La mia libreria
La mia libreria

+ Aggiungi alla libreria

Supporto
Supporto 24/7 | Regole per contattare

Richieste

Profile

Trojan.Encoder.37582

Aggiunto al database dei virus Dr.Web: 2023-05-17

La descrizione è stata aggiunta:

Technical Information

To ensure autorun and distribution
Changes the following executable system files
  • <SYSTEM32>\taskhost.exe
Malicious functions
Injects code into
the following system processes:
  • %WINDIR%\explorer.exe
Modifies file system
Creates the following files
  • %ALLUSERSPROFILE%\microsoft\crypto\rsa\machinekeys\08e575673cce10c72090304839888e02_d4602615-9d50-4880-be41-678935e93eaa
  • C:\documents and settings\default\documents\my music\ryukreadme.txt
  • C:\documents and settings\default\documents\my pictures\ryukreadme.txt
  • C:\documents and settings\default\documents\my videos\ryukreadme.txt
  • C:\documents and settings\default\downloads\ryukreadme.txt
  • C:\documents and settings\default\favorites\ryukreadme.txt
  • C:\documents and settings\default\links\ryukreadme.txt
  • C:\documents and settings\default\ntuser.dat
  • C:\documents and settings\default\appdata\roaming\microsoft\windows\network shortcuts\ryukreadme.txt
  • C:\documents and settings\default\ntuser.dat.log
  • C:\documents and settings\default\ntuser.dat.log1
  • C:\documents and settings\default\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tm.blf
  • C:\documents and settings\default\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000001.regtrans-ms
  • C:\documents and settings\default\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000002.regtrans-ms
  • C:\documents and settings\default\sendto\desktop.ini
  • C:\documents and settings\default\sendto\fax recipient.lnk
  • C:\documents and settings\default\start menu\programs\accessories\accessibility\desktop.ini
  • C:\documents and settings\default\desktop\ryukreadme.txt
  • C:\documents and settings\default\documents\ryukreadme.txt
  • C:\documents and settings\default\appdata\roaming\microsoft\windows\templates\ryukreadme.txt
  • C:\documents and settings\default\appdata\roaming\microsoft\windows\start menu\programs\maintenance\ryukreadme.txt
  • C:\documents and settings\default\appdata\roaming\microsoft\windows\start menu\programs\accessories\system tools\ryukreadme.txt
  • C:\documents and settings\default\appdata\roaming\media center programs\ryukreadme.txt
  • C:\documents and settings\default\appdata\roaming\microsoft\ryukreadme.txt
  • C:\documents and settings\default\appdata\roaming\microsoft\internet explorer\ryukreadme.txt
  • C:\documents and settings\default\appdata\roaming\microsoft\internet explorer\quick launch\ryukreadme.txt
  • C:\documents and settings\default\appdata\roaming\microsoft\internet explorer\quick launch\desktop.ini
  • C:\documents and settings\default\appdata\roaming\microsoft\windows\ryukreadme.txt
  • C:\documents and settings\default\appdata\roaming\microsoft\internet explorer\quick launch\window switcher.lnk
  • C:\documents and settings\default\start menu\programs\accessories\accessibility\on-screen keyboard.lnk
  • C:\documents and settings\default\saved games\ryukreadme.txt
  • C:\documents and settings\default\appdata\roaming\microsoft\windows\cookies\ryukreadme.txt
  • C:\documents and settings\default\appdata\roaming\microsoft\internet explorer\quick launch\shows desktop.lnk
  • C:\documents and settings\default\appdata\roaming\microsoft\windows\recent\ryukreadme.txt
  • C:\documents and settings\default\appdata\roaming\microsoft\windows\sendto\ryukreadme.txt
  • C:\documents and settings\default\appdata\roaming\microsoft\windows\start menu\ryukreadme.txt
  • C:\documents and settings\default\appdata\roaming\microsoft\windows\start menu\programs\ryukreadme.txt
  • C:\documents and settings\default\appdata\roaming\microsoft\windows\start menu\programs\accessories\ryukreadme.txt
  • C:\documents and settings\default\appdata\roaming\microsoft\windows\start menu\programs\accessories\accessibility\ryukreadme.txt
  • C:\documents and settings\default\appdata\roaming\ryukreadme.txt
  • C:\documents and settings\default\appdata\roaming\microsoft\windows\printer shortcuts\ryukreadme.txt
  • C:\documents and settings\default\start menu\programs\accessories\accessibility\magnify.lnk
  • C:\documents and settings\default\start menu\programs\accessories\accessibility\ease of access.lnk
  • C:\documents and settings\default\start menu\programs\accessories\accessibility\narrator.lnk
  • C:\documents and settings\public\recorded tv\sample media\desktop.ini
  • C:\documents and settings\public\recorded tv\sample media\win7_scenic-demoshort_raw.wtv
  • C:\documents and settings\user\ryukreadme.txt
  • C:\documents and settings\user\appdata\ryukreadme.txt
  • C:\documents and settings\user\appdata\local\ryukreadme.txt
  • C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\application ...
  • C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\microsoft\fe...
  • C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\microsoft\in...
  • C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\microsoft\wi...
  • C:\documents and settings\default\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\applicati...
  • C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\temp\dd_vcre...
  • C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\thunderbird\...
  • C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\temp\microso...
  • C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\microsoft\feeds\{5588acfd-643...
  • C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\microsoft\feeds\feeds for uni...
  • C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\microsoft\media player\sync p...
  • C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\temp\microsoft visual c++ 201...
  • C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\thunderbird\profiles\npsdfqy3...
  • C:\documents and settings\public\recorded tv\sample media\ryukreadme.txt
  • C:\documents and settings\default\start menu\programs\maintenance\help.lnk
  • C:\documents and settings\public\recorded tv\desktop.ini
  • C:\documents and settings\default\start menu\programs\accessories\system tools\desktop.ini
  • C:\documents and settings\default\start menu\programs\accessories\desktop.ini
  • C:\documents and settings\default\start menu\programs\accessories\notepad.lnk
  • C:\documents and settings\default\start menu\programs\accessories\command prompt.lnk
  • C:\documents and settings\default\start menu\programs\accessories\run.lnk
  • C:\documents and settings\default\start menu\programs\accessories\system tools\control panel.lnk
  • C:\documents and settings\default\start menu\programs\maintenance\desktop.ini
  • C:\documents and settings\default\start menu\programs\accessories\system tools\private character editor.lnk
  • C:\documents and settings\default\start menu\programs\accessories\system tools\computer.lnk
  • C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\thunderbird\profiles\npsdfqy3.default-release\...
  • C:\documents and settings\public\libraries\desktop.ini
  • C:\documents and settings\default\start menu\programs\accessories\windows explorer.lnk
  • C:\documents and settings\public\ryukreadme.txt
  • C:\documents and settings\desktop.ini
  • C:\documents and settings\public\desktop.ini
  • C:\documents and settings\public\downloads\ryukreadme.txt
  • C:\documents and settings\public\downloads\desktop.ini
  • C:\documents and settings\public\libraries\ryukreadme.txt
  • C:\documents and settings\public\libraries\recordedtv.library-ms
  • C:\documents and settings\public\recorded tv\ryukreadme.txt
  • C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\microsoft\me...
  • C:\documents and settings\default\appdata\local\ryukreadme.txt
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\package cache\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\packages...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\package cache\{13a4ee...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\package cache\{37b8f9...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\package cache\{42667d...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\package cache\{6cd9e9...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\package cache\{929fbd...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\package cache\{9d29fc...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\package cache\{a749d8...
  • C:\documents and settings\all users\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\ryukreadme.txt
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\package cache\{b17552...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\package cache\{cf2bea...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\package cache\{e699e0...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\package cache\{ec9807...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\package cache\{f1b0fb...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\package cache\{f8cfeb...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\start menu\programs\a...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\start menu\programs\m...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\microsoft\search\data...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\package cache\42d5bec...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\microsoft\assistance\...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\microsoft\device stag...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\application data\star...
  • D:\$recycle.bin\ryukreadme.txt
  • D:\$recycle.bin\s-1-5-21-1238866942-1249195528-555854008-1000\ryukreadme.txt
  • C:\ryukreadme.txt
  • C:\documents and settings\ryukreadme.txt
  • C:\documents and settings\all users\ryukreadme.txt
  • C:\documents and settings\all users\adobe\ryukreadme.txt
  • C:\documents and settings\all users\adobe\setup\ryukreadme.txt
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\microsoft\crypto\rsa\machinekeys\08e57...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\package cache\{bd95a8...
  • C:\documents and settings\all users\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\abcpy.ini
  • C:\documents and settings\all users\application data\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\acrordrdcupd1501020056.msp
  • C:\documents and settings\all users\application data\application data\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\data1.cab
  • C:\documents and settings\all users\application data\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\acroread.msi
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\application data\appl...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\application data\docu...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\application data\micr...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\application data\pack...
  • D:\ryukreadme.txt
  • C:\documents and settings\all users\application data\application data\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\setup.ini
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\microsoft\crypto\rsa\s-1-5-18\6d14e4b1...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\microsoft\search\data\applications\win...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\microsoft\windows defender\definition ...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{b175520c-86a2-35a7-8619-86dc379688b9}v11...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{e699e009-1c3c-4e50-9b57-2b39f0954c7f}v14...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{ec9807de-b577-47b1-a024-0251805acf24}v14...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{f1b0fb3a-e0ea-47a6-9383-3650655403b0}v14...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\start menu\programs\microsoft office\microsoft office 2...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\package cache\{42667d2e-b054-46c1-9d46-2ee1332c14c1}v14.29.30133\package...
  • C:\documents and settings\default\appdata\ryukreadme.txt
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\package cache\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\packages...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\package cache\{9d29fc96-9eee-4253-943f-96b3bbfdd0b6}v14.16.27024\package...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\package cache\{6cd9e9ed-906d-4196-8dc3-f987d2f6615f}v14.29.30133\package...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\package cache\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\packages...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\package cache\{e699e009-1c3c-4e50-9b57-2b39f0954c7f}v14.29.30133\package...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\package cache\{f1b0fb3a-e0ea-47a6-9383-3650655403b0}v14.16.27024\package...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\package cache\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\packages...
  • volume{c693706e-3f85-11ed-82a9-806e6f6e6963}\system volume information\tracking.log.tmp
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\package cache\{ec9807de-b577-47b1-a024...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{9d29fc96-9eee-4253-943f-96b3bbfdd0b6}v14...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\package cache\{cf2bea3c-26ea-32f8-aa9b...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\package cache\42d5bec7ddfbd49e76467529...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\package cache\{42667d2e-b054-46c1-9d46...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\package cache\{6cd9e9ed-906d-4196-8dc3...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\package cache\{13a4ee12-23ea-3371-91ee...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\package cache\{9d29fc96-9eee-4253-943f...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\package cache\{a749d8e6-b613-3be3-8f5f...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\package cache\{e699e009-1c3c-4e50-9b57...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\package cache\{bd95a8cd-1d9f-35ad-981a...
  • C:\documents and settings\default\ryukreadme.txt
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{6cd9e9ed-906d-4196-8dc3-f987d2f6615f}v14...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\package cache\{f1b0fb3a-e0ea-47a6-9383...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\start menu\programs\microsoft office\m...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\microsoft\windows\wer\reportqueue\noncritical_x64_4017a...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\microsoft\windows\wer\reportqueue\noncritical_x64_4a8ed...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\microsoft\windows\wer\reportqueue\noncritical_x64_528c9...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{42667d2e-b054-46c1-9d46-2ee1332c14c1}v14...
  • C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{929fbd26-9020-399b-9a7a-751d61f0b942}v12...
  • C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\microsoft\windows\wer\reportqueue\critical_microsoft .net f_5de...
Moves the following files
  • from C:\documents and settings\all users\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\abcpy.ini to C:\documents and settings\all users\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\abcpy.ini.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01145_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01145_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01138_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01138_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01162_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01162_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00443_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00443_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01183_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01183_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01157_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01157_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01181_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01181_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01179_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01179_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01585_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01585_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01173_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01173_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01772_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01772_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01631_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01631_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01178_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01178_.wmfryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01178_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01178_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01366_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01366_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\en00222_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\en00222_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01186_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01186_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01176_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01176_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01170_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01170_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00439_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00439_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00449_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00449_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01139_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01139_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs01637_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs01637_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\cg1606.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\cg1606.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00255_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00255_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01146_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01146_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00121_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00121_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00224_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00224_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01793_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01793_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs01638_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs01638_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01761_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01761_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01166_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01166_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01168_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01168_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs01080_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs01080_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs01634_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs01634_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00437_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00437_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00445_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00445_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\grden_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\grden_01.mid.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00261_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00261_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00414_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00414_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\en00397_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\en00397_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00397_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00397_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02161_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02161_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00965_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00965_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01658_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01658_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00057_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00057_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00369_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00369_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01548_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01548_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00336_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00336_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fincl_02.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\fincl_02.mid.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02153_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02153_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01657_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01657_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00414_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00414_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02158_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02158_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00084_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00084_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00231_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00231_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\en00006_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\en00006_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01191_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01191_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00306_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00306_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01074_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01074_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00361_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00361_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\en00320_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\en00320_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\en00319_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\en00319_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00074_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00074_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00090_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00090_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00077_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00077_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00296_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00296_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\en00242_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\en00242_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\explr_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\explr_01.mid.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00076_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00076_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00096_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00096_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fall_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\fall_01.mid.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00564_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00564_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00086_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00086_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00775_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00775_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00799_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00799_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\en00902_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\en00902_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01196_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01196_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\en00202_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\en00202_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00242_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00242_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ed00184_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\ed00184_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00008_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00008_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd19695_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd19695_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ed00019_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\ed00019_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\east_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\east_01.mid.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00648_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00648_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00448_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00448_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\cupinst.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\cupinst.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01015_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01015_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00524_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00524_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00078_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00078_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00171_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00171_.gif.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00157_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00157_.gif.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00160_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00160_.gif.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd06200_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd06200_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd00116_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd00116_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00985_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00985_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd00146_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd00146_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00129_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00129_.gif.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00145_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00145_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00390_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00390_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00274_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00274_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00135_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00135_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01151_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01151_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\clip.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\clip.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00234_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00234_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an02559_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an02559_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00142_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00142_.gif.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an04369_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04369_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00122_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00122_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ed00010_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\ed00010_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an01039_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01039_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00174_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00174_.gif.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00525_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00525_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an04385_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04385_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd19828_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd19828_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd19695_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd19695_.wmfryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00165_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00165_.gif.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd10890_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\bd10890_.gif.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01039_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01039_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs01639_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs01639_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01160_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01160_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00148_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00148_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01152_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01152_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01629_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01629_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01630_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01630_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\boatinst.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\boatinst.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00372_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00372_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01586_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01586_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs01636_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs01636_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01182_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01182_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00441_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00441_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00407_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00407_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01169_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01169_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01143_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01143_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\craninst.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\craninst.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01171_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01171_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01167_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01167_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd09662_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd09662_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01163_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01163_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00297_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00297_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01180_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01180_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00687_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00687_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\classic1.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\classic1.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00040_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00040_.gif.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00100_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00100_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01434_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01434_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00413_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00413_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00405_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00405_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00923_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00923_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00256_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00256_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\carbn_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\carbn_01.mid.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00186_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00186_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00174_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00174_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00136_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00136_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01628_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01628_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00234_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00234_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00419_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00419_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\crane.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\crane.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00117_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00117_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd08808_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd08808_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00130_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00130_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\grid_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\grid_01.mid.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02097_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02097_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099158.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099158.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01080_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01080_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0086384.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0086384.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01618_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01618_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh02155_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh02155_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0086420.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0086420.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01875_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01875_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099174.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099174.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099171.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099171.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099177.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099177.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099198.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099198.gif.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099169.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099169.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099173.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099173.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099175.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099175.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh02312_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh02312_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099202.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099202.gif.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099163.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099163.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099170.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099170.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099176.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099176.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0075478.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0075478.gif.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\in00557_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00557_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\in00919_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00919_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0098497.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0098497.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\in00957_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00957_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\in00346_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00346_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099146.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099146.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh02313_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh02313_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\in00046_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00046_.wmfryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\in00233_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00233_.wmfryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\in00233_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00233_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\in00177_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00177_.wmfryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\in00177_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00177_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099178.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099178.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099159.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099159.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099164.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099164.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\in00046_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00046_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099172.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099172.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099149.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099149.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0090783.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0090783.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099200.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099200.gif.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0089945.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0089945.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099192.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099192.gif.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099194.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099194.gif.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099153.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099153.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099196.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099196.gif.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099203.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099203.gif.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0101856.bmp to %ProgramFiles%\microsoft office\clipart\pub60cor\j0101856.bmpryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099193.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099193.gif.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099197.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099197.gif.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099204.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099204.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105306.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105306.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099182.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099182.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105384.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105384.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105388.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105388.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105414.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105414.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105410.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105410.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099184.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099184.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099180.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099180.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099195.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099195.gif.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099181.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099181.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00164_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00164_.gif.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0086426.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0086426.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0086432.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0086432.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0090089.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0090089.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0090390.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0090390.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0090027.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0090027.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0090779.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0090779.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0090149.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0090149.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0086478.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0086478.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0090777.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0090777.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0090087.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0090087.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0089992.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0089992.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0086424.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0086424.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0086428.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0086428.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099183.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099183.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099179.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099179.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099199.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099199.gif.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099201.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099201.gif.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099205.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099205.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00814_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00814_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02068_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02068_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01923_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01923_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00586_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00586_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01176_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01176_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00543_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00543_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02115_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02115_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01193_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01193_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00546_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00546_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00527_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00527_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00459_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00459_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00241_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00241_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00260_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00260_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00513_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00513_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00334_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00334_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00526_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00526_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00443_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00443_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00435_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00435_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh02166_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh02166_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00236_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00236_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02116_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02116_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02071_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02071_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00455_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00455_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fincl_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\fincl_01.mid.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00297_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00297_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\flap.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\flap.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01660_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01660_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00419_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00419_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00428_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00428_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01084_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01084_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02088_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02088_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01659_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01659_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00403_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00403_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00438_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00438_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00382_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00382_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00779_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00779_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02141_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02141_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00276_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00276_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02075_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02075_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00235_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00235_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00544_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00544_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01759_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01759_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00524_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00524_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01065_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01065_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hm00005_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hm00005_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hm00116_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hm00116_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hm00426_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hm00426_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\in00351_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00351_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\in00956_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00956_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\indst_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\indst_01.mid.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\in00915_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00915_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh02166_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh02166_.wmfryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh02298_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh02298_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\in00118_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00118_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\htech_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\htech_01.mid.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0090781.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0090781.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\in00204_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00204_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\in00343_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00343_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01461_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01461_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00602_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00602_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hm00114_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hm00114_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh02298_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh02298_.wmfryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh02282_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh02282_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099151.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099151.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01058_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01058_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01242_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01242_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00625_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00625_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01291_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01291_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01015_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01015_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00612_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00612_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01013_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01013_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00681_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00681_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00669_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00669_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00693_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00693_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00636_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00636_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00623_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00623_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00688_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00688_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00687_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00687_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00601_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00601_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01329_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01329_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00685_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00685_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hm00172_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hm00172_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd19563_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\bd19563_.gif.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd09031_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd09031_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd08758_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd08758_.wmf.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_sv.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_sv.properties.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_zh_cn.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_zh_cn.properties.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_pt_br.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_pt_br.propertiesryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_fr.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_fr.properties.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_pt_br.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_pt_br.properties.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_ja.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_ja.properties.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_ko.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_ko.properties.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_fr.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_fr.propertiesryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\ext\access-bridge-64.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\access-bridge-64.jar.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidabrightitalic.ttf to %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidabrightitalic.ttf.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\fontconfig.bfc to %ProgramFiles%\java\jre1.8.0_45\lib\fontconfig.bfc.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\deploy.jar to %ProgramFiles%\java\jre1.8.0_45\lib\deploy.jar.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\flavormap.properties to %ProgramFiles%\java\jre1.8.0_45\lib\flavormap.properties.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidabrightdemibold.ttf to %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidabrightdemibold.ttf.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\ext\dnsns.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\dnsns.jar.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_zh_tw.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_zh_tw.properties.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\fontconfig.properties.src to %ProgramFiles%\java\jre1.8.0_45\lib\fontconfig.properties.src.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\splash@2x.gif to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\splash@2x.gif.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_it.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_it.properties.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\amd64\jvm.cfg to %ProgramFiles%\java\jre1.8.0_45\lib\amd64\jvm.cfg.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\copyright to %ProgramFiles%\java\jre1.8.0_45\copyright.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\classlist to %ProgramFiles%\java\jre1.8.0_45\lib\classlist.ryk
  • from %ProgramFiles%\internet explorer\signup\install.ins to %ProgramFiles%\internet explorer\signup\install.ins.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\calendars.properties to %ProgramFiles%\java\jre1.8.0_45\lib\calendars.properties.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\cmm\pycc.pf to %ProgramFiles%\java\jre1.8.0_45\lib\cmm\pycc.pf.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\cmm\ciexyz.pf to %ProgramFiles%\java\jre1.8.0_45\lib\cmm\ciexyz.pf.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\cmm\linear_rgb.pf to %ProgramFiles%\java\jre1.8.0_45\lib\cmm\linear_rgb.pf.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\cmm\gray.pf to %ProgramFiles%\java\jre1.8.0_45\lib\cmm\gray.pf.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\content-types.properties to %ProgramFiles%\java\jre1.8.0_45\lib\content-types.properties.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\bin\server\classes.jsa to %ProgramFiles%\java\jre1.8.0_45\bin\server\classes.jsa.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\cmm\srgb.pf to %ProgramFiles%\java\jre1.8.0_45\lib\cmm\srgb.pf.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages.properties.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_zh_hk.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_zh_hk.properties.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\charsets.jar to %ProgramFiles%\java\jre1.8.0_45\lib\charsets.jar.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_es.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_es.properties.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\splash.gif to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\splash.gif.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\currency.data to %ProgramFiles%\java\jre1.8.0_45\lib\currency.data.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\accessibility.properties to %ProgramFiles%\java\jre1.8.0_45\lib\accessibility.properties.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\jfxswt.jar to %ProgramFiles%\java\jre1.8.0_45\lib\jfxswt.jar.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\bin\server\xusage.txt to %ProgramFiles%\java\jre1.8.0_45\bin\server\xusage.txt.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\cursors.properties to %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\cursors.properties.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_copydrop32x32.gif to %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_copydrop32x32.gif.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\jce.jar to %ProgramFiles%\java\jre1.8.0_45\lib\jce.jar.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\javafx.properties to %ProgramFiles%\java\jre1.8.0_45\lib\javafx.properties.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_movedrop32x32.gif to %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_movedrop32x32.gif.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\javaws.jar to %ProgramFiles%\java\jre1.8.0_45\lib\javaws.jar.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_movenodrop32x32.gif to %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_movenodrop32x32.gif.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\jfr\profile.jfc to %ProgramFiles%\java\jre1.8.0_45\lib\jfr\profile.jfc.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_linkdrop32x32.gif to %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_linkdrop32x32.gifryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\management\jmxremote.password.template to %ProgramFiles%\java\jre1.8.0_45\lib\management\jmxremote.password.template.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\management\management.properties to %ProgramFiles%\java\jre1.8.0_45\lib\management\management.properties.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\management\snmp.acl.template to %ProgramFiles%\java\jre1.8.0_45\lib\management\snmp.acl.template.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\jfr.jar to %ProgramFiles%\java\jre1.8.0_45\lib\jfr.jar.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\logging.properties to %ProgramFiles%\java\jre1.8.0_45\lib\logging.properties.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\security\trusted.libraries to %ProgramFiles%\java\jre1.8.0_45\lib\security\trusted.libraries.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\jfr\default.jfc to %ProgramFiles%\java\jre1.8.0_45\lib\jfr\default.jfc.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\invalid32x32.gif to %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\invalid32x32.gif.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\management\jmxremote.access to %ProgramFiles%\java\jre1.8.0_45\lib\management\jmxremote.access.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_copynodrop32x32.gif to %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_copynodrop32x32.gif.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_linknodrop32x32.gif to %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_linknodrop32x32.gif.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunpkcs11.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunpkcs11.jar.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunjce_provider.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunjce_provider.jar.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidabrightdemiitalic.ttf to %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidabrightdemiitalic.ttf.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidabrightregular.ttf to %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidabrightregular.ttf.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidatypewriterregular.ttf to %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidatypewriterregular.ttf.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\ext\meta-index to %ProgramFiles%\java\jre1.8.0_45\lib\ext\meta-index.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\ext\cldrdata.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\cldrdata.jar.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunmscapi.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunmscapi.jar.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\ext\nashorn.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\nashorn.jar.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\ext\zipfs.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\zipfs.jarryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidasansregular.ttf to %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidasansregular.ttf.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunec.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunec.jar.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidatypewriterbold.ttf to %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidatypewriterbold.ttf.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidasansdemibold.ttf to %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidasansdemibold.ttf.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\hijrah-config-umalqura.properties to %ProgramFiles%\java\jre1.8.0_45\lib\hijrah-config-umalqura.properties.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_linknodrop32x32.gif to %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_linknodrop32x32.gifryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\ext\jaccess.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\jaccess.jar.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\ext\zipfs.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\zipfs.jar.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\ext\jfxrt.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\jfxrt.jar.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\ext\localedata.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\localedata.jar.ryk
  • from %ProgramFiles%\desktop.ini to %ProgramFiles%\desktop.ini.ryk
  • from C:\documents and settings\default\ntuser.dat.log1 to C:\documents and settings\default\ntuser.dat.log1.ryk
  • from C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12... to C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12...
  • from C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\start menu\programs\microsoft office\microsoft office 2... to C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\start menu\programs\microsoft office\microsoft office 2...
  • from C:\documents and settings\all users\application data\application data\application data\application data\application data\package cache\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\packages... to C:\documents and settings\all users\application data\application data\application data\application data\application data\package cache\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\packages...
  • from C:\documents and settings\all users\application data\application data\application data\application data\application data\package cache\{42667d2e-b054-46c1-9d46-2ee1332c14c1}v14.29.30133\package... to C:\documents and settings\all users\application data\application data\application data\application data\application data\package cache\{42667d2e-b054-46c1-9d46-2ee1332c14c1}v14.29.30133\package...
  • from C:\documents and settings\all users\application data\application data\application data\application data\application data\package cache\{9d29fc96-9eee-4253-943f-96b3bbfdd0b6}v14.16.27024\package... to C:\documents and settings\all users\application data\application data\application data\application data\application data\package cache\{9d29fc96-9eee-4253-943f-96b3bbfdd0b6}v14.16.27024\package...
  • from C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{b175520c-86a2-35a7-8619-86dc379688b9}v11... to C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{b175520c-86a2-35a7-8619-86dc379688b9}v11...
  • from C:\documents and settings\all users\application data\application data\application data\application data\application data\package cache\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\packages... to C:\documents and settings\all users\application data\application data\application data\application data\application data\package cache\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\packages...
  • from C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{f1b0fb3a-e0ea-47a6-9383-3650655403b0}v14... to C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{f1b0fb3a-e0ea-47a6-9383-3650655403b0}v14...
  • from C:\documents and settings\all users\application data\application data\application data\application data\application data\package cache\{e699e009-1c3c-4e50-9b57-2b39f0954c7f}v14.29.30133\package... to C:\documents and settings\all users\application data\application data\application data\application data\application data\package cache\{e699e009-1c3c-4e50-9b57-2b39f0954c7f}v14.29.30133\package...
  • from C:\documents and settings\all users\application data\application data\application data\application data\application data\package cache\{f1b0fb3a-e0ea-47a6-9383-3650655403b0}v14.16.27024\package... to C:\documents and settings\all users\application data\application data\application data\application data\application data\package cache\{f1b0fb3a-e0ea-47a6-9383-3650655403b0}v14.16.27024\package...
  • from C:\documents and settings\all users\application data\application data\application data\application data\application data\package cache\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\packages... to C:\documents and settings\all users\application data\application data\application data\application data\application data\package cache\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\packages...
  • from volume{c693706e-3f85-11ed-82a9-806e6f6e6963}\system volume information\tracking.log.tmp to volume{c693706e-3f85-11ed-82a9-806e6f6e6963}\system volume information\tracking.log
  • from C:\documents and settings\default\appdata\roaming\microsoft\internet explorer\quick launch\desktop.ini to C:\documents and settings\default\appdata\roaming\microsoft\internet explorer\quick launch\desktop.ini.ryk
  • from C:\documents and settings\default\appdata\roaming\microsoft\internet explorer\quick launch\window switcher.lnk to C:\documents and settings\default\appdata\roaming\microsoft\internet explorer\quick launch\window switcher.lnk.ryk
  • from C:\documents and settings\all users\application data\application data\application data\application data\application data\package cache\{6cd9e9ed-906d-4196-8dc3-f987d2f6615f}v14.29.30133\package... to C:\documents and settings\all users\application data\application data\application data\application data\application data\package cache\{6cd9e9ed-906d-4196-8dc3-f987d2f6615f}v14.29.30133\package...
  • from C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{9d29fc96-9eee-4253-943f-96b3bbfdd0b6}v14... to C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{9d29fc96-9eee-4253-943f-96b3bbfdd0b6}v14...
  • from C:\documents and settings\all users\application data\application data\application data\application data\application data\package cache\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\packages... to C:\documents and settings\all users\application data\application data\application data\application data\application data\package cache\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\packages...
  • from C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{6cd9e9ed-906d-4196-8dc3-f987d2f6615f}v14... to C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{6cd9e9ed-906d-4196-8dc3-f987d2f6615f}v14...
  • from C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{929fbd26-9020-399b-9a7a-751d61f0b942}v12... to C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{929fbd26-9020-399b-9a7a-751d61f0b942}v12...
  • from C:\documents and settings\all users\application data\application data\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\setup.ini to C:\documents and settings\all users\application data\application data\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\setup.ini.ryk
  • from C:\documents and settings\all users\application data\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\acrordrdcupd1501020056.msp to C:\documents and settings\all users\application data\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\acrordrdcupd1501020056.msp.ryk
  • from C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\application data\appl... to C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\application data\appl...
  • from C:\documents and settings\all users\application data\application data\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\data1.cab to C:\documents and settings\all users\application data\application data\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\data1.cab.ryk
  • from C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\application data\docu... to C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\application data\docu...
  • from C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\application data\micr... to C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\application data\micr...
  • from C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\application data\pack... to C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\application data\pack...
  • from C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\application data\star... to C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\application data\star...
  • from C:\documents and settings\all users\application data\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\acroread.msi to C:\documents and settings\all users\application data\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\acroread.msi.ryk
  • from C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\microsoft\assistance\... to C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\microsoft\assistance\...
  • from C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\start menu\programs\m... to C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\start menu\programs\m...
  • from C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\microsoft\crypto\rsa\s-1-5-18\6d14e4b1... to C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\microsoft\crypto\rsa\s-1-5-18\6d14e4b1...
  • from C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\microsoft\windows defender\definition ... to C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\microsoft\windows defender\definition ...
  • from C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\start menu\programs\microsoft office\m... to C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\start menu\programs\microsoft office\m...
  • from C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11... to C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11...
  • from C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{42667d2e-b054-46c1-9d46-2ee1332c14c1}v14... to C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{42667d2e-b054-46c1-9d46-2ee1332c14c1}v14...
  • from C:\documents and settings\default\appdata\roaming\microsoft\internet explorer\quick launch\shows desktop.lnk to C:\documents and settings\default\appdata\roaming\microsoft\internet explorer\quick launch\shows desktop.lnk.ryk
  • from C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\start menu\programs\a... to C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\start menu\programs\a...
  • from %ProgramFiles%\java\jre1.8.0_45\bin\javacpl.cpl to %ProgramFiles%\java\jre1.8.0_45\bin\javacpl.cpl.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\jsse.jar to %ProgramFiles%\java\jre1.8.0_45\lib\jsse.jar.ryk
  • from C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{e699e009-1c3c-4e50-9b57-2b39f0954c7f}v14... to C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{e699e009-1c3c-4e50-9b57-2b39f0954c7f}v14...
  • from C:\documents and settings\desktop.ini to C:\documents and settings\desktop.ini.ryk
  • from C:\documents and settings\public\downloads\desktop.ini to C:\documents and settings\public\downloads\desktop.ini.ryk
  • from C:\documents and settings\public\libraries\recordedtv.library-ms to C:\documents and settings\public\libraries\recordedtv.library-ms.ryk
  • from C:\documents and settings\public\recorded tv\desktop.ini to C:\documents and settings\public\recorded tv\desktop.ini.ryk
  • from C:\documents and settings\public\libraries\desktop.ini to C:\documents and settings\public\libraries\desktop.ini.ryk
  • from C:\documents and settings\public\recorded tv\sample media\desktop.ini to C:\documents and settings\public\recorded tv\sample media\desktop.ini.ryk
  • from C:\documents and settings\default\start menu\programs\maintenance\help.lnk to C:\documents and settings\default\start menu\programs\maintenance\help.lnk.ryk
  • from C:\documents and settings\public\recorded tv\sample media\win7_scenic-demoshort_raw.wtv to C:\documents and settings\public\recorded tv\sample media\win7_scenic-demoshort_raw.wtv.ryk
  • from C:\documents and settings\public\desktop.ini to C:\documents and settings\public\desktop.ini.ryk
  • from C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\microsoft\me... to C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\microsoft\me...
  • from C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\thunderbird\... to C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\thunderbird\...
  • from C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\microsoft\feeds\feeds for uni... to C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\microsoft\feeds\feeds for uni...
  • from C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\microsoft\media player\sync p... to C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\microsoft\media player\sync p...
  • from C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\thunderbird\profiles\npsdfqy3... to C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\thunderbird\profiles\npsdfqy3...
  • from C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\thunderbird\profiles\npsdfqy3.default-release\... to C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\thunderbird\profiles\npsdfqy3.default-release\...
  • from C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\application ... to C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\application ...
  • from C:\documents and settings\default\start menu\programs\accessories\system tools\private character editor.lnk to C:\documents and settings\default\start menu\programs\accessories\system tools\private character editor.lnk.ryk
  • from C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\temp\dd_vcre... to C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\temp\dd_vcre...
  • from C:\documents and settings\default\start menu\programs\maintenance\desktop.ini to C:\documents and settings\default\start menu\programs\maintenance\desktop.ini.ryk
  • from C:\documents and settings\default\start menu\programs\accessories\windows explorer.lnk to C:\documents and settings\default\start menu\programs\accessories\windows explorer.lnk.ryk
  • from C:\documents and settings\default\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tm.blf to C:\documents and settings\default\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tm.blf.ryk
  • from C:\documents and settings\default\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000002.regtrans-ms to C:\documents and settings\default\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000002.regtrans-ms.ryk
  • from C:\documents and settings\default\sendto\desktop.ini to C:\documents and settings\default\sendto\desktop.ini.ryk
  • from C:\documents and settings\default\start menu\programs\accessories\accessibility\desktop.ini to C:\documents and settings\default\start menu\programs\accessories\accessibility\desktop.ini.ryk
  • from C:\documents and settings\default\start menu\programs\accessories\accessibility\on-screen keyboard.lnk to C:\documents and settings\default\start menu\programs\accessories\accessibility\on-screen keyboard.lnk.ryk
  • from C:\documents and settings\default\start menu\programs\accessories\accessibility\magnify.lnk to C:\documents and settings\default\start menu\programs\accessories\accessibility\magnify.lnk.ryk
  • from C:\documents and settings\default\start menu\programs\accessories\accessibility\ease of access.lnk to C:\documents and settings\default\start menu\programs\accessories\accessibility\ease of access.lnk.ryk
  • from C:\documents and settings\default\start menu\programs\accessories\accessibility\narrator.lnk to C:\documents and settings\default\start menu\programs\accessories\accessibility\narrator.lnk.ryk
  • from C:\documents and settings\default\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000001.regtrans-ms to C:\documents and settings\default\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000001.regtrans-ms.ryk
  • from C:\documents and settings\default\sendto\fax recipient.lnk to C:\documents and settings\default\sendto\fax recipient.lnk.ryk
  • from C:\documents and settings\default\start menu\programs\accessories\notepad.lnk to C:\documents and settings\default\start menu\programs\accessories\notepad.lnk.ryk
  • from C:\documents and settings\default\start menu\programs\accessories\command prompt.lnk to C:\documents and settings\default\start menu\programs\accessories\command prompt.lnk.ryk
  • from C:\documents and settings\default\start menu\programs\accessories\run.lnk to C:\documents and settings\default\start menu\programs\accessories\run.lnk.ryk
  • from C:\documents and settings\default\start menu\programs\accessories\system tools\control panel.lnk to C:\documents and settings\default\start menu\programs\accessories\system tools\control panel.lnk.ryk
  • from C:\documents and settings\default\start menu\programs\accessories\system tools\computer.lnk to C:\documents and settings\default\start menu\programs\accessories\system tools\computer.lnk.ryk
  • from C:\documents and settings\default\start menu\programs\accessories\system tools\desktop.ini to C:\documents and settings\default\start menu\programs\accessories\system tools\desktop.ini.ryk
  • from C:\documents and settings\default\ntuser.dat.log to C:\documents and settings\default\ntuser.dat.log.ryk
  • from C:\documents and settings\default\start menu\programs\accessories\desktop.ini to C:\documents and settings\default\start menu\programs\accessories\desktop.ini.ryk
  • from C:\documents and settings\default\ntuser.dat to C:\documents and settings\default\ntuser.dat.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_de.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_de.properties.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\jvm.hprof.txt to %ProgramFiles%\java\jre1.8.0_45\lib\jvm.hprof.txt.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an04384_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04384_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an01174_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01174_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an00790_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an00790_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an02122_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an02122_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an01084_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01084_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd00173_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd00173_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an00914_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an00914_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an01044_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01044_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00170_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00170_.gif.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00103_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00103_.gif.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an01216_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01216_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an01251_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01251_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an00965_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an00965_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00273_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00273_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an02724_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an02724_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an04326_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04326_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00296_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00296_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an04108_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04108_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd20013_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd20013_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an04355_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04355_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an04269_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04269_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\cup.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\cup.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\classic2.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\classic2.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\cmnty_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\cmnty_01.mid.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00098_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00098_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00090_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00090_.gif.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an00010_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an00010_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00158_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00158_.gif.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an04206_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04206_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an04235_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04235_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd00155_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd00155_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an04195_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04195_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd06102_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd06102_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd07761_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd07761_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd00141_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd00141_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00194_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00194_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\baby_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\baby_01.mid.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\boat.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\boat.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00921_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00921_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00392_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00392_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00269_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00269_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00247_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00247_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00163_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00163_.gif.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00045_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00045_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00152_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00152_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00248_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00248_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an01545_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01545_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an03500_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an03500_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00169_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00169_.gif.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an04134_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04134_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00105_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00105_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd19988_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd19988_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd07804_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd07804_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd00160_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd00160_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00195_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00195_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an04174_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04174_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an04117_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04117_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ed00172_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\ed00172_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd05119_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd05119_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an04323_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04323_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00057_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00057_.gif.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an04332_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04332_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00252_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00252_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00261_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00261_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00265_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00265_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an01184_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01184_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00262_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00262_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00267_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00267_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00092_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00092_.gif.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00270_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00270_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an00853_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an00853_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an00015_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an00015_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00011_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00011_.gif.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00176_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00176_.gif.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00135_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00135_.gif.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00120_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00120_.gif.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01140_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01140_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an00932_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an00932_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an01218_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01218_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00037_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00037_.gif.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00139_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00139_.gif.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00444_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00444_.wmf.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\security\blacklist to %ProgramFiles%\java\jre1.8.0_45\lib\security\blacklist.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\readme.txt to %ProgramFiles%\java\jre1.8.0_45\readme.txt.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\sound.properties to %ProgramFiles%\java\jre1.8.0_45\lib\sound.propertiesryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\sound.properties to %ProgramFiles%\java\jre1.8.0_45\lib\sound.properties.ryk
  • from %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\as80.xsl to %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\as80.xsl.ryk
  • from %ProgramFiles%\microsoft analysis services\as oledb\10\resources\1033\msmdsrv.rll to %ProgramFiles%\microsoft analysis services\as oledb\10\resources\1033\msmdsrv.rll.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\psfontj2d.properties to %ProgramFiles%\java\jre1.8.0_45\lib\psfontj2d.properties.ryk
  • from %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\informix.xsl to %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\informix.xsl.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\readme.txt to %ProgramFiles%\java\jre1.8.0_45\readme.txtryk
  • from %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\sql90.xsl to %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\sql90.xsl.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\rt.jar to %ProgramFiles%\java\jre1.8.0_45\lib\rt.jar.ryk
  • from %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\msjet.xsl to %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\msjet.xsl.ryk
  • from %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\as90.xsl to %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\as90.xsl.ryk
  • from %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\sybase.xsl to %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\sybase.xsl.ryk
  • from %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\sql70.xsl to %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\sql70.xsl.ryk
  • from %ProgramFiles%\microsoft analysis services\as oledb\10\resources\1033\msolui100.rll to %ProgramFiles%\microsoft analysis services\as oledb\10\resources\1033\msolui100.rll.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\tzmappings to %ProgramFiles%\java\jre1.8.0_45\lib\tzmappings.ryk
  • from %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\sql2000.xsl to %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\sql2000.xsl.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00004_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00004_.gif.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme.txt to %ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme.txt.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\security\blacklisted.certs to %ProgramFiles%\java\jre1.8.0_45\lib\security\blacklisted.certs.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\security\cacerts to %ProgramFiles%\java\jre1.8.0_45\lib\security\cacerts.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\security\local_policy.jar to %ProgramFiles%\java\jre1.8.0_45\lib\security\local_policy.jar.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\security\us_export_policy.jar to %ProgramFiles%\java\jre1.8.0_45\lib\security\us_export_policy.jar.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\security\java.policy to %ProgramFiles%\java\jre1.8.0_45\lib\security\java.policy.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\meta-index to %ProgramFiles%\java\jre1.8.0_45\lib\meta-index.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\security\javaws.policy to %ProgramFiles%\java\jre1.8.0_45\lib\security\javaws.policyryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\security\javaws.policy to %ProgramFiles%\java\jre1.8.0_45\lib\security\javaws.policy.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\security\java.security to %ProgramFiles%\java\jre1.8.0_45\lib\security\java.security.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\management-agent.jar to %ProgramFiles%\java\jre1.8.0_45\lib\management-agent.jar.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\net.properties to %ProgramFiles%\java\jre1.8.0_45\lib\net.propertiesryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\psfont.properties.ja to %ProgramFiles%\java\jre1.8.0_45\lib\psfont.properties.ja.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\license to %ProgramFiles%\java\jre1.8.0_45\license.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\net.properties to %ProgramFiles%\java\jre1.8.0_45\lib\net.properties.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\resources.jar to %ProgramFiles%\java\jre1.8.0_45\lib\resources.jar.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\release to %ProgramFiles%\java\jre1.8.0_45\release.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00038_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00038_.gif.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\lib\plugin.jar to %ProgramFiles%\java\jre1.8.0_45\lib\plugin.jar.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00052_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00052_.gif.ryk
  • from %ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme-javafx.txt to %ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme-javafx.txt.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00453_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00453_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00161_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00161_.gif.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00184_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00184_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs01635_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs01635_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00440_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00440_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00200_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00200_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00442_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00442_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00438_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00438_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00526_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00526_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00705_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00705_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00932_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00932_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00126_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00126_.gif.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs01603_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs01603_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00021_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00021_.gif.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00130_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00130_.gif.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00167_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00167_.gif.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00076_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00076_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00172_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00172_.gif.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00012_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00012_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00092_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00092_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0093905.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0093905.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105396.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105396.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00154_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00154_.gif.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd19986_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd19986_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd08773_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd08773_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd09664_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd09664_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd19582_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\bd19582_.gif.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd19827_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd19827_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd07831_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd07831_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd08868_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd08868_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd10972_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\bd10972_.gif.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd09194_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd09194_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an04267_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04267_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an04191_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04191_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an04196_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04196_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an04225_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04225_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00175_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00175_.gif.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an01060_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01060_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00254_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00254_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01172_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01172_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an01173_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01173_.wmf.ryk
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105378.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105378.wmf.ryk
Modifies the following files
  • D:\$recycle.bin\s-1-5-21-1238866942-1249195528-555854008-1000\desktop.ini
  • %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidasansdemibold.ttf
  • %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidatypewriterbold.ttf
  • %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidasansregular.ttf
  • %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunmscapi.jar
  • %ProgramFiles%\java\jre1.8.0_45\lib\ext\jaccess.jar
  • %ProgramFiles%\java\jre1.8.0_45\lib\ext\jfxrt.jar
  • %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_ko.properties
  • %ProgramFiles%\internet explorer\signup\install.ins
  • %CommonProgramFiles%\microsoft shared\vba\vba7\1033\vbhw6.chm
  • %CommonProgramFiles%\microsoft shared\vba\vba7\1033\fm20.chm
  • %CommonProgramFiles%\microsoft shared\themes14\watermar\watermar.inf
  • %CommonProgramFiles%\microsoft shared\themes14\sumipntg\sumipntg.elm
  • %CommonProgramFiles%\microsoft shared\themes14\sumipntg\sumipntg.inf
  • %CommonProgramFiles%\microsoft shared\themes14\sky\sky.inf
  • %CommonProgramFiles%\microsoft shared\themes14\rmnsque\rmnsque.inf
  • %CommonProgramFiles%\microsoft shared\themes14\ricepapr\ricepapr.elm
  • %CommonProgramFiles%\microsoft shared\themes14\pixel\pixel.inf
  • %CommonProgramFiles%\microsoft shared\themes14\indust\indust.inf
  • %ALLUSERSPROFILE%\microsoft\search\data\applications\windows\mss.chk
  • %ALLUSERSPROFILE%\microsoft\search\data\applications\windows\windows.edb
  • %ALLUSERSPROFILE%\microsoft\search\data\applications\windows\msstmp.log
  • %ALLUSERSPROFILE%\microsoft\search\data\applications\windows\mss.log
  • %ALLUSERSPROFILE%\microsoft\search\data\applications\windows\projects\systemindex\secstore\cist0000.000
  • D:\system volume information\tracking.log
  • %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\invalid32x32.gif
  • %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_movenodrop32x32.gif
Modifies multiple files.
Substitutes the following files
  • %ALLUSERSPROFILE%\Microsoft\Search\Data\Applications\Windows\MSS.log
  • %ALLUSERSPROFILE%\microsoft\search\data\applications\windows\msstmp.log
Changes user data files extensions (Trojan.Encoder).
Miscellaneous
Executes the following
  • '<SYSTEM32>\searchprotocolhost.exe' Global\UsGthrFltPipeMssGthrPipe7_ Global\UsGthrCtrlFltPipeMssGthrPipe7 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "%...
  • '<SYSTEM32>\searchfilterhost.exe' 0 508 512 520 65536 516

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android