icq.exe to %APPDATA%\icqm\icq.exe.crypto_9qfsxrgarw
from %APPDATA%\icqm\icq\database\citylist_ua.csv to %APPDATA%\icqm\icq\database\citylist_ua.csv.crypto_bab4k6f4vr
from %APPDATA%\icqm\icq\html\pt\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\pt\loading\progress_agent.gif.crypto_fgc6itqeeh
from %TEMP%\rgie195.tmp-tmp to %TEMP%\rgie195.tmp-tmp.crypto_v3oa44z7vq
from %APPDATA%\icqm\icq\database\citylist_tr.csv to %APPDATA%\icqm\icq\database\citylist_tr.csv.crypto_yl4pc693wv
from %TEMP%\dd_setuputility.txt to %TEMP%\dd_setuputility.txt.crypto_32q1ks1fqv
from %TEMP%\jusched.log to %TEMP%\jusched.log.crypto_85lxr5sn2h
from %TEMP%\dd_ndp452-kb2901907-x86-x64-allos-enu_decompression_log.txt to %TEMP%\dd_ndp452-kb2901907-x86-x64-allos-enu_decompression_log.txt.crypto_qdkmctverz
from %TEMP%\cvrf2a3.tmp.cvr to %TEMP%\cvrf2a3.tmp.cvr.crypto_jaw0cqzuxj
from %TEMP%\cvreaf2.tmp.cvr to %TEMP%\cvreaf2.tmp.cvr.crypto_jaw0cqzuxj
from %TEMP%\cvrde7f.tmp.cvr to %TEMP%\cvrde7f.tmp.cvr.crypto_jaw0cqzuxj
from %TEMP%\cvrc867.tmp.cvr to %TEMP%\cvrc867.tmp.cvr.crypto_zh1z4nx937
from %TEMP%\cvrbada.tmp.cvr to %TEMP%\cvrbada.tmp.cvr.crypto_zh1z4nx937
from %TEMP%\cvr6d44.tmp.cvr to %TEMP%\cvr6d44.tmp.cvr.crypto_msukwor84b
from %TEMP%\cvr6b9c.tmp.cvr to %TEMP%\cvr6b9c.tmp.cvr.crypto_fp6ywkvoav
from %TEMP%\cprogram files (x86)opera29.0.1795.47opera_autoupdate.metrics.lock to %TEMP%\cprogram files (x86)opera29.0.1795.47opera_autoupdate.metrics.lock.crypto_lapq4h55fc
from %TEMP%\cprogram files (x86)opera29.0.1795.47opera_autoupdate.download.lock to %TEMP%\cprogram files (x86)opera29.0.1795.47opera_autoupdate.download.lock.crypto_lapq4h55fc
from %TEMP%\aspnetsetup_00003.log to %TEMP%\aspnetsetup_00003.log.crypto_otoaofxjn4
from %TEMP%\aspnetsetup_00002.log to %TEMP%\aspnetsetup_00002.log.crypto_ue63wb70sl
from %TEMP%\aspnetsetup_00001.log to %TEMP%\aspnetsetup_00001.log.crypto_hpzoob1zto
from %TEMP%\aspnetsetup_00000.log to %TEMP%\aspnetsetup_00000.log.crypto_40t9gcvyts
from %TEMP%\aspnetsetup.log to %TEMP%\aspnetsetup.log.crypto_amb2p85gz9
from %TEMP%\adobesfx.log to %TEMP%\adobesfx.log.crypto_xx5nh9zfzc
from %TEMP%\adobearm_notlocked.log to %TEMP%\adobearm_notlocked.log.crypto_3jngp59w4t
from %TEMP%\adobearm.log to %TEMP%\adobearm.log.crypto_quh1h53v5x
from %LOCALAPPDATA%\google\chrome\user data\default\web applications\_crx_aohghmighlieiainnegkcijnfilokake\документы google.ico.md5 to %LOCALAPPDATA%\google\chrome\user data\default\web applications\_crx_aohghmighlieiainnegkcijnfilokake\документы google.ico.md5.crypto_kzhq1sov05
from %TEMP%\dd_vcredist_amd64_20151216210341.log to %TEMP%\dd_vcredist_amd64_20151216210341.log.crypto_xh88cwryle
from %TEMP%\dd_vcredist_amd64_20151216210341_000_vcruntimeminimum_x64.log to %TEMP%\dd_vcredist_amd64_20151216210341_000_vcruntimeminimum_x64.log.crypto_a6enkwxzka
from %TEMP%\dd_vcredist_amd64_20151216210341_001_vcruntimeadditional_x64.log to %TEMP%\dd_vcredist_amd64_20151216210341_001_vcruntimeadditional_x64.log.crypto_a6enkwxzka
from %TEMP%\dd_vcredist_x86_20151216210157.log to %TEMP%\dd_vcredist_x86_20151216210157.log.crypto_4kwub0nhfu
from %TEMP%\rgie195.tmp to %TEMP%\rgie195.tmp.crypto_1p63d09o07
from %TEMP%\rgi8564.tmp-tmp to %TEMP%\rgi8564.tmp-tmp.crypto_1p63d09o07
from %TEMP%\rgi8564.tmp to %TEMP%\rgi8564.tmp.crypto_o00o513n1b
from %TEMP%\opera_crashreporter.log to %TEMP%\opera_crashreporter.log.crypto_ulihdxd46s
from %TEMP%\msieb217.log to %TEMP%\msieb217.log.crypto_ulihdxd46s
from %TEMP%\msie45bf.log to %TEMP%\msie45bf.log.crypto_475nxy128z
from %TEMP%\msid38c.log to %TEMP%\msid38c.log.crypto_x4h0xv5iej
from %TEMP%\msic204f.log to %TEMP%\msic204f.log.crypto_3pzt5rfzj0
from %TEMP%\msi1cfbe.log to %TEMP%\msi1cfbe.log.crypto_3pzt5rfzj0
from %TEMP%\mirc741.exe to %TEMP%\mirc741.exe.crypto_q0texs9yk4
from %TEMP%\setupexe(20151124155624744).log to %TEMP%\setupexe(20151124155624744).log.crypto_v3oa44z7vq
from %TEMP%\microsoft .net framework 4.7.1 setup_20200610_200621826-msi_netfx_full_x64.msi.txt to %TEMP%\microsoft .net framework 4.7.1 setup_20200610_200621826-msi_netfx_full_x64.msi.txt.crypto_caek2yoca7
from %APPDATA%\icqm\icq\html\tr\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\tr\loading\progress_agent.gif.crypto_dgjgp2k3vo
from %TEMP%\javadeployreg.log to %TEMP%\javadeployreg.log.crypto_vgfij5lm2l
from %TEMP%\dotnetfxsdk.log to %TEMP%\dotnetfxsdk.log.crypto_vgfij5lm2l
from %TEMP%\dotnetfx.log to %TEMP%\dotnetfx.log.crypto_12xbr2w382
from %TEMP%\dd_wcf_ca_smci_20200611_031101_060.txt to %TEMP%\dd_wcf_ca_smci_20200611_031101_060.txt.crypto_12xbr2w382
from %TEMP%\dd_wcf_ca_smci_20200611_031056_919.txt to %TEMP%\dd_wcf_ca_smci_20200611_031056_919.txt.crypto_12xbr2w382
from %TEMP%\dd_wcf_ca_smci_20151217_052908_497.txt to %TEMP%\dd_wcf_ca_smci_20151217_052908_497.txt.crypto_odrwj2p286
from %TEMP%\dd_wcf_ca_smci_20151217_052858_840.txt to %TEMP%\dd_wcf_ca_smci_20151217_052858_840.txt.crypto_odrwj2p286
from %TEMP%\dd_vcredist_x86_20151216210157_001_vcruntimeadditional_x86.log to %TEMP%\dd_vcredist_x86_20151216210157_001_vcruntimeadditional_x86.log.crypto_uy9osyzjdm
from %TEMP%\dd_vcredist_x86_20151216210157_000_vcruntimeminimum_x86.log to %TEMP%\dd_vcredist_x86_20151216210157_000_vcruntimeminimum_x86.log.crypto_h929kztieq
from %TEMP%\microsoft .net framework 4.5.2 setup_20151216_212237215-msi_netfx_full_gdr_x64.msi.txt to %TEMP%\microsoft .net framework 4.5.2 setup_20151216_212237215-msi_netfx_full_gdr_x64.msi.txt.crypto_f99jr8o7wx
from %APPDATA%\icqm\icq\html\ru\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\ru\loading\progress_agent.gif.crypto_tnofi0ii2c
from %TEMP%\dd_ndp471-kb4033342-x86-x64-allos-enu_decompression_log.txt to %TEMP%\dd_ndp471-kb4033342-x86-x64-allos-enu_decompression_log.txt.crypto_32q1ks1fqv
from %APPDATA%\icq-profile\base\mra.dbs to %APPDATA%\icq-profile\base\mra.dbs.crypto_pxkrpoepyk
from %APPDATA%\icqm\icq\html\ua\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\ua\loading\progress_agent.gif.crypto_x8dhx5mop0
from %APPDATA%\icqm\icq\smiles\smiles\animated\book.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\book.gif.crypto_hohar72tbh
from %APPDATA%\icqm\icq\smiles\smiles\animated\devil.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\devil.gif.crypto_or5xqayd5x
from %APPDATA%\icqm\icq\smiles\smiles\animated\blew.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\blew.gif.crypto_4zbvj7wscl
from %APPDATA%\icqm\icq\smiles\smiles\animated\beer.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\beer.gif.crypto_4zbvj7wscl
from %APPDATA%\icqm\icq\smiles\smiles\animated\beauty.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\beauty.gif.crypto_4zbvj7wscl
from %APPDATA%\icqm\icq\smiles\smiles\animated\appl.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\appl.gif.crypto_4zbvj7wscl
from %APPDATA%\icqm\icq\smiles\smiles\animated\angel.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\angel.gif.crypto_aktor369h2
from %APPDATA%\icqm\icq\smiles\smiles\8march\sunburn.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\sunburn.gif.crypto_aktor369h2
from %APPDATA%\icqm\icq\smiles\smiles\8march\shoes.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\shoes.gif.crypto_xvn9j408i6
from %APPDATA%\icqm\icq\smiles\smiles\8march\ring.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\ring.gif.crypto_xvn9j408i6
from %APPDATA%\icqm\icq\smiles\smiles\8march\perfume.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\perfume.gif.crypto_xvn9j408i6
from %APPDATA%\icqm\icq\smiles\smiles\8march\new_dress.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\new_dress.gif.crypto_xvn9j408i6
from %APPDATA%\icqm\icq\smiles\smiles\8march\mad.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\mad.gif.crypto_xvn9j408i6
from %APPDATA%\icqm\icq\smiles\smiles\8march\love.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\love.gif.crypto_xvn9j408i6
from %APPDATA%\icqm\icq\smiles\smiles\8march\joy.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\joy.gif.crypto_qsznj14pnq
from %APPDATA%\icqm\icq\smiles\smiles\8march\hug.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\hug.gif.crypto_qsznj14pnq
from %APPDATA%\icqm\icq\smiles\smiles\8march\flowers.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\flowers.gif.crypto_qsznj14pnq
from %APPDATA%\icqm\icq\smiles\smiles\8march\drink.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\drink.gif.crypto_d3s8b1yoou
from %APPDATA%\icqm\icq\smiles\smiles\8march\doll.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\doll.gif.crypto_joa1jx85ta
from %APPDATA%\icqm\icq\smiles\smiles\8march\cookie.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\cookie.gif.crypto_6z4mby24ue
from %APPDATA%\icqm\icq\smiles\smiles\8march\cat.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\cat.gif.crypto_6z4mby24ue
from %APPDATA%\icqm\icq\smiles\smiles\animated\cry.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\cry.gif.crypto_b2ziiasc61
from %APPDATA%\icqm\icq\smiles\smiles\animated\eat.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\eat.gif.crypto_1gcby94e4t
from %APPDATA%\icqm\icq\smiles\smiles\animated\wonder.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\wonder.gif.crypto_6j776mungg
from %APPDATA%\icqm\icq\smiles\smiles\animated\victory.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\victory.gif.crypto_tu0symomgj
from %APPDATA%\icqm\icq\smiles\smiles\s008.gif to %APPDATA%\icqm\icq\smiles\smiles\s008.gif.crypto_tax73zw3vi
from %APPDATA%\icqm\icq\smiles\smiles\animated\love.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\love.gif.crypto_2yh5qgqhts
from %APPDATA%\icqm\icq\smiles\smiles\animated\tongue.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\tongue.gif.crypto_zgjl6iy3m0
from %APPDATA%\icqm\icq\smiles\smiles\animated\smile.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\smile.gif.crypto_zgjl6iy3m0
from %APPDATA%\icqm\icq\smiles\smiles\animated\sleep.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\sleep.gif.crypto_mqc6yjs2m4
from %APPDATA%\icqm\icq\smiles\smiles\animated\skuka.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\skuka.gif.crypto_mqc6yjs2m4
from %APPDATA%\icqm\icq\smiles\smiles\animated\sing.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\sing.gif.crypto_mqc6yjs2m4
from %APPDATA%\icqm\icq\smiles\smiles\animated\sad.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\sad.gif.crypto_scvz6f2jsl
from %APPDATA%\icqm\icq\smiles\smiles\animated\red.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\red.gif.crypto_fnokygwiso
from %APPDATA%\icqm\icq\smiles\smiles\animated\rainbow.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\rainbow.gif.crypto_fnokygwiso
from %APPDATA%\icqm\icq\smiles\smiles\8march\car.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\car.gif.crypto_tax73zw3vi
from %APPDATA%\icqm\icq\smiles\smiles\animated\dance.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\dance.gif.crypto_b2ziiasc61
from %APPDATA%\icqm\icq\smiles\smiles\animated\poison.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\poison.gif.crypto_fnokygwiso
from %APPDATA%\icqm\icq\smiles\flash\wf_love_srazila.swf to %APPDATA%\icqm\icq\smiles\flash\wf_love_srazila.swf.crypto_zwg0bv6k0z
from %APPDATA%\icqm\icq\smiles\smiles\animated\hungry.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\hungry.gif.crypto_8k0yyc0yy9
from %APPDATA%\icqm\icq\smiles\smiles\animated\history.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\history.gif.crypto_8k0yyc0yy9
from %APPDATA%\icqm\icq\smiles\smiles\animated\gift.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\gift.gif.crypto_8k0yyc0yy9
from %APPDATA%\icqm\icq\smiles\smiles\animated\gg2.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\gg2.gif.crypto_vvtjqduxzc
from %APPDATA%\icqm\icq\smiles\smiles\animated\gg.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\gg.gif.crypto_vvtjqduxzc
from %APPDATA%\icqm\icq\smiles\smiles\animated\flowr.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\flowr.gif.crypto_1gcby94e4t
from %APPDATA%\icqm\icq\smiles\smiles\animated\fingal.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\fingal.gif.crypto_1gcby94e4t
from %APPDATA%\icqm\icq\smiles\smiles\animated\fight.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\fight.gif.crypto_1gcby94e4t
from %APPDATA%\icqm\icq\smiles\smiles\animated\pistolet.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\pistolet.gif.crypto_2yh5qgqhts
from %APPDATA%\icqm\icq\smiles\smiles\animated\kiss.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\kiss.gif.crypto_8k0yyc0yy9
from %APPDATA%\icqm\icq\smiles\flash\zadolbal.swf to %APPDATA%\icqm\icq\smiles\flash\zadolbal.swf.crypto_tax73zw3vi
from %APPDATA%\icqm\icq\smiles\flash\information.swf to %APPDATA%\icqm\icq\smiles\flash\information.swf.crypto_6g10ga9l9c
from %APPDATA%\icqm\icq\smiles\smiles\animated\could.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\could.gif.crypto_b2ziiasc61
from %APPDATA%\icqm\icq\smiles\smiles\set06\s012.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s012.gif.crypto_v98kxl38w4
from %APPDATA%\icqm\icq\smiles\flash\gangsta.swf to %APPDATA%\icqm\icq\smiles\flash\gangsta.swf.crypto_trul8b3k9g
from %APPDATA%\icqm\icq\smiles\flash\duh.swf to %APPDATA%\icqm\icq\smiles\flash\duh.swf.crypto_zcdeg7d1ex
from %APPDATA%\icqm\icq\smiles\flash\drako_zombie.swf to %APPDATA%\icqm\icq\smiles\flash\drako_zombie.swf.crypto_mn6z8870f0
from %APPDATA%\icqm\icq\smiles\flash\drako_snegyrka.swf to %APPDATA%\icqm\icq\smiles\flash\drako_snegyrka.swf.crypto_s9psg4hhkh
from %APPDATA%\icqm\icq\smiles\flash\drako_opyatnica.swf to %APPDATA%\icqm\icq\smiles\flash\drako_opyatnica.swf.crypto_fkid84bgll
from %APPDATA%\icqm\icq\smiles\flash\drako_love.swf to %APPDATA%\icqm\icq\smiles\flash\drako_love.swf.crypto_fkid84bgll
from %APPDATA%\icqm\icq\smiles\flash\drako_koster.swf to %APPDATA%\icqm\icq\smiles\flash\drako_koster.swf.crypto_2vby055fmo
from %APPDATA%\icqm\icq\smiles\flash\drako_bolnoy.swf to %APPDATA%\icqm\icq\smiles\flash\drako_bolnoy.swf.crypto_2vby055fmo
from %APPDATA%\icqm\icq\smiles\flash\joy.swf to %APPDATA%\icqm\icq\smiles\flash\joy.swf.crypto_j57foafm89
from %APPDATA%\icqm\icq\smiles\flash\kisses.swf to %APPDATA%\icqm\icq\smiles\flash\kisses.swf.crypto_j57foafm89
from %APPDATA%\icqm\icq\smiles\flash\devochka.swf to %APPDATA%\icqm\icq\smiles\flash\devochka.swf.crypto_8gur81fwr5
from %APPDATA%\icqm\icq\smiles\flash\boo.swf to %APPDATA%\icqm\icq\smiles\flash\boo.swf.crypto_4v5pswbq4h
from %APPDATA%\icqm\icq\smiles\flash\bodun.swf to %APPDATA%\icqm\icq\smiles\flash\bodun.swf.crypto_4v5pswbq4h
from %APPDATA%\icqm\icq\smiles\flash\beer.swf to %APPDATA%\icqm\icq\smiles\flash\beer.swf.crypto_ahnh1sl8ay
from %APPDATA%\icqm\icq\smiles\flash\beback.swf to %APPDATA%\icqm\icq\smiles\flash\beback.swf.crypto_ahnh1sl8ay
from %APPDATA%\icqm\icq\smiles\flash\bad_cold.swf to %APPDATA%\icqm\icq\smiles\flash\bad_cold.swf.crypto_k3ankt96b5
from %APPDATA%\icqm\icq\smiles\flash\angel.swf to %APPDATA%\icqm\icq\smiles\flash\angel.swf.crypto_k3ankt96b5
from %APPDATA%\icqm\icq\smiles\flash\akitaka.swf to %APPDATA%\icqm\icq\smiles\flash\akitaka.swf.crypto_qosgtpjngm
from %APPDATA%\icqm\icq\smiles\skin.txt to %APPDATA%\icqm\icq\smiles\skin.txt.crypto_6wyflnh2na
from %APPDATA%\icqm\icq\html\uz\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\uz\loading\progress_agent.gif.crypto_h18i58o8ic
from %APPDATA%\icqm\icq\smiles\flash\chillout.swf to %APPDATA%\icqm\icq\smiles\flash\chillout.swf.crypto_8gur81fwr5
from %APPDATA%\icqm\icq\smiles\flash\canthearu.swf to %APPDATA%\icqm\icq\smiles\flash\canthearu.swf.crypto_1d658yjcxq
from %APPDATA%\icqm\icq\smiles\smiles\set05\s017.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s017.gif.crypto_rojhhfz29g
from %APPDATA%\icqm\icq\smiles\flash\kot_goodbye.swf to %APPDATA%\icqm\icq\smiles\flash\kot_goodbye.swf.crypto_djpnge553s
from %APPDATA%\icqm\icq\smiles\flash\mad dog.swf to %APPDATA%\icqm\icq\smiles\flash\mad dog.swf.crypto_biwwnnztkz
from %APPDATA%\icqm\icq\smiles\flash\missyou.swf to %APPDATA%\icqm\icq\smiles\flash\missyou.swf.crypto_biwwnnztkz
from %APPDATA%\icqm\icq\smiles\flash\tank.swf to %APPDATA%\icqm\icq\smiles\flash\tank.swf.crypto_m79l3v0j12
from %APPDATA%\icqm\icq\smiles\flash\sorry.swf to %APPDATA%\icqm\icq\smiles\flash\sorry.swf.crypto_m79l3v0j12
from %APPDATA%\icqm\icq\smiles\flash\sobaka_strelyaet.swf to %APPDATA%\icqm\icq\smiles\flash\sobaka_strelyaet.swf.crypto_sssdbra06j
from %APPDATA%\icqm\icq\smiles\flash\sobaka.swf to %APPDATA%\icqm\icq\smiles\flash\sobaka.swf.crypto_f3ly3s4z7n
from %APPDATA%\icqm\icq\smiles\flash\smeh.swf to %APPDATA%\icqm\icq\smiles\flash\smeh.swf.crypto_f3ly3s4z7n
from %APPDATA%\icqm\icq\smiles\flash\skratch.swf to %APPDATA%\icqm\icq\smiles\flash\skratch.swf.crypto_f3ly3s4z7n
from %APPDATA%\icqm\icq\smiles\flash\serdze.swf to %APPDATA%\icqm\icq\smiles\flash\serdze.swf.crypto_2eekvtyy7q
from %APPDATA%\icqm\icq\smiles\flash\rosy.swf to %APPDATA%\icqm\icq\smiles\flash\rosy.swf.crypto_2eekvtyy7q
from %APPDATA%\icqm\icq\smiles\flash\rabotaet.swf to %APPDATA%\icqm\icq\smiles\flash\rabotaet.swf.crypto_2eekvtyy7q
from %APPDATA%\icqm\icq\smiles\flash\wf_love_sdaus.swf to %APPDATA%\icqm\icq\smiles\flash\wf_love_sdaus.swf.crypto_zwg0bv6k0z
from %APPDATA%\icqm\icq\smiles\flash\kot_cool.swf to %APPDATA%\icqm\icq\smiles\flash\kot_cool.swf.crypto_djpnge553s
from %APPDATA%\icqm\icq\smiles\flash\guby.swf to %APPDATA%\icqm\icq\smiles\flash\guby.swf.crypto_trul8b3k9g
from %APPDATA%\icqm\icq\smiles\flash\love_bear_kiss.swf to %APPDATA%\icqm\icq\smiles\flash\love_bear_kiss.swf.crypto_h4epvjaapg
from %APPDATA%\icqm\icq\smiles\flash\love_bear_hugs.swf to %APPDATA%\icqm\icq\smiles\flash\love_bear_hugs.swf.crypto_4f8ank39qj
from %APPDATA%\icqm\icq\smiles\flash\likeu.swf to %APPDATA%\icqm\icq\smiles\flash\likeu.swf.crypto_4f8ank39qj
from %APPDATA%\icqm\icq\smiles\flash\laugh.swf to %APPDATA%\icqm\icq\smiles\flash\laugh.swf.crypto_a1q3wgeqv0
from %APPDATA%\icqm\icq\smiles\flash\krizis.swf to %APPDATA%\icqm\icq\smiles\flash\krizis.swf.crypto_xckoog7pw4
from %APPDATA%\icqm\icq\smiles\flash\kot_wow.swf to %APPDATA%\icqm\icq\smiles\flash\kot_wow.swf.crypto_xckoog7pw4
from %APPDATA%\icqm\icq\smiles\flash\kot_spasibo.swf to %APPDATA%\icqm\icq\smiles\flash\kot_spasibo.swf.crypto_knd9gh1ox7
from %APPDATA%\icqm\icq\smiles\flash\kot_obida.swf to %APPDATA%\icqm\icq\smiles\flash\kot_obida.swf.crypto_q8v2odb62o
from %APPDATA%\icqm\icq\smiles\flash\kot_nedutza.swf to %APPDATA%\icqm\icq\smiles\flash\kot_nedutza.swf.crypto_q8v2odb62o
from %APPDATA%\icqm\icq\smiles\flash\love_bear_rose.swf to %APPDATA%\icqm\icq\smiles\flash\love_bear_rose.swf.crypto_biwwnnztkz
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\yahoo.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\yahoo.gif.crypto_hzq473q205
from %APPDATA%\icqm\icq\smiles\smiles\set06\s014.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s014.gif.crypto_v98kxl38w4
from %APPDATA%\icqm\icq\smiles\statuses\vk\vkontakte_away.ico to %APPDATA%\icqm\icq\smiles\statuses\vk\vkontakte_away.ico.crypto_gwhhzzvtfm
from %APPDATA%\icqm\icq\smiles\statuses\vk\vkontakte_gray.ico to %APPDATA%\icqm\icq\smiles\statuses\vk\vkontakte_gray.ico.crypto_aazor3lb95
from %APPDATA%\icqm\icq\smiles\statuses\set01\wrong_data.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\wrong_data.ico.crypto_37b2r0psfp
from %APPDATA%\icqm\icq\smiles\statuses\set01\v_shkole_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\v_shkole_xp.ico.crypto_37b2r0psfp
from %APPDATA%\icqm\icq\smiles\statuses\set01\v_shkole.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\v_shkole.ico.crypto_37b2r0psfp
from %APPDATA%\icqm\icq\smiles\statuses\set01\v_institute_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\v_institute_xp.ico.crypto_qi4nj1jrgt
from %APPDATA%\icqm\icq\smiles\statuses\set01\v_institute.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\v_institute.ico.crypto_qi4nj1jrgt
from %APPDATA%\icqm\icq\smiles\statuses\set01\vi_oshiblis_nomerom_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\vi_oshiblis_nomerom_xp.ico.crypto_w3ngrxt8la
from %APPDATA%\icqm\icq\smiles\statuses\set01\vi_oshiblis_nomerom.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\vi_oshiblis_nomerom.ico.crypto_w3ngrxt8la
from %APPDATA%\icqm\icq\smiles\statuses\set01\telefon_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\telefon_xp.ico.crypto_w3ngrxt8la
from %APPDATA%\icqm\icq\smiles\statuses\set01\telefon.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\telefon.ico.crypto_w3ngrxt8la
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_online_xp_big.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_online_xp_big.ico.crypto_jeg1jxn7md
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_online_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_online_xp.ico.crypto_jeg1jxn7md
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_online_big.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_online_big.ico.crypto_p0zuruxoru
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_online.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_online.ico.crypto_p0zuruxoru
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_offline_xp_big.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_offline_xp_big.ico.crypto_cbsfjurnsy
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_offline_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_offline_xp.ico.crypto_cbsfjurnsy
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_offline_big.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_offline_big.ico.crypto_cbsfjurnsy
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_offline.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_offline.ico.crypto_584skrv3yi
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_mobile.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_mobile.ico.crypto_584skrv3yi
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_invisible_xp_big.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_invisible_xp_big.ico.crypto_584skrv3yi
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_invisible_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_invisible_xp.ico.crypto_584skrv3yi
from %APPDATA%\icqm\icq\smiles\statuses\vk\vkontakte_offline.ico to %APPDATA%\icqm\icq\smiles\statuses\vk\vkontakte_offline.ico.crypto_nz53z3rc91
from %APPDATA%\icqm\icq\smiles\statuses\vk\vkontakte_online.ico to %APPDATA%\icqm\icq\smiles\statuses\vk\vkontakte_online.ico.crypto_nz53z3rc91
from %APPDATA%\mail.ru\agent\magentsetup.exe to %APPDATA%\mail.ru\agent\magentsetup.exe.crypto_5r7effnmkk
from %APPDATA%\icqm\icq\sounds\ring.mp3 to %APPDATA%\icqm\icq\sounds\ring.mp3.crypto_7s0475tx2d
from %APPDATA%\icqm\icq\sounds\start.wav to %APPDATA%\icqm\icq\sounds\start.wav.crypto_16icz9jgxw
from %APPDATA%\mail.ru\agent\magent.exe to %APPDATA%\mail.ru\agent\magent.exe.crypto_s20z7fhlko
from %APPDATA%\mail.ru\agent\libvoip_x86.dll to %APPDATA%\mail.ru\agent\libvoip_x86.dll.crypto_yojsfbr2p4
from %APPDATA%\macromedia\flash player\macromedia.com\support\flashplayer\sys\#yastatic.net\settings.sol to %APPDATA%\macromedia\flash player\macromedia.com\support\flashplayer\sys\#yastatic.net\settings.sol.crypto_yojsfbr2p4
from %APPDATA%\macromedia\flash player\macromedia.com\support\flashplayer\sys\#kiks.yandex.ru\settings.sol to %APPDATA%\macromedia\flash player\macromedia.com\support\flashplayer\sys\#kiks.yandex.ru\settings.sol.crypto_yojsfbr2p4
from %APPDATA%\macromedia\flash player\macromedia.com\support\flashplayer\sys\settings.sol to %APPDATA%\macromedia\flash player\macromedia.com\support\flashplayer\sys\settings.sol.crypto_lzcd7cl1q8
from %APPDATA%\macromedia\flash player\#sharedobjects\gr8by44n\kiks.yandex.ru\fuid01.sol to %APPDATA%\macromedia\flash player\#sharedobjects\gr8by44n\kiks.yandex.ru\fuid01.sol.crypto_lzcd7cl1q8
from %APPDATA%\icqm\icq\video\video.swf to %APPDATA%\icqm\icq\video\video.swf.crypto_lzcd7cl1q8
from %APPDATA%\icqm\icq\sounds\voiceend.wav to %APPDATA%\icqm\icq\sounds\voiceend.wav.crypto_16icz9jgxw
from %APPDATA%\icqm\icq\sounds\test_sound.wav to %APPDATA%\icqm\icq\sounds\test_sound.wav.crypto_16icz9jgxw
from %APPDATA%\icqm\icq\smiles\statuses\vk\vkontakte_busy.ico to %APPDATA%\icqm\icq\smiles\statuses\vk\vkontakte_busy.ico.crypto_aazor3lb95
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_invisible_big.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_invisible_big.ico.crypto_584skrv3yi
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_invisible.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_invisible.ico.crypto_sjxdbso2zm
from %APPDATA%\icqm\icq\sounds\otprav.mp3 to %APPDATA%\icqm\icq\sounds\otprav.mp3.crypto_7s0475tx2d
from %APPDATA%\icqm\icq\sounds\no_answer.wav to %APPDATA%\icqm\icq\sounds\no_answer.wav.crypto_u3tpz6nw3h
from %APPDATA%\icqm\icq\sounds\message.mp3 to %APPDATA%\icqm\icq\sounds\message.mp3.crypto_u3tpz6nw3h
from %APPDATA%\icqm\icq\sounds\letter.wav to %APPDATA%\icqm\icq\sounds\letter.wav.crypto_u3tpz6nw3h
from %APPDATA%\icqm\icq\sounds\error.wav to %APPDATA%\icqm\icq\sounds\error.wav.crypto_u3tpz6nw3h
from %APPDATA%\icqm\icq\sounds\conference.mp3 to %APPDATA%\icqm\icq\sounds\conference.mp3.crypto_henar7hv4k
from %APPDATA%\icqm\icq\sounds\call_in.wav to %APPDATA%\icqm\icq\sounds\call_in.wav.crypto_henar7hv4k
from %APPDATA%\icqm\icq\sounds\busy.mp3 to %APPDATA%\icqm\icq\sounds\busy.mp3.crypto_henar7hv4k
from %APPDATA%\icqm\icq\sounds\auth.mp3 to %APPDATA%\icqm\icq\sounds\auth.mp3.crypto_henar7hv4k
from %APPDATA%\icqm\icq\sounds\otprav.wav to %APPDATA%\icqm\icq\sounds\otprav.wav.crypto_7s0475tx2d
from %APPDATA%\mail.ru\agent\vivo.dll to %APPDATA%\mail.ru\agent\vivo.dll.crypto_z6ol6id5e3
from %APPDATA%\mail.ru\agent\mrainplaceviewer.dll to %APPDATA%\mail.ru\agent\mrainplaceviewer.dll.crypto_5r7effnmkk
from %APPDATA%\mail.ru\agent\sciter32.dll to %APPDATA%\mail.ru\agent\sciter32.dll.crypto_5r7effnmkk
from %APPDATA%\icqm\icq\smiles\statuses\set01\seekfriends_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\seekfriends_xp.ico.crypto_gcew4c2atk
from %APPDATA%\icqm\icq\smiles\statuses\set01\rabotau.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\rabotau.ico.crypto_3n8hwcw9un
from %APPDATA%\icqm\icq\smiles\statuses\set01\pu_kofe.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\pu_kofe.ico.crypto_qy12odq8vr
from %APPDATA%\icqm\icq\smiles\statuses\set01\pivo_bit.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\pivo_bit.ico.crypto_qy12odq8vr
from %APPDATA%\icqm\icq\smiles\statuses\set01\pivo.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\pivo.ico.crypto_qy12odq8vr
from %APPDATA%\icqm\icq\smiles\statuses\set01\na_vstreche.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\na_vstreche.ico.crypto_wkkuw90p08
from %APPDATA%\icqm\icq\smiles\statuses\set01\na_rabote.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\na_rabote.ico.crypto_wkkuw90p08
from %APPDATA%\icqm\icq\smiles\statuses\set01\music.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\music.ico.crypto_wkkuw90p08
from %APPDATA%\icqm\icq\smiles\statuses\set01\kut.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\kut.ico.crypto_jvdfoauo0b
from %APPDATA%\icqm\icq\smiles\statuses\set01\kuru.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\kuru.ico.crypto_jvdfoauo0b
from %APPDATA%\icqm\icq\smiles\statuses\set01\igrau.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\igrau.ico.crypto_pgw8w6456s
from %APPDATA%\icqm\icq\smiles\statuses\set01\ia_utko.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\ia_utko.ico.crypto_pgw8w6456s
from %APPDATA%\icqm\icq\smiles\statuses\set01\ia_soshl_asuma.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\ia_soshl_asuma.ico.crypto_pgw8w6456s
from %APPDATA%\icqm\icq\smiles\statuses\set01\ia_poteralsa.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\ia_poteralsa.ico.crypto_crpto7y46w
from %APPDATA%\icqm\icq\smiles\statuses\set01\ia_krivetko.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\ia_krivetko.ico.crypto_crpto7y46w
from %APPDATA%\icqm\icq\smiles\statuses\set01\ia_inoplanet_razum.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\ia_inoplanet_razum.ico.crypto_z2ieg7s370
from %APPDATA%\icqm\icq\smiles\statuses\set01\gulau.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\gulau.ico.crypto_5o17o32kcg
from %APPDATA%\icqm\icq\smiles\statuses\set01\gotovlu.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\gotovlu.ico.crypto_5o17o32kcg
from %APPDATA%\icqm\icq\smiles\statuses\set01\gizn_gavno.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\gizn_gavno.ico.crypto_szusg4wjdk
from %APPDATA%\icqm\icq\smiles\statuses\set01\gde_ia.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\gde_ia.ico.crypto_szusg4wjdk
from %APPDATA%\icqm\icq\smiles\statuses\set01\em.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\em.ico.crypto_ykdlp060i1
from %APPDATA%\icqm\icq\smiles\statuses\set01\splu.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\splu.ico.crypto_gcew4c2atk
from %APPDATA%\icqm\icq\smiles\statuses\set01\splu_bit.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\splu_bit.ico.crypto_gcew4c2atk
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_away_xp_big.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_away_xp_big.ico.crypto_y4g6kozj43
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_40.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_40.ico.crypto_78xjci0egb
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_41.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_41.ico.crypto_1neq4mqxbu
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_away_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_away_xp.ico.crypto_lf9rcosi56
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_away_big.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_away_big.ico.crypto_lf9rcosi56
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_away.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_away.ico.crypto_lf9rcosi56
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_50.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_50.ico.crypto_lf9rcosi56
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_49.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_49.ico.crypto_8q3c4pmh5a
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_45.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_45.ico.crypto_8q3c4pmh5a
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_44.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_44.ico.crypto_ecl5clwybr
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_43.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_43.ico.crypto_ecl5clwybr
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_42.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_42.ico.crypto_1neq4mqxbu
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_connecting.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_connecting.ico.crypto_y4g6kozj43
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_connecting_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_connecting_xp.ico.crypto_y4g6kozj43
from %APPDATA%\icqm\icq\smiles\statuses\set01\rocket.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\rocket.ico.crypto_3n8hwcw9un
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_37.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_37.ico.crypto_78xjci0egb
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_36.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_36.ico.crypto_ujq44iudhf
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_35.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_35.ico.crypto_ujq44iudhf
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_34.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_34.ico.crypto_hukpwjocii
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_33.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_33.ico.crypto_hukpwjocii
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_32.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_32.ico.crypto_ng2i4fytnz
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_30.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_30.ico.crypto_ng2i4fytnz
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_29.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_29.ico.crypto_arw3wgsto3
from %APPDATA%\icqm\icq\smiles\statuses\set01\star.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\star.ico.crypto_arw3wgsto3
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_38.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_38.ico.crypto_78xjci0egb
from %APPDATA%\mail.ru\agent\mra\database\citylist_en.csv to %APPDATA%\mail.ru\agent\mra\database\citylist_en.csv.crypto_cvv0eij6e0
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\8march\cookie.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\8march\cookie.gif.crypto_8y50uapoou
from %APPDATA%\mail.ru\agent\mra\html\bg\loading\progress_agent.gif to %APPDATA%\mail.ru\agent\mra\html\bg\loading\progress_agent.gif.crypto_1qlxuxbziy
from %APPDATA%\mail.ru\agent\mra\smiles\flash\smeh.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\smeh.swf.crypto_h2mcm4rk03
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\8march\cat.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\8march\cat.gif.crypto_8y50uapoou
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\8march\car.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\8march\car.gif.crypto_8y50uapoou
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\s008.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\s008.gif.crypto_ejos26z5tb
from %APPDATA%\mail.ru\agent\mra\smiles\flash\zadolbal.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\zadolbal.swf.crypto_1uhdu7t4uf
from %APPDATA%\mail.ru\agent\mra\smiles\flash\wf_love_srazila.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\wf_love_srazila.swf.crypto_1uhdu7t4uf
from %APPDATA%\mail.ru\agent\mra\smiles\flash\wf_love_sdaus.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\wf_love_sdaus.swf.crypto_o5bzm7n3ui
from %APPDATA%\mail.ru\agent\mra\smiles\flash\tank.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\tank.swf.crypto_o5bzm7n3ui
from %APPDATA%\mail.ru\agent\mra\smiles\flash\sorry.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\sorry.swf.crypto_urtrv4xl0z
from %APPDATA%\mail.ru\agent\mra\smiles\flash\sobaka_strelyaet.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\sobaka_strelyaet.swf.crypto_h2mcm4rk03
from %APPDATA%\mail.ru\agent\mra\smiles\flash\sobaka.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\sobaka.swf.crypto_h2mcm4rk03
from %APPDATA%\mail.ru\agent\mra\smiles\flash\skratch.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\skratch.swf.crypto_nn55v0115j
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\8march\flowers.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\8march\flowers.gif.crypto_lncf29vpnq
from %APPDATA%\mail.ru\agent\mra\smiles\flash\serdze.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\serdze.swf.crypto_nn55v0115j
from %APPDATA%\mail.ru\agent\mra\smiles\flash\rosy.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\rosy.swf.crypto_nn55v0115j
from %APPDATA%\mail.ru\agent\mra\smiles\flash\rabotaet.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\rabotaet.swf.crypto_ayyqn1v06n
from %APPDATA%\mail.ru\agent\mra\smiles\flash\missyou.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\missyou.swf.crypto_q64pfytfdb
from %APPDATA%\mail.ru\agent\mra\smiles\flash\mad dog.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\mad dog.swf.crypto_wsminu3wis
from %APPDATA%\mail.ru\agent\mra\smiles\flash\love_bear_rose.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\love_bear_rose.swf.crypto_wsminu3wis
from %APPDATA%\mail.ru\agent\mra\smiles\flash\love_bear_kiss.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\love_bear_kiss.swf.crypto_wsminu3wis
from %APPDATA%\mail.ru\agent\mra\smiles\flash\love_bear_hugs.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\love_bear_hugs.swf.crypto_j3g3fvwvjw
from %APPDATA%\icqm\icq\smiles\smiles\set06\s015.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s015.gif.crypto_8yfz5k99v0
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\8march\hug.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\8march\hug.gif.crypto_f1tmudl8ia
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\fingal.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\fingal.gif.crypto_6xc92jjd51
from %APPDATA%\mail.ru\agent\mra\smiles\flash\laugh.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\laugh.swf.crypto_6e9o7wqukz
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\appl.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\appl.gif.crypto_zuon2gntbm
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\fight.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\fight.gif.crypto_6xc92jjd51
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\eat.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\eat.gif.crypto_6xc92jjd51
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\devil.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\devil.gif.crypto_6xc92jjd51
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\dance.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\dance.gif.crypto_cjv2aftuai
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\cry.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\cry.gif.crypto_cjv2aftuai
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\could.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\could.gif.crypto_cjv2aftuai
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\book.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\book.gif.crypto_cjv2aftuai
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\blew.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\blew.gif.crypto_zuon2gntbm
from %APPDATA%\mail.ru\agent\mra\smiles\flash\likeu.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\likeu.swf.crypto_j3g3fvwvjw
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\8march\doll.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\8march\doll.gif.crypto_8y50uapoou
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\beer.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\beer.gif.crypto_zuon2gntbm
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\flowr.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\flowr.gif.crypto_jmjoajpe4x
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\8march\sunburn.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\8march\sunburn.gif.crypto_5f7gacxag2
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\8march\shoes.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\8march\shoes.gif.crypto_5f7gacxag2
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\8march\ring.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\8march\ring.gif.crypto_5f7gacxag2
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\8march\perfume.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\8march\perfume.gif.crypto_sq012dr9h6
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\8march\new_dress.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\8march\new_dress.gif.crypto_sq012dr9h6
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\8march\mad.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\8march\mad.gif.crypto_sq012dr9h6
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\8march\love.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\8march\love.gif.crypto_f1tmudl8ia
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\8march\joy.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\8march\joy.gif.crypto_f1tmudl8ia
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\beauty.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\beauty.gif.crypto_zuon2gntbm
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\angel.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\animated\angel.gif.crypto_5f7gacxag2
from %APPDATA%\mail.ru\agent\mra\smiles\smiles\8march\drink.gif to %APPDATA%\mail.ru\agent\mra\smiles\smiles\8march\drink.gif.crypto_lncf29vpnq
from %APPDATA%\mail.ru\agent\mra\smiles\flash\krizis.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\krizis.swf.crypto_czshfs0bpg
from %APPDATA%\mail.ru\agent\mra\smiles\flash\kot_wow.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\kot_wow.swf.crypto_czshfs0bpg
from %APPDATA%\mail.ru\agent\mra\smiles\flash\bad_cold.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\bad_cold.swf.crypto_3b7jsa6xr6
from %APPDATA%\icqm\icq\smiles\statuses\set01\doma.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\doma.ico.crypto_ykdlp060i1
from %APPDATA%\mail.ru\agent\mra\html\uz\loading\progress_agent.gif to %APPDATA%\mail.ru\agent\mra\html\uz\loading\progress_agent.gif.crypto_5c09k1c89z
from %APPDATA%\mail.ru\agent\mra\html\ua\loading\progress_agent.gif to %APPDATA%\mail.ru\agent\mra\html\ua\loading\progress_agent.gif.crypto_lk68cyangn
from %APPDATA%\mail.ru\agent\mra\html\tr\loading\progress_agent.gif to %APPDATA%\mail.ru\agent\mra\html\tr\loading\progress_agent.gif.crypto_vonk4scjsv
from %APPDATA%\mail.ru\agent\mra\html\ru\loading\progress_agent.gif to %APPDATA%\mail.ru\agent\mra\html\ru\loading\progress_agent.gif.crypto_xogbxjhubo
from %APPDATA%\mail.ru\agent\mra\html\pt\loading\progress_agent.gif to %APPDATA%\mail.ru\agent\mra\html\pt\loading\progress_agent.gif.crypto_77xaq9kq5s
from %APPDATA%\mail.ru\agent\mra\html\kz\loading\progress_agent.gif to %APPDATA%\mail.ru\agent\mra\html\kz\loading\progress_agent.gif.crypto_yc0zn5j8ta
from %APPDATA%\mail.ru\agent\mra\html\en\loading\progress_agent.gif to %APPDATA%\mail.ru\agent\mra\html\en\loading\progress_agent.gif.crypto_wqw8dw6sef
from %APPDATA%\mail.ru\agent\mra\html\de\loading\progress_agent.gif to %APPDATA%\mail.ru\agent\mra\html\de\loading\progress_agent.gif.crypto_5baza2g55m
from %APPDATA%\mail.ru\agent\mra\smiles\flash\beer.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\beer.swf.crypto_yqpqjewglp
from %APPDATA%\mail.ru\agent\mra\smiles\flash\angel.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\angel.swf.crypto_qm14kb0wr9
from %APPDATA%\mail.ru\agent\mra\fonts\segoesc.ttf to %APPDATA%\mail.ru\agent\mra\fonts\segoesc.ttf.crypto_wnq1mklr7b
from %APPDATA%\mail.ru\agent\mra\dll\mratag.dll to %APPDATA%\mail.ru\agent\mra\dll\mratag.dll.crypto_wnq1mklr7b
from %APPDATA%\mail.ru\agent\mra\dll\mousephone.dll to %APPDATA%\mail.ru\agent\mra\dll\mousephone.dll.crypto_jyjmelfq8f
from %APPDATA%\mail.ru\agent\mra\dll\mailrusputnik.exe to %APPDATA%\mail.ru\agent\mra\dll\mailrusputnik.exe.crypto_jyjmelfq8f
from %APPDATA%\mail.ru\agent\mra\dll\altergeo.msi to %APPDATA%\mail.ru\agent\mra\dll\altergeo.msi.crypto_pk2fnhp7dw
from %APPDATA%\mail.ru\agent\mra\database\citylist_uz.csv to %APPDATA%\mail.ru\agent\mra\database\citylist_uz.csv.crypto_pk2fnhp7dw
from %APPDATA%\mail.ru\agent\mra\database\citylist_ua.csv to %APPDATA%\mail.ru\agent\mra\database\citylist_ua.csv.crypto_pk2fnhp7dw
from %APPDATA%\mail.ru\agent\mra\database\citylist_tr.csv to %APPDATA%\mail.ru\agent\mra\database\citylist_tr.csv.crypto_cvv0eij6e0
from %APPDATA%\mail.ru\agent\mra\database\citylist_ru.csv to %APPDATA%\mail.ru\agent\mra\database\citylist_ru.csv.crypto_cvv0eij6e0
from %APPDATA%\mail.ru\agent\mra\database\citylist_kz.csv to %APPDATA%\mail.ru\agent\mra\database\citylist_kz.csv.crypto_cvv0eij6e0
from %APPDATA%\mail.ru\agent\mra\html\cz\loading\progress_agent.gif to %APPDATA%\mail.ru\agent\mra\html\cz\loading\progress_agent.gif.crypto_8t9ju08jcd
from %APPDATA%\icqm\icq\smiles\statuses\set01\seekfriends.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\seekfriends.ico.crypto_gcew4c2atk
from %APPDATA%\mail.ru\agent\mra\smiles\flash\kot_spasibo.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\kot_spasibo.swf.crypto_zal27suapk
from %APPDATA%\mail.ru\agent\mra\smiles\flash\bodun.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\bodun.swf.crypto_yqpqjewglp
from %APPDATA%\mail.ru\agent\mra\smiles\flash\akitaka.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\akitaka.swf.crypto_qm14kb0wr9
from %APPDATA%\mail.ru\agent\mra\smiles\flash\duh.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\duh.swf.crypto_8e2ezmw52s
from %APPDATA%\mail.ru\agent\mra\smiles\flash\kot_obida.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\kot_obida.swf.crypto_5w3ufo4rv1
from %APPDATA%\mail.ru\agent\mra\smiles\flash\kot_nedutza.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\kot_nedutza.swf.crypto_5w3ufo4rv1
from %APPDATA%\mail.ru\agent\mra\smiles\flash\kot_goodbye.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\kot_goodbye.swf.crypto_s7xf7pyqv4
from %APPDATA%\mail.ru\agent\mra\smiles\flash\kot_cool.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\kot_cool.swf.crypto_s7xf7pyqv4
from %APPDATA%\mail.ru\agent\mra\smiles\flash\kisses.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\kisses.swf.crypto_fiq0zqspw8
from %APPDATA%\mail.ru\agent\mra\smiles\flash\joy.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\joy.swf.crypto_fiq0zqspw8
from %APPDATA%\mail.ru\agent\mra\smiles\flash\information.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\information.swf.crypto_l39t7m261p
from %APPDATA%\mail.ru\agent\mra\smiles\flash\guby.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\guby.swf.crypto_l39t7m261p
from %APPDATA%\mail.ru\agent\mra\smiles\flash\drako_zombie.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\drako_zombie.swf.crypto_e0l77j6m79
from %APPDATA%\mail.ru\agent\mra\smiles\flash\gangsta.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\gangsta.swf.crypto_8e2ezmw52s
from %APPDATA%\mail.ru\agent\mra\smiles\flash\drako_snegyrka.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\drako_snegyrka.swf.crypto_1beszj0m8d
from %APPDATA%\mail.ru\agent\mra\smiles\skin.txt to %APPDATA%\mail.ru\agent\mra\smiles\skin.txt.crypto_jjdhk74cxu
from %APPDATA%\mail.ru\agent\mra\smiles\flash\drako_opyatnica.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\drako_opyatnica.swf.crypto_om7drkul9g
from %APPDATA%\mail.ru\agent\mra\smiles\flash\drako_love.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\drako_love.swf.crypto_u7q6zg42ex
from %APPDATA%\mail.ru\agent\mra\smiles\flash\drako_koster.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\drako_koster.swf.crypto_hijrrhy1f1
from %APPDATA%\mail.ru\agent\mra\smiles\flash\drako_bolnoy.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\drako_bolnoy.swf.crypto_n42k0d8iki
from %APPDATA%\mail.ru\agent\mra\smiles\flash\devochka.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\devochka.swf.crypto_n42k0d8iki
from %APPDATA%\mail.ru\agent\mra\smiles\flash\chillout.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\chillout.swf.crypto_n42k0d8iki
from %APPDATA%\mail.ru\agent\mra\smiles\flash\canthearu.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\canthearu.swf.crypto_afv5sd2hll
from %APPDATA%\mail.ru\agent\mra\smiles\flash\boo.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\boo.swf.crypto_afv5sd2hll
from %APPDATA%\mail.ru\agent\mra\smiles\flash\beback.swf to %APPDATA%\mail.ru\agent\mra\smiles\flash\beback.swf.crypto_3b7jsa6xr6
from %APPDATA%\thunderbird\profiles\wjj9aet2.default\places.sqlite to %APPDATA%\thunderbird\profiles\wjj9aet2.default\places.sqlite.crypto_0eqekw9dn7
from %APPDATA%\winamp\plugins\milkdrop2\milk2_msg.ini to %APPDATA%\winamp\plugins\milkdrop2\milk2_msg.ini.crypto_el2nk31gb2
from %APPDATA%\icqm\icq\smiles\statuses\set01\cherep.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\cherep.ico.crypto_lv66h10zj4
from %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_connecting.ico to %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_connecting.ico.crypto_g62iopw6fd
from %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_chat.ico to %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_chat.ico.crypto_g62iopw6fd
from %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_away.ico to %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_away.ico.crypto_g62iopw6fd
from %APPDATA%\icqm\icq\smiles\statuses\icq\24bit.ico to %APPDATA%\icqm\icq\smiles\statuses\icq\24bit.ico.crypto_rspo8rk4gk
from %APPDATA%\icqm\icq\smiles\statuses\gtalk\gtalk_status_online.ico to %APPDATA%\icqm\icq\smiles\statuses\gtalk\gtalk_status_online.ico.crypto_rspo8rk4gk
from %APPDATA%\icqm\icq\smiles\statuses\gtalk\gtalk_status_offline.ico to %APPDATA%\icqm\icq\smiles\statuses\gtalk\gtalk_status_offline.ico.crypto_rspo8rk4gk
from %APPDATA%\icqm\icq\smiles\statuses\gtalk\gtalk_status_gray.ico to %APPDATA%\icqm\icq\smiles\statuses\gtalk\gtalk_status_gray.ico.crypto_rspo8rk4gk
from %APPDATA%\icqm\icq\smiles\statuses\gtalk\gtalk_status_busy.ico to %APPDATA%\icqm\icq\smiles\statuses\gtalk\gtalk_status_busy.ico.crypto_xd7hgnull1
from %APPDATA%\icqm\icq\smiles\statuses\gtalk\gtalk_status_away.ico to %APPDATA%\icqm\icq\smiles\statuses\gtalk\gtalk_status_away.ico.crypto_xd7hgnull1
from %APPDATA%\icqm\icq\smiles\statuses\aim\aim_status_online.ico to %APPDATA%\icqm\icq\smiles\statuses\aim\aim_status_online.ico.crypto_ko128nokm4
from %APPDATA%\icqm\icq\smiles\statuses\aim\aim_status_offline.ico to %APPDATA%\icqm\icq\smiles\statuses\aim\aim_status_offline.ico.crypto_ko128nokm4
from %APPDATA%\icqm\icq\smiles\statuses\aim\aim_status_gray.ico to %APPDATA%\icqm\icq\smiles\statuses\aim\aim_status_gray.ico.crypto_ko128nokm4
from %APPDATA%\icqm\icq\smiles\statuses\aim\aim_status_busy.ico to %APPDATA%\icqm\icq\smiles\statuses\aim\aim_status_busy.ico.crypto_pajvgjy1rl
from %APPDATA%\icqm\icq\smiles\statuses\aim\aim_status_away.ico to %APPDATA%\icqm\icq\smiles\statuses\aim\aim_status_away.ico.crypto_pajvgjy1rl
from %APPDATA%\icqm\icq\smiles\smiles\valentine\want_you.gif to %APPDATA%\icqm\icq\smiles\smiles\valentine\want_you.gif.crypto_dldg8ks0sp
from %APPDATA%\icqm\icq\smiles\smiles\valentine\undress.gif to %APPDATA%\icqm\icq\smiles\smiles\valentine\undress.gif.crypto_0w610lmzts
from %APPDATA%\icqm\icq\smiles\smiles\valentine\on_wings.gif to %APPDATA%\icqm\icq\smiles\smiles\valentine\on_wings.gif.crypto_0w610lmzts
from %APPDATA%\icqm\icq\smiles\smiles\valentine\lets_play.gif to %APPDATA%\icqm\icq\smiles\smiles\valentine\lets_play.gif.crypto_0w610lmzts
from %APPDATA%\icqm\icq\smiles\smiles\valentine\kissed.gif to %APPDATA%\icqm\icq\smiles\smiles\valentine\kissed.gif.crypto_6hpt8hwgy9
from %APPDATA%\icqm\icq\smiles\smiles\valentine\kiss.gif to %APPDATA%\icqm\icq\smiles\smiles\valentine\kiss.gif.crypto_6hpt8hwgy9
from %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_gray.ico to %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_gray.ico.crypto_bkkpgtmpaw
from %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_invisible.ico to %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_invisible.ico.crypto_bkkpgtmpaw
from %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_offline.ico to %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_offline.ico.crypto_bkkpgtmpaw
from %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_online.ico to %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_online.ico.crypto_bkkpgtmpaw
from %APPDATA%\icqm\icq\smiles\statuses\set01\102.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\102.ico.crypto_epcdqmjdil
from %APPDATA%\icqm\icq\smiles\statuses\set01\101_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\101_xp.ico.crypto_105yindcip
from %APPDATA%\icqm\icq\smiles\statuses\set01\101.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\101.ico.crypto_105yindcip
from %APPDATA%\icqm\icq\smiles\statuses\set01\100_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\100_xp.ico.crypto_7lorrjnuo6
from %APPDATA%\icqm\icq\smiles\statuses\set01\100.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\100.ico.crypto_7lorrjnuo6
from %APPDATA%\icqm\icq\smiles\statuses\jabber\seekfriends.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\seekfriends.ico.crypto_nttqjgl9uu
from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_online.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_online.ico.crypto_wxa2bam472
from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_offline.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_offline.ico.crypto_wxa2bam472
from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_invisible.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_invisible.ico.crypto_wxa2bam472
from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_gray.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_gray.ico.crypto_wxa2bam472
from %APPDATA%\icqm\icq\smiles\smiles\valentine\jealousy.gif to %APPDATA%\icqm\icq\smiles\smiles\valentine\jealousy.gif.crypto_6hpt8hwgy9
from %APPDATA%\icqm\icq\smiles\statuses\set01\102_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\102_xp.ico.crypto_epcdqmjdil
from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_away.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_away.ico.crypto_j84n3bg386
from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_odkl_wrong_data.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_odkl_wrong_data.ico.crypto_ptmgb7qkdn
from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_odkl_online.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_odkl_online.ico.crypto_ptmgb7qkdn
from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_odkl_offline.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_odkl_offline.ico.crypto_c4g138kjeq
from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_odkl_gray.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_odkl_gray.ico.crypto_c4g138kjeq
from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_odkl_connecting.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_odkl_connecting.ico.crypto_0f9mv8eieu
from %APPDATA%\icqm\icq\smiles\statuses\icq\status_mobile.ico to %APPDATA%\icqm\icq\smiles\statuses\icq\status_mobile.ico.crypto_vceqnwoa38
from %APPDATA%\icqm\icq\smiles\statuses\icq\seekfriends_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\icq\seekfriends_xp.ico.crypto_in8bfxi94b
from %APPDATA%\icqm\icq\smiles\statuses\icq\seekfriends.ico to %APPDATA%\icqm\icq\smiles\statuses\icq\seekfriends.ico.crypto_in8bfxi94b
from %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_wrong_data.ico to %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_wrong_data.ico.crypto_n9q4otsq9s
from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_chat.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_chat.ico.crypto_j84n3bg386
from %APPDATA%\icqm\icq\smiles\smiles\valentine\in_love.gif to %APPDATA%\icqm\icq\smiles\smiles\valentine\in_love.gif.crypto_tsif0hqfzd
from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_dnd.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_dnd.ico.crypto_j84n3bg386
from %APPDATA%\icqm\icq\smiles\smiles\valentine\broken_heart.gif to %APPDATA%\icqm\icq\smiles\smiles\valentine\broken_heart.gif.crypto_tsif0hqfzd
from %APPDATA%\icqm\icq\smiles\smiles\smiles\really.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\really.gif.crypto_4xsil2xmue
from %APPDATA%\icqm\icq\smiles\smiles\smiles\devil.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\devil.gif.crypto_d1audwzh6n
from %APPDATA%\icqm\icq\smiles\smiles\smiles\detzl.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\detzl.gif.crypto_d1audwzh6n
from %APPDATA%\icqm\icq\smiles\smiles\smiles\cry.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\cry.gif.crypto_0c3f5xtg7q
from %APPDATA%\icqm\icq\smiles\smiles\smiles\crocodile.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\crocodile.gif.crypto_0c3f5xtg7q
from %APPDATA%\icqm\icq\smiles\smiles\smiles\coolguy.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\coolguy.gif.crypto_0c3f5xtg7q
from %APPDATA%\icqm\icq\smiles\smiles\smiles\bullshit.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\bullshit.gif.crypto_0c3f5xtg7q
from %APPDATA%\icqm\icq\smiles\smiles\smiles\blink.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\blink.gif.crypto_6xm8dt3xc7
from %APPDATA%\icqm\icq\smiles\smiles\smiles\biggrin.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\biggrin.gif.crypto_t8ft5uxwdb
from %APPDATA%\icqm\icq\smiles\smiles\smiles\biganger.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\biganger.gif.crypto_t8ft5uxwdb
from %APPDATA%\icqm\icq\smiles\smiles\smiles\bee.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\bee.gif.crypto_t8ft5uxwdb
from %APPDATA%\icqm\icq\smiles\smiles\smiles\bazilio.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\bazilio.gif.crypto_zuymdq7eis
from %APPDATA%\icqm\icq\smiles\smiles\smiles\ass.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\ass.gif.crypto_zuymdq7eis
from %APPDATA%\icqm\icq\smiles\smiles\smiles\angry.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\angry.gif.crypto_m5r75r1djv
from %APPDATA%\icqm\icq\smiles\smiles\smiles\amazed.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\amazed.gif.crypto_m5r75r1djv
from %APPDATA%\icqm\icq\smiles\smiles\smiles\aaa.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\aaa.gif.crypto_m5r75r1djv
from %APPDATA%\icqm\icq\smiles\smiles\set06\s020.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s020.gif.crypto_m5r75r1djv
from %APPDATA%\icqm\icq\smiles\smiles\set06\s019.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s019.gif.crypto_9gksxrvckz
from %APPDATA%\icqm\icq\smiles\smiles\set06\s018.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s018.gif.crypto_9gksxrvckz
from %APPDATA%\icqm\icq\smiles\smiles\set06\s017.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s017.gif.crypto_2dw6xozsqj
from %APPDATA%\icqm\icq\smiles\smiles\set06\s016.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s016.gif.crypto_8yfz5k99v0
from %APPDATA%\icqm\icq\smiles\smiles\smiles\disappointed.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\disappointed.gif.crypto_d1audwzh6n
from %APPDATA%\icqm\icq\smiles\smiles\smiles\fist.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\fist.gif.crypto_qqg9lw5i6j
from %APPDATA%\icqm\icq\smiles\smiles\smiles\fuck.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\fuck.gif.crypto_qqg9lw5i6j
from %APPDATA%\icqm\icq\smiles\smiles\smiles\heart.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\heart.gif.crypto_qqg9lw5i6j
from %APPDATA%\icqm\icq\smiles\smiles\smiles\zloradstvo.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\zloradstvo.gif.crypto_i45qk9pqi9
from %APPDATA%\icqm\icq\smiles\smiles\smiles\victory.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\victory.gif.crypto_opnjt5z7nq
from %APPDATA%\icqm\icq\smiles\smiles\smiles\vampire.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\vampire.gif.crypto_opnjt5z7nq
from %APPDATA%\icqm\icq\smiles\smiles\smiles\think.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\think.gif.crypto_opnjt5z7nq
from %APPDATA%\icqm\icq\smiles\smiles\smiles\tears.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\tears.gif.crypto_b0h4k6t6ou
from %APPDATA%\icqm\icq\smiles\smiles\smiles\smile.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\smile.gif.crypto_b0h4k6t6ou
from %APPDATA%\icqm\icq\smiles\smiles\smiles\sleepy.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\sleepy.gif.crypto_b0h4k6t6ou
from %APPDATA%\icqm\icq\smiles\smiles\smiles\shy.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\shy.gif.crypto_hmzxt23ntb
from %APPDATA%\icqm\icq\smiles\smiles\smiles\sceptic.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\sceptic.gif.crypto_hmzxt23ntb
from %APPDATA%\icqm\icq\smiles\smiles\smiles\rrr.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\rrr.gif.crypto_hmzxt23ntb
from %APPDATA%\icqm\icq\smiles\smiles\valentine\dont_be_late.gif to %APPDATA%\icqm\icq\smiles\smiles\valentine\dont_be_late.gif.crypto_tsif0hqfzd
from %APPDATA%\icqm\icq\smiles\statuses\set01\103.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\103.ico.crypto_epcdqmjdil
from %APPDATA%\icqm\icq\smiles\smiles\smiles\pig.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\pig.gif.crypto_4xsil2xmue
from %APPDATA%\icqm\icq\smiles\smiles\smiles\oo.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\oo.gif.crypto_4xsil2xmue
from %APPDATA%\icqm\icq\smiles\smiles\smiles\ok.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\ok.gif.crypto_4xsil2xmue
from %APPDATA%\icqm\icq\smiles\smiles\smiles\live.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\live.gif.crypto_r8m3d3rlvi
from %APPDATA%\icqm\icq\smiles\smiles\smiles\laughter.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\laughter.gif.crypto_r8m3d3rlvi
from %APPDATA%\icqm\icq\smiles\smiles\smiles\kukes.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\kukes.gif.crypto_r8m3d3rlvi
from %APPDATA%\icqm\icq\smiles\smiles\smiles\koza_right.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\koza_right.gif.crypto_r8m3d3rlvi
from %APPDATA%\icqm\icq\smiles\smiles\smiles\koza_left.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\koza_left.gif.crypto_r8m3d3rlvi
from %APPDATA%\icqm\icq\smiles\smiles\smiles\kiss.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\kiss.gif.crypto_k4ygd0v112
from %APPDATA%\icqm\icq\smiles\smiles\smiles\hm.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\hm.gif.crypto_k4ygd0v112
from %APPDATA%\icqm\icq\smiles\smiles\smiles\plug.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\plug.gif.crypto_4xsil2xmue
from %APPDATA%\icqm\icq\smiles\smiles\smiles\die.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\die.gif.crypto_d1audwzh6n
from %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_dnd.ico to %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_dnd.ico.crypto_g62iopw6fd
from %APPDATA%\icqm\icq\smiles\statuses\set01\103_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\103_xp.ico.crypto_83tkiq9wd4
from %APPDATA%\icqm\icq\smiles\statuses\set01\88_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\88_xp.ico.crypto_jbautm15fa
from %APPDATA%\icqm\icq\smiles\statuses\set01\89_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\89_xp.ico.crypto_jbautm15fa
from %APPDATA%\icqm\icq\smiles\statuses\set01\88.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\88.ico.crypto_pxsn1icmkq
from %APPDATA%\icqm\icq\smiles\statuses\set01\87_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\87_xp.ico.crypto_pxsn1icmkq
from %APPDATA%\icqm\icq\smiles\statuses\set01\87.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\87.ico.crypto_pxsn1icmkq
from %APPDATA%\icqm\icq\smiles\statuses\set01\86_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\86_xp.ico.crypto_c8m8tj5llu
from %APPDATA%\icqm\icq\smiles\statuses\set01\86.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\86.ico.crypto_c8m8tj5llu
from %APPDATA%\icqm\icq\smiles\statuses\set01\85_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\85_xp.ico.crypto_c8m8tj5llu
from %APPDATA%\icqm\icq\smiles\statuses\set01\85.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\85.ico.crypto_zjftlkzkmy
from %APPDATA%\icqm\icq\smiles\statuses\set01\84_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\84_xp.ico.crypto_54ymtg91rf
from %APPDATA%\icqm\icq\smiles\statuses\set01\84.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\84.ico.crypto_54ymtg91rf
from %APPDATA%\icqm\icq\smiles\statuses\set01\83_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\83_xp.ico.crypto_sfr7lg30ri
from %APPDATA%\icqm\icq\smiles\statuses\set01\83.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\83.ico.crypto_sfr7lg30ri
from %APPDATA%\icqm\icq\smiles\statuses\set01\82_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\82_xp.ico.crypto_sfr7lg30ri
from %APPDATA%\icqm\icq\smiles\statuses\set01\82.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\82.ico.crypto_y1aztcdhxz
from %APPDATA%\icqm\icq\smiles\statuses\set01\81_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\81_xp.ico.crypto_y1aztcdhxz
from %APPDATA%\icqm\icq\smiles\statuses\set01\81.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\81.ico.crypto_y1aztcdhxz
from %APPDATA%\icqm\icq\smiles\statuses\set01\80_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\80_xp.ico.crypto_lc3lld7gx3
from %APPDATA%\icqm\icq\smiles\statuses\set01\80.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\80.ico.crypto_8nw6de1fy6
from %APPDATA%\icqm\icq\smiles\statuses\set01\79_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\79_xp.ico.crypto_8nw6de1fy6
from %APPDATA%\icqm\icq\smiles\statuses\set01\79.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\79.ico.crypto_8nw6de1fy6
from %APPDATA%\icqm\icq\smiles\statuses\set01\78_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\78_xp.ico.crypto_e8fymabw3n
from %APPDATA%\icqm\icq\smiles\statuses\set01\90.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\90.ico.crypto_jbautm15fa
from %APPDATA%\icqm\icq\smiles\statuses\set01\90_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\90_xp.ico.crypto_w0h91m86e6
from %APPDATA%\icqm\icq\smiles\statuses\set01\chat_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\chat_xp.ico.crypto_860r81uyk8
from %APPDATA%\icqm\icq\smiles\statuses\set01\96.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\96.ico.crypto_hah41vwtwh
from %APPDATA%\icqm\icq\smiles\statuses\set01\96_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\96_xp.ico.crypto_hah41vwtwh
from %APPDATA%\icqm\icq\smiles\statuses\set01\chat.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\chat.ico.crypto_860r81uyk8
from %APPDATA%\icqm\icq\smiles\statuses\set01\boleu.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\boleu.ico.crypto_esikhx4fpp
from %APPDATA%\icqm\icq\smiles\statuses\set01\belka.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\belka.ico.crypto_esikhx4fpp
from %APPDATA%\icqm\icq\smiles\statuses\set01\99_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\99_xp.ico.crypto_13b59yyeqt
from %APPDATA%\icqm\icq\smiles\statuses\set01\99.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\99.ico.crypto_13b59yyeqt
from %APPDATA%\icqm\icq\smiles\statuses\set01\98_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\98_xp.ico.crypto_7ouxhu8vv9
from %APPDATA%\icqm\icq\smiles\statuses\set01\98.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\98.ico.crypto_uznj9v2uwd
from %APPDATA%\icqm\icq\smiles\statuses\set01\97_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\97_xp.ico.crypto_uznj9v2uwd
from %APPDATA%\icqm\icq\smiles\statuses\set01\97.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\97.ico.crypto_hah41vwtwh
from %APPDATA%\icqm\icq\smiles\statuses\set01\89.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\89.ico.crypto_jbautm15fa
from %APPDATA%\icqm\icq\smiles\statuses\set01\78.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\78.ico.crypto_e8fymabw3n
from %APPDATA%\icqm\icq\smiles\statuses\set01\77.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\77.ico.crypto_1j8jea5v4r
from %APPDATA%\icqm\icq\smiles\statuses\set01\95.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\95.ico.crypto_nwzw9s6b2x
from %APPDATA%\icqm\icq\smiles\statuses\set01\94_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\94_xp.ico.crypto_a7th1s0a21
from %APPDATA%\icqm\icq\smiles\statuses\set01\94.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\94.ico.crypto_a7th1s0a21
from %APPDATA%\icqm\icq\smiles\statuses\set01\93_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\93_xp.ico.crypto_gtba9oar7i
from %APPDATA%\icqm\icq\smiles\statuses\set01\93.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\93.ico.crypto_gtba9oar7i
from %APPDATA%\icqm\icq\smiles\statuses\set01\92_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\92_xp.ico.crypto_345v1p4q8m
from %APPDATA%\icqm\icq\smiles\statuses\set01\92.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\92.ico.crypto_345v1p4q8m
from %APPDATA%\icqm\icq\smiles\statuses\set01\91_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\91_xp.ico.crypto_qfygtqyp9p
from %APPDATA%\icqm\icq\smiles\statuses\set01\91.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\91.ico.crypto_qfygtqyp9p
from %APPDATA%\icqm\icq\smiles\statuses\set01\95_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\95_xp.ico.crypto_nwzw9s6b2x
from %APPDATA%\icqm\icq\smiles\statuses\set01\77_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\77_xp.ico.crypto_1j8jea5v4r
from %APPDATA%\icqm\icq\smiles\statuses\set01\76_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\76_xp.ico.crypto_75rcm7fd98
from %APPDATA%\icqm\icq\smiles\statuses\set01\104.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\104.ico.crypto_83tkiq9wd4
from %APPDATA%\icqm\icq\smiles\statuses\set01\57_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\57_xp.ico.crypto_5kv0yshi5d
from %APPDATA%\icqm\icq\smiles\statuses\set01\62_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\62_xp.ico.crypto_pdp16vj3yp
from %APPDATA%\icqm\icq\smiles\statuses\set01\62.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\62.ico.crypto_pdp16vj3yp
from %APPDATA%\icqm\icq\smiles\statuses\set01\61_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\61_xp.ico.crypto_pdp16vj3yp
from %APPDATA%\icqm\icq\smiles\statuses\set01\61.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\61.ico.crypto_pdp16vj3yp
from %APPDATA%\icqm\icq\smiles\statuses\set01\60_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\60_xp.ico.crypto_cojmyvd2zs
from %APPDATA%\icqm\icq\smiles\statuses\set01\60.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\60.ico.crypto_cojmyvd2zs
from %APPDATA%\icqm\icq\smiles\statuses\set01\59_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\59_xp.ico.crypto_cojmyvd2zs
from %APPDATA%\icqm\icq\smiles\statuses\set01\59.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\59.ico.crypto_zzc8qw710w
from %APPDATA%\icqm\icq\smiles\statuses\set01\58_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\58_xp.ico.crypto_zzc8qw710w
from %APPDATA%\icqm\icq\smiles\statuses\set01\dnd.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\dnd.ico.crypto_lv66h10zj4
from %APPDATA%\icqm\icq\smiles\statuses\set01\63_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\63_xp.ico.crypto_jr79yz9mt8
from %APPDATA%\icqm\icq\smiles\statuses\set01\57.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\57.ico.crypto_5kv0yshi5d
from %APPDATA%\icqm\icq\smiles\statuses\set01\56_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\56_xp.ico.crypto_svolqtbh6g
from %APPDATA%\icqm\icq\smiles\statuses\set01\56.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\56.ico.crypto_svolqtbh6g
from %APPDATA%\icqm\icq\smiles\statuses\set01\13_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\13_xp.ico.crypto_svolqtbh6g
from %APPDATA%\icqm\icq\smiles\statuses\set01\13.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\13.ico.crypto_svolqtbh6g
from %APPDATA%\icqm\icq\smiles\statuses\set01\12_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\12_xp.ico.crypto_yh7eyplybx
from %APPDATA%\icqm\icq\smiles\statuses\set01\12.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\12.ico.crypto_yh7eyplybx
from %APPDATA%\icqm\icq\smiles\statuses\set01\11_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\11_xp.ico.crypto_ls0zqpfxc1
from %APPDATA%\icqm\icq\smiles\statuses\set01\11.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\11.ico.crypto_ls0zqpfxc1
from %APPDATA%\icqm\icq\smiles\statuses\set01\104_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\104_xp.ico.crypto_83tkiq9wd4
from %APPDATA%\icqm\icq\smiles\statuses\set01\58.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\58.ico.crypto_zzc8qw710w
from %APPDATA%\icqm\icq\smiles\statuses\set01\dnd_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\dnd_xp.ico.crypto_lv66h10zj4
from %APPDATA%\icqm\icq\smiles\statuses\set01\64.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\64.ico.crypto_jr79yz9mt8
from %APPDATA%\icqm\icq\smiles\statuses\set01\65_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\65_xp.ico.crypto_wgeo6yfnt4
from %APPDATA%\icqm\icq\smiles\statuses\set01\64_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\64_xp.ico.crypto_wgeo6yfnt4
from %APPDATA%\icqm\icq\smiles\statuses\set01\76.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\76.ico.crypto_75rcm7fd98
from %APPDATA%\icqm\icq\smiles\statuses\set01\75_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\75_xp.ico.crypto_ugkxe79cab
from %APPDATA%\icqm\icq\smiles\statuses\set01\75.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\75.ico.crypto_ugkxe79cab
from %APPDATA%\icqm\icq\smiles\statuses\set01\74_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\74_xp.ico.crypto_ugkxe79cab
from %APPDATA%\icqm\icq\smiles\statuses\set01\74.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\74.ico.crypto_hrei683bbf
from %APPDATA%\icqm\icq\smiles\statuses\set01\73_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\73_xp.ico.crypto_hrei683bbf
from %APPDATA%\icqm\icq\smiles\statuses\set01\73.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\73.ico.crypto_hrei683bbf
from %APPDATA%\icqm\icq\smiles\statuses\set01\72_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\72_xp.ico.crypto_ncwbe4dsgw
from %APPDATA%\icqm\icq\smiles\statuses\set01\72.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\72.ico.crypto_ncwbe4dsgw
from %APPDATA%\icqm\icq\smiles\statuses\set01\65.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\65.ico.crypto_wgeo6yfnt4
from %APPDATA%\icqm\icq\smiles\statuses\set01\71_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\71_xp.ico.crypto_anqw657rhz
from %APPDATA%\icqm\icq\smiles\statuses\set01\63.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\63.ico.crypto_jr79yz9mt8
from %APPDATA%\icqm\icq\smiles\statuses\set01\70.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\70.ico.crypto_anqw657rhz
from %APPDATA%\icqm\icq\smiles\statuses\set01\69_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\69_xp.ico.crypto_g98pe1h8mg
from %APPDATA%\icqm\icq\smiles\statuses\set01\69.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\69.ico.crypto_g98pe1h8mg
from %APPDATA%\icqm\icq\smiles\statuses\set01\68_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\68_xp.ico.crypto_g98pe1h8mg
from %APPDATA%\icqm\icq\smiles\statuses\set01\68.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\68.ico.crypto_3k2a61b7nk
from %APPDATA%\icqm\icq\smiles\statuses\set01\67_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\67_xp.ico.crypto_3k2a61b7nk
from %APPDATA%\icqm\icq\smiles\statuses\set01\67.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\67.ico.crypto_qvvvy256nn
from %APPDATA%\icqm\icq\smiles\statuses\set01\66_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\66_xp.ico.crypto_qvvvy256nn
from %APPDATA%\icqm\icq\smiles\statuses\set01\66.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\66.ico.crypto_qvvvy256nn
from %APPDATA%\icqm\icq\smiles\statuses\set01\71.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\71.ico.crypto_anqw657rhz
from %APPDATA%\winamp\plugins\ml\ml_online.ini to %APPDATA%\winamp\plugins\ml\ml_online.ini.crypto_ra92s27hay

Modifies the following files

%LOCALAPPDATA%\gdipfontcachev1.dat
%LOCALAPPDATA%\google\chrome\user data\safe browsing extension blacklist
%LOCALAPPDATA%\google\chrome\user data\safe browsing download whitelist
%LOCALAPPDATA%\google\chrome\user data\safe browsing download
%LOCALAPPDATA%\google\chrome\user data\safe browsing csd whitelist
%LOCALAPPDATA%\google\chrome\user data\safe browsing cookies-journal
%LOCALAPPDATA%\google\chrome\user data\safe browsing cookies
%LOCALAPPDATA%\google\chrome\user data\safe browsing bloom prefix set
%LOCALAPPDATA%\google\chrome\user data\safe browsing bloom
%LOCALAPPDATA%\google\chrome\user data\local state
%LOCALAPPDATA%\google\chrome\user data\chrome_shutdown_ms.txt
%LOCALAPPDATA%\applicationhistory\ngen.exe.2c05686e.ini
%LOCALAPPDATA%\adobe\color\profiles\wsrgb.icc
%LOCALAPPDATA%\adobe\color\profiles\wscrgb.icc
%LOCALAPPDATA%\adobe\color\acecache11.lst
%LOCALAPPDATA%\adobe\acrocef\dc\acrobat\cookie\cookies
%LOCALAPPDATA%\adobe\acrocef\dc\acrobat\cache\index
%LOCALAPPDATA%\adobe\acrocef\dc\acrobat\cache\data_3
%LOCALAPPDATA%\adobe\acrocef\dc\acrobat\cache\data_2
%LOCALAPPDATA%\adobe\acrocef\dc\acrobat\cache\data_1
%LOCALAPPDATA%\adobe\acrocef\dc\acrobat\cache\data_0
%LOCALAPPDATA%\adobe\acrocef\dc\acrobat\cache\chromedwritefontcache
%LOCALAPPDATA%\adobe\acrobat\dc\cache\acrofnt15.lst
%LOCALAPPDATA%\adobe\acrobat\dc\usercache.bin
%LOCALAPPDATA%\adobe\acrobat\dc\shareddataevents
%LOCALAPPDATA%\adobe\acrobat\dc\iconcacherdr.dat
%LOCALAPPDATA%\adobe\acrobat\dc\adobesysfnt15.lst
%LOCALAPPDATA%\adobe\acrobat\dc\adobecmapfnt15.lst
%LOCALAPPDATA%\google\chrome\user data\safe browsing inclusion whitelist
%LOCALAPPDATA%\google\chrome\user data\safe browsing ip blacklist

Modifies multiple files.

Substitutes the following files

%APPDATA%\Microsoft\Protect\CREDHIST

Modifies user data files (Trojan.Encoder).

Changes user data files extensions (Trojan.Encoder).

Network activity

Connects to

'sm##.gmail.com':587

TCP

Other

'sm##.gmail.com':587

UDP

DNS ASK sm##.gmail.com

Tecnologie

Termini

Formazione ed informazione

Falsi miti

Technical Information

Curing recommendations

Free trial