Trojan.Encoder.29785

Technical Information

Malicious functions

To complicate detection of its presence in the operating system,

deletes volume shadow copies.

Modifies file system

Creates the following files

%PROGRAMDATA%\0x29a.db
%APPDATA%\adobe\logtransport2\decrypt-files.txt
%APPDATA%\adobe\logtransport2\logs\decrypt-files.txt
%APPDATA%\ghisler\decrypt-files.txt
%APPDATA%\icq-profile\decrypt-files.txt
%APPDATA%\icq-profile\base\decrypt-files.txt
%APPDATA%\icq-profile\update\decrypt-files.txt
%APPDATA%\icq-profile\update\splash_banner\decrypt-files.txt
%APPDATA%\adobe\headlights\decrypt-files.txt
%APPDATA%\adobe\linguistics\decrypt-files.txt
%APPDATA%\icqm\decrypt-files.txt
%APPDATA%\icqm\icq\dll\decrypt-files.txt
%APPDATA%\icqm\icq\fonts\decrypt-files.txt
%APPDATA%\icqm\icq\graphics\decrypt-files.txt
%APPDATA%\icqm\icq\graphics\phone\decrypt-files.txt
%APPDATA%\icqm\icq\html\decrypt-files.txt
%APPDATA%\icqm\icq\html\bg\decrypt-files.txt
%APPDATA%\icqm\icq\html\bg\error\decrypt-files.txt
%APPDATA%\icqm\icq\decrypt-files.txt
%APPDATA%\icqm\icq\database\decrypt-files.txt
%APPDATA%\icqm\icq\html\bg\loading\decrypt-files.txt
%APPDATA%\icqm\icq\html\bg\jabber\decrypt-files.txt
%APPDATA%\adobe\flash player\assetcache\decrypt-files.txt
C:\users\public\recorded tv\decrypt-files.txt
C:\users\public\recorded tv\sample media\decrypt-files.txt
C:\users\public\videos\sample videos\decrypt-files.txt
%HOMEPATH%\decrypt-files.txt
%HOMEPATH%\appdata\decrypt-files.txt
%APPDATA%\decrypt-files.txt
%APPDATA%\adobe\flash player\assetcache\reehzff2\decrypt-files.txt
C:\users\public\music\sample music\decrypt-files.txt
%APPDATA%\adobe\flash player\nativecache\decrypt-files.txt
%APPDATA%\adobe\decrypt-files.txt
%APPDATA%\adobe\acrobat\dc\forms\decrypt-files.txt
%APPDATA%\adobe\acrobat\dc\jscache\decrypt-files.txt
%APPDATA%\adobe\acrobat\dc\preferences\decrypt-files.txt
%APPDATA%\adobe\acrobat\dc\security\decrypt-files.txt
%APPDATA%\adobe\acrobat\dc\security\crlcache\decrypt-files.txt
%APPDATA%\adobe\flash player\decrypt-files.txt
%APPDATA%\adobe\acrobat\decrypt-files.txt
%APPDATA%\adobe\acrobat\dc\decrypt-files.txt
%APPDATA%\adobe\acrobat\dc\collab\decrypt-files.txt
C:\far2\pluginsdk\headers.pas\decrypt-files.txt
%APPDATA%\icqm\icq\html\cz\decrypt-files.txt
%APPDATA%\icqm\icq\html\tr\error\decrypt-files.txt
%APPDATA%\icqm\icq\html\tr\loading\decrypt-files.txt
%APPDATA%\icqm\icq\html\ua\decrypt-files.txt
%APPDATA%\icqm\icq\html\ua\error\decrypt-files.txt
%APPDATA%\icqm\icq\html\ua\jabber\decrypt-files.txt
%APPDATA%\icqm\icq\html\ua\loading\decrypt-files.txt
%APPDATA%\icqm\icq\html\uz\decrypt-files.txt
%APPDATA%\icqm\icq\html\tr\decrypt-files.txt
%APPDATA%\icqm\icq\html\uz\error\decrypt-files.txt
%APPDATA%\icqm\icq\html\tr\jabber\decrypt-files.txt
%APPDATA%\icqm\icq\html\uz\loading\decrypt-files.txt
%APPDATA%\icqm\icq\skin_cache\decrypt-files.txt
%APPDATA%\icqm\icq\smiles\decrypt-files.txt
%APPDATA%\icqm\icq\smiles\flash\decrypt-files.txt
%APPDATA%\icqm\icq\smiles\smiles\decrypt-files.txt
%APPDATA%\icqm\icq\smiles\smiles\8march\decrypt-files.txt
%APPDATA%\icqm\icq\smiles\smiles\animated\decrypt-files.txt
%APPDATA%\icqm\icq\html\uz\jabber\decrypt-files.txt
%APPDATA%\icqm\icq\html\ru\loading\decrypt-files.txt
%APPDATA%\icqm\icq\skin\decrypt-files.txt
%APPDATA%\icqm\icq\html\ru\jabber\decrypt-files.txt
%APPDATA%\icqm\icq\html\ru\error\decrypt-files.txt
%APPDATA%\icqm\icq\html\cz\jabber\decrypt-files.txt
%APPDATA%\icqm\icq\html\de\decrypt-files.txt
%APPDATA%\icqm\icq\html\de\error\decrypt-files.txt
%APPDATA%\icqm\icq\html\de\jabber\decrypt-files.txt
%APPDATA%\icqm\icq\html\de\loading\decrypt-files.txt
%APPDATA%\icqm\icq\html\en\decrypt-files.txt
%APPDATA%\icqm\icq\html\en\error\decrypt-files.txt
%APPDATA%\icqm\icq\html\en\jabber\decrypt-files.txt
%APPDATA%\icqm\icq\html\en\loading\decrypt-files.txt
%APPDATA%\icqm\icq\html\cz\loading\decrypt-files.txt
%APPDATA%\icqm\icq\html\kz\decrypt-files.txt
%APPDATA%\icqm\icq\html\kz\jabber\decrypt-files.txt
%APPDATA%\icqm\icq\html\kz\loading\decrypt-files.txt
%APPDATA%\icqm\icq\html\pt\decrypt-files.txt
%APPDATA%\icqm\icq\html\pt\error\decrypt-files.txt
%APPDATA%\icqm\icq\html\pt\jabber\decrypt-files.txt
%APPDATA%\icqm\icq\html\pt\loading\decrypt-files.txt
%APPDATA%\icqm\icq\html\ru\decrypt-files.txt
C:\users\public\libraries\decrypt-files.txt
%APPDATA%\icqm\icq\html\kz\error\decrypt-files.txt
C:\users\public\pictures\sample pictures\decrypt-files.txt
C:\users\public\favorites\decrypt-files.txt
C:\users\public\downloads\decrypt-files.txt
C:\users\public\documents\my videos\decrypt-files.txt
C:\far2\plugins\arclite\decrypt-files.txt
C:\far2\plugins\autowrap\decrypt-files.txt
C:\far2\plugins\brackets\decrypt-files.txt
C:\far2\plugins\compare\decrypt-files.txt
C:\far2\plugins\drawline\decrypt-files.txt
C:\far2\plugins\editcase\decrypt-files.txt
C:\far2\fexcept\decrypt-files.txt
C:\far2\encyclopedia\decrypt-files.txt
C:\far2\plugins\align\decrypt-files.txt
C:\far2\plugins\emenu\decrypt-files.txt
C:\far2\plugins\ftp\lib\decrypt-files.txt
C:\far2\plugins\hlfviewer\decrypt-files.txt
C:\far2\plugins\macroview\decrypt-files.txt
C:\far2\plugins\network\decrypt-files.txt
C:\far2\plugins\proclist\decrypt-files.txt
C:\far2\plugins\tmppanel\decrypt-files.txt
C:\far2\plugins\farcmds\decrypt-files.txt
C:\far2\plugins\filecase\decrypt-files.txt
C:\far2\plugins\ftp\decrypt-files.txt
C:\far2\encyclopedia\tap\decrypt-files.txt
C:\far2\documentation\rus\decrypt-files.txt
C:\far2\pluginsdk\decrypt-files.txt
D:\decrypt-files.txt
D:\$recycle.bin\decrypt-files.txt
D:\$recycle.bin\s-1-5-21-1960123792-2022915161-3775307078-1001\decrypt-files.txt
C:\$recycle.bin\decrypt-files.txt
C:\$recycle.bin\s-1-5-21-1960123792-2022915161-3775307078-1001\decrypt-files.txt
C:\documents and settings\decrypt-files.txt
C:\far2\decrypt-files.txt
C:\far2\addons\decrypt-files.txt
C:\decrypt-files.txt
C:\far2\addons\colors\decrypt-files.txt
C:\far2\addons\colors\default_highlighting\decrypt-files.txt
C:\far2\addons\macros\decrypt-files.txt
C:\far2\addons\setup\decrypt-files.txt
C:\far2\addons\shell\decrypt-files.txt
C:\far2\addons\xlat\decrypt-files.txt
C:\far2\addons\xlat\russian\decrypt-files.txt
C:\far2\documentation\decrypt-files.txt
C:\far2\documentation\eng\decrypt-files.txt
C:\far2\addons\colors\custom_highlighting\decrypt-files.txt
%APPDATA%\icqm\icq\smiles\smiles\cat\decrypt-files.txt
%APPDATA%\icqm\icq\html\cz\error\decrypt-files.txt
C:\far2\pluginsdk\headers.c\decrypt-files.txt
C:\perflogs\admin\decrypt-files.txt
C:\users\default\appdata\roaming\microsoft\windows\start menu\programs\maintenance\decrypt-files.txt
C:\users\default\appdata\roaming\microsoft\windows\templates\decrypt-files.txt
C:\users\default\desktop\decrypt-files.txt
C:\users\default\documents\decrypt-files.txt
C:\users\default\documents\my music\decrypt-files.txt
C:\users\default\documents\my pictures\decrypt-files.txt
C:\users\default\appdata\roaming\microsoft\windows\start menu\programs\accessories\decrypt-files.txt
C:\users\default\documents\my videos\decrypt-files.txt
C:\users\default\appdata\roaming\microsoft\windows\start menu\programs\accessories\system tools\decrypt-files.txt
C:\users\default\favorites\decrypt-files.txt
C:\users\default\saved games\decrypt-files.txt
C:\users\public\decrypt-files.txt
C:\users\public\desktop\decrypt-files.txt
C:\users\public\documents\decrypt-files.txt
C:\users\public\documents\my music\decrypt-files.txt
C:\users\public\documents\my pictures\decrypt-files.txt
C:\users\default\downloads\decrypt-files.txt
C:\far2\plugins\decrypt-files.txt
C:\users\default\links\decrypt-files.txt
C:\users\default\appdata\roaming\microsoft\windows\start menu\programs\accessories\accessibility\decrypt-files.txt
C:\users\default\appdata\roaming\microsoft\windows\start menu\programs\decrypt-files.txt
C:\users\default\appdata\roaming\microsoft\windows\start menu\decrypt-files.txt
C:\recovery\decrypt-files.txt
C:\recovery\1195d5a8-f371-11e4-9c00-dd3082671db2\decrypt-files.txt
<Current directory>\decrypt-files.txt
C:\totalcmd\decrypt-files.txt
C:\totalcmd\language\decrypt-files.txt
C:\users\default\decrypt-files.txt
C:\users\default\appdata\decrypt-files.txt
C:\perflogs\decrypt-files.txt
C:\users\default\appdata\roaming\decrypt-files.txt
C:\users\default\appdata\roaming\microsoft\decrypt-files.txt
C:\users\default\appdata\roaming\microsoft\internet explorer\decrypt-files.txt
C:\users\default\appdata\roaming\microsoft\internet explorer\quick launch\decrypt-files.txt
C:\users\default\appdata\roaming\microsoft\windows\decrypt-files.txt
C:\users\default\appdata\roaming\microsoft\windows\cookies\decrypt-files.txt
C:\users\default\appdata\roaming\microsoft\windows\network shortcuts\decrypt-files.txt
C:\users\default\appdata\roaming\microsoft\windows\printer shortcuts\decrypt-files.txt
C:\users\default\appdata\roaming\microsoft\windows\recent\decrypt-files.txt
C:\users\default\appdata\roaming\media center programs\decrypt-files.txt
C:\users\default\appdata\roaming\microsoft\windows\sendto\decrypt-files.txt
C:\msocache\decrypt-files.txt
%APPDATA%\icqm\icq\smiles\smiles\emoji\decrypt-files.txt

Moves the following files

from %APPDATA%\adobe\acrobat\dc\jscache\globdata to %APPDATA%\adobe\acrobat\dc\jscache\globdata.bilwoaw
from %APPDATA%\icqm\icq\smiles\smiles\valentine\dont_be_late.gif to %APPDATA%\icqm\icq\smiles\smiles\valentine\dont_be_late.gif.nfsau
from %APPDATA%\icqm\icq\smiles\smiles\valentine\in_love.gif to %APPDATA%\icqm\icq\smiles\smiles\valentine\in_love.gif.nfsau
from %APPDATA%\icqm\icq\smiles\smiles\valentine\jealousy.gif to %APPDATA%\icqm\icq\smiles\smiles\valentine\jealousy.gif.nfsau
from %APPDATA%\icqm\icq\smiles\smiles\valentine\kiss.gif to %APPDATA%\icqm\icq\smiles\smiles\valentine\kiss.gif.wjnm17
from %APPDATA%\icqm\icq\smiles\smiles\valentine\kissed.gif to %APPDATA%\icqm\icq\smiles\smiles\valentine\kissed.gif.2i5bcw7
from %APPDATA%\icqm\icq\smiles\smiles\valentine\lets_play.gif to %APPDATA%\icqm\icq\smiles\smiles\valentine\lets_play.gif.2i5bcw7
from %APPDATA%\icqm\icq\smiles\smiles\smiles\plug.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\plug.gif.vey5q
from %APPDATA%\icqm\icq\smiles\smiles\valentine\on_wings.gif to %APPDATA%\icqm\icq\smiles\smiles\valentine\on_wings.gif.2i5bcw7
from %APPDATA%\icqm\icq\smiles\smiles\valentine\want_you.gif to %APPDATA%\icqm\icq\smiles\smiles\valentine\want_you.gif.r0sehde
from %APPDATA%\icqm\icq\smiles\statuses\aim\aim_status_away.ico to %APPDATA%\icqm\icq\smiles\statuses\aim\aim_status_away.ico.vcym
from %APPDATA%\icqm\icq\smiles\statuses\aim\aim_status_busy.ico to %APPDATA%\icqm\icq\smiles\statuses\aim\aim_status_busy.ico.vcym
from %APPDATA%\icqm\icq\smiles\statuses\aim\aim_status_gray.ico to %APPDATA%\icqm\icq\smiles\statuses\aim\aim_status_gray.ico.vcym
from %APPDATA%\icqm\icq\smiles\statuses\aim\aim_status_offline.ico to %APPDATA%\icqm\icq\smiles\statuses\aim\aim_status_offline.ico.vcym
from %APPDATA%\icqm\icq\smiles\statuses\aim\aim_status_online.ico to %APPDATA%\icqm\icq\smiles\statuses\aim\aim_status_online.ico.msbia
from %APPDATA%\icqm\icq\smiles\smiles\smiles\zloradstvo.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\zloradstvo.gif.gfcu39l
from %APPDATA%\icqm\icq\smiles\smiles\valentine\broken_heart.gif to %APPDATA%\icqm\icq\smiles\smiles\valentine\broken_heart.gif.oh5qf
from %APPDATA%\icqm\icq\smiles\smiles\smiles\victory.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\victory.gif.gfcu39l
from %APPDATA%\icqm\icq\smiles\smiles\smiles\vampire.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\vampire.gif.egokob
from %APPDATA%\icqm\icq\smiles\smiles\smiles\think.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\think.gif.egokob
from %APPDATA%\icqm\icq\smiles\smiles\smiles\koza_right.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\koza_right.gif.xplv
from %APPDATA%\icqm\icq\smiles\smiles\smiles\kukes.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\kukes.gif.xplv
from %APPDATA%\icqm\icq\smiles\smiles\smiles\laughter.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\laughter.gif.uqnhu
from %APPDATA%\icqm\icq\smiles\smiles\smiles\live.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\live.gif.uqnhu
from %APPDATA%\icqm\icq\smiles\smiles\smiles\ok.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\ok.gif.uqnhu
from %APPDATA%\icqm\icq\smiles\smiles\smiles\oo.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\oo.gif.vey5q
from %APPDATA%\icqm\icq\smiles\statuses\gtalk\gtalk_status_away.ico to %APPDATA%\icqm\icq\smiles\statuses\gtalk\gtalk_status_away.ico.p08jz
from %APPDATA%\icqm\icq\smiles\smiles\valentine\undress.gif to %APPDATA%\icqm\icq\smiles\smiles\valentine\undress.gif.r0sehde
from %APPDATA%\icqm\icq\smiles\smiles\smiles\pig.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\pig.gif.vey5q
from %APPDATA%\icqm\icq\smiles\smiles\smiles\rrr.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\rrr.gif.06vpx
from %APPDATA%\icqm\icq\smiles\smiles\smiles\sceptic.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\sceptic.gif.06vpx
from %APPDATA%\icqm\icq\smiles\smiles\smiles\shy.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\shy.gif.mv2ehu
from %APPDATA%\icqm\icq\smiles\smiles\smiles\sleepy.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\sleepy.gif.mv2ehu
from %APPDATA%\icqm\icq\smiles\smiles\smiles\smile.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\smile.gif.mv2ehu
from %APPDATA%\icqm\icq\smiles\smiles\smiles\tears.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\tears.gif.mv2ehu
from %APPDATA%\icqm\icq\smiles\smiles\smiles\koza_left.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\koza_left.gif.xplv
from %APPDATA%\icqm\icq\smiles\smiles\smiles\really.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\really.gif.06vpx
from %APPDATA%\icqm\icq\smiles\statuses\gtalk\gtalk_status_busy.ico to %APPDATA%\icqm\icq\smiles\statuses\gtalk\gtalk_status_busy.ico.p08jz
from %APPDATA%\icqm\icq\smiles\statuses\gtalk\gtalk_status_gray.ico to %APPDATA%\icqm\icq\smiles\statuses\gtalk\gtalk_status_gray.ico.1eg6fa
from %APPDATA%\icqm\icq\smiles\statuses\gtalk\gtalk_status_offline.ico to %APPDATA%\icqm\icq\smiles\statuses\gtalk\gtalk_status_offline.ico.1eg6fa
from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_chat.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_chat.ico.9uoy
from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_dnd.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_dnd.ico.wmcfw
from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_gray.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_gray.ico.g3oec
from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_invisible.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_invisible.ico.g3oec
from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_offline.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_offline.ico.g3oec
from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_online.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_online.ico.g3oec
from %APPDATA%\icqm\icq\smiles\statuses\jabber\seekfriends.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\seekfriends.ico.zyig
from %APPDATA%\icqm\icq\smiles\statuses\set01\100_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\100_xp.ico.ghn1nb
from %APPDATA%\icqm\icq\smiles\smiles\smiles\kiss.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\kiss.gif.rjyinpk
from %APPDATA%\icqm\icq\smiles\statuses\set01\101.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\101.ico.ghn1nb
from %APPDATA%\icqm\icq\smiles\statuses\set01\101_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\101_xp.ico.wlyylo
from %APPDATA%\icqm\icq\smiles\statuses\set01\102.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\102.ico.wlyylo
from %APPDATA%\icqm\icq\smiles\statuses\set01\102_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\102_xp.ico.kps9krc
from %APPDATA%\icqm\icq\smiles\statuses\set01\103.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\103.ico.kps9krc
from %APPDATA%\icqm\icq\smiles\statuses\set01\103_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\103_xp.ico.kps9krc
from %APPDATA%\icqm\icq\smiles\statuses\set01\104.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\104.ico.8wlfqgb
from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_away.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_status_away.ico.9uoy
from %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_offline.ico to %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_offline.ico.kfniyor
from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_odkl_wrong_data.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_odkl_wrong_data.ico.9uoy
from %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_invisible.ico to %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_invisible.ico.kfniyor
from %APPDATA%\icqm\icq\smiles\statuses\gtalk\gtalk_status_online.ico to %APPDATA%\icqm\icq\smiles\statuses\gtalk\gtalk_status_online.ico.1eg6fa
from %APPDATA%\icqm\icq\smiles\statuses\icq\24bit.ico to %APPDATA%\icqm\icq\smiles\statuses\icq\24bit.ico.ewca8c
from %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_away.ico to %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_away.ico.yxilcw2
from %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_chat.ico to %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_chat.ico.yxilcw2
from %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_connecting.ico to %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_connecting.ico.yxilcw2
from %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_dnd.ico to %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_dnd.ico.kfniyor
from %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_gray.ico to %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_gray.ico.kfniyor
from %APPDATA%\icqm\icq\smiles\statuses\set01\104_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\104_xp.ico.8wlfqgb
from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_odkl_offline.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_odkl_offline.ico.li21
from %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_online.ico to %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_online.ico.ir5q
from %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_wrong_data.ico to %APPDATA%\icqm\icq\smiles\statuses\icq\icq_status_wrong_data.ico.ir5q
from %APPDATA%\icqm\icq\smiles\statuses\icq\seekfriends.ico to %APPDATA%\icqm\icq\smiles\statuses\icq\seekfriends.ico.5u8zots
from %APPDATA%\icqm\icq\smiles\statuses\icq\seekfriends_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\icq\seekfriends_xp.ico.6k0t
from %APPDATA%\icqm\icq\smiles\statuses\icq\status_mobile.ico to %APPDATA%\icqm\icq\smiles\statuses\icq\status_mobile.ico.diydg
from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_odkl_connecting.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_odkl_connecting.ico.7bc85qe
from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_odkl_gray.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_odkl_gray.ico.7bc85qe
from %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_odkl_online.ico to %APPDATA%\icqm\icq\smiles\statuses\jabber\jabber_odkl_online.ico.li21
from %APPDATA%\icqm\icq\smiles\statuses\set01\100.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\100.ico.ebsst
from %APPDATA%\icqm\icq\smiles\smiles\smiles\hm.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\hm.gif.nnsasd
from %APPDATA%\icqm\icq\smiles\smiles\smiles\bullshit.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\bullshit.gif.zvunt1n
from %APPDATA%\icqm\icq\smiles\smiles\set05\s003.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s003.gif.9huvcg
from %APPDATA%\icqm\icq\smiles\smiles\set05\s004.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s004.gif.9huvcg
from %APPDATA%\icqm\icq\smiles\smiles\set05\s005.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s005.gif.9huvcg
from %APPDATA%\icqm\icq\smiles\smiles\set05\s006.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s006.gif.skfwhc
from %APPDATA%\icqm\icq\smiles\smiles\set05\s007.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s007.gif.skfwhc
from %APPDATA%\icqm\icq\smiles\smiles\set05\s008.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s008.gif.skfwhc
from %APPDATA%\icqm\icq\smiles\smiles\set04\s006.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s006.gif.zrum
from %APPDATA%\icqm\icq\smiles\smiles\set05\s009.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s009.gif.skfwhc
from %APPDATA%\icqm\icq\smiles\smiles\set05\s011.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s011.gif.wol4gx8
from %APPDATA%\icqm\icq\smiles\smiles\set05\s012.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s012.gif.wol4gx8
from %APPDATA%\icqm\icq\smiles\smiles\set05\s013.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s013.gif.kw0p9we
from %APPDATA%\icqm\icq\smiles\smiles\set05\s014.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s014.gif.kw0p9we
from %APPDATA%\icqm\icq\smiles\smiles\set05\s015.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s015.gif.kw0p9we
from %APPDATA%\icqm\icq\smiles\smiles\set05\s016.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s016.gif.kw0p9we
from %APPDATA%\icqm\icq\smiles\smiles\set05\s001.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s001.gif.vvzue
from %APPDATA%\icqm\icq\smiles\smiles\set05\s002.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s002.gif.9huvcg
from %APPDATA%\icqm\icq\smiles\smiles\set04\s016.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s016.gif.vvzue
from %APPDATA%\icqm\icq\smiles\smiles\set04\s015.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s015.gif.vvzue
from %APPDATA%\icqm\icq\smiles\smiles\set04\s014.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s014.gif.vvzue
from %APPDATA%\icqm\icq\smiles\smiles\set03\wink.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\wink.gif.kfzc5io
from %APPDATA%\icqm\icq\smiles\smiles\set03\yahoo.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\yahoo.gif.kfzc5io
from %APPDATA%\icqm\icq\smiles\smiles\set04\s001.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s001.gif.rtmp
from %APPDATA%\icqm\icq\smiles\smiles\set04\s002.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s002.gif.rtmp
from %APPDATA%\icqm\icq\smiles\smiles\set04\s003.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s003.gif.rtmp
from %APPDATA%\icqm\icq\smiles\smiles\set04\s004.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s004.gif.rtmp
from %APPDATA%\icqm\icq\smiles\smiles\set05\s017.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s017.gif.t2yw
from %APPDATA%\icqm\icq\smiles\smiles\set05\s010.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s010.gif.wol4gx8
from %APPDATA%\icqm\icq\smiles\smiles\set04\s005.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s005.gif.zrum
from %APPDATA%\icqm\icq\smiles\smiles\set04\s008.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s008.gif.zrum
from %APPDATA%\icqm\icq\smiles\smiles\set04\s009.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s009.gif.zrum
from %APPDATA%\icqm\icq\smiles\smiles\set04\s010.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s010.gif.76fg
from %APPDATA%\icqm\icq\smiles\smiles\set04\s011.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s011.gif.76fg
from %APPDATA%\icqm\icq\smiles\smiles\set04\s012.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s012.gif.76fg
from %APPDATA%\icqm\icq\smiles\smiles\set04\s013.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s013.gif.76fg
from %APPDATA%\icqm\icq\smiles\smiles\set03\wacko2.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\wacko2.gif.kfzc5io
from %APPDATA%\icqm\icq\smiles\smiles\set04\s007.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s007.gif.zrum
from %APPDATA%\icqm\icq\smiles\smiles\set05\s018.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s018.gif.xxvj
from %APPDATA%\icqm\icq\smiles\smiles\set05\s019.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s019.gif.xxvj
from %APPDATA%\icqm\icq\smiles\smiles\set05\s020.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s020.gif.xxvj
from %APPDATA%\icqm\icq\smiles\smiles\smiles\angry.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\angry.gif.8jh4f
from %APPDATA%\icqm\icq\smiles\smiles\smiles\ass.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\ass.gif.bwcvok
from %APPDATA%\icqm\icq\smiles\smiles\smiles\bazilio.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\bazilio.gif.bwcvok
from %APPDATA%\icqm\icq\smiles\smiles\smiles\bee.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\bee.gif.qqewe0
from %APPDATA%\icqm\icq\smiles\smiles\smiles\biganger.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\biganger.gif.qqewe0
from %APPDATA%\icqm\icq\smiles\smiles\smiles\biggrin.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\biggrin.gif.qqewe0
from %APPDATA%\icqm\icq\smiles\smiles\smiles\blink.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\blink.gif.rzmpxgv
from %APPDATA%\icqm\icq\smiles\smiles\smiles\coolguy.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\coolguy.gif.ydsb
from %APPDATA%\icqm\icq\smiles\smiles\smiles\heart.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\heart.gif.nnsasd
from %APPDATA%\icqm\icq\smiles\smiles\smiles\crocodile.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\crocodile.gif.vyneb
from %APPDATA%\icqm\icq\smiles\smiles\smiles\cry.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\cry.gif.vyneb
from %APPDATA%\icqm\icq\smiles\smiles\smiles\detzl.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\detzl.gif.vyneb
from %APPDATA%\icqm\icq\smiles\smiles\smiles\devil.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\devil.gif.9oycj
from %APPDATA%\icqm\icq\smiles\smiles\smiles\die.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\die.gif.9oycj
from %APPDATA%\icqm\icq\smiles\smiles\smiles\disappointed.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\disappointed.gif.9oycj
from %APPDATA%\icqm\icq\smiles\smiles\smiles\fist.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\fist.gif.9oycj
from %APPDATA%\icqm\icq\smiles\smiles\smiles\amazed.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\amazed.gif.clog
from %APPDATA%\icqm\icq\smiles\smiles\set06\s011.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s011.gif.0dvfmt
from %APPDATA%\icqm\icq\smiles\smiles\smiles\aaa.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\aaa.gif.thcm
from %APPDATA%\icqm\icq\smiles\smiles\set06\s010.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s010.gif.0dvfmt
from %APPDATA%\icqm\icq\smiles\smiles\set06\s001.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s001.gif.8z0ua
from %APPDATA%\icqm\icq\smiles\smiles\set06\s002.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s002.gif.8z0ua
from %APPDATA%\icqm\icq\smiles\smiles\set06\s003.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s003.gif.8z0ua
from %APPDATA%\icqm\icq\smiles\smiles\set06\s004.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s004.gif.bpynyb
from %APPDATA%\icqm\icq\smiles\smiles\set06\s006.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s006.gif.bpynyb
from %APPDATA%\icqm\icq\smiles\smiles\set06\s008.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s008.gif.bpynyb
from %APPDATA%\icqm\icq\smiles\smiles\set06\s009.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s009.gif.0dvfmt
from %APPDATA%\icqm\icq\smiles\smiles\smiles\fuck.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\fuck.gif.nnsasd
from %APPDATA%\icqm\icq\smiles\smiles\set06\s019.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s019.gif.lnhuw68
from %APPDATA%\icqm\icq\smiles\smiles\set06\s012.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s012.gif.dyr4lh
from %APPDATA%\icqm\icq\smiles\smiles\set06\s013.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s013.gif.dyr4lh
from %APPDATA%\icqm\icq\smiles\smiles\set06\s014.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s014.gif.dyr4lh
from %APPDATA%\icqm\icq\smiles\smiles\set06\s015.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s015.gif.e6okkx2
from %APPDATA%\icqm\icq\smiles\smiles\set06\s016.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s016.gif.e6okkx2
from %APPDATA%\icqm\icq\smiles\smiles\set06\s017.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s017.gif.e6okkx2
from %APPDATA%\icqm\icq\smiles\smiles\set06\s018.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s018.gif.e6okkx2
from %APPDATA%\icqm\icq\smiles\smiles\set06\s020.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s020.gif.lnhuw68
from %APPDATA%\icqm\icq\smiles\statuses\set01\78.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\78.ico.lhbcsw
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_offline_big.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_offline_big.ico.o5gody
from %APPDATA%\icqm\icq\smiles\statuses\set01\12.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\12.ico.x3by
from %APPDATA%\icqm\icq\smiles\statuses\set01\gde_ia.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\gde_ia.ico.timz7
from %APPDATA%\icqm\icq\smiles\statuses\set01\gizn_gavno.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\gizn_gavno.ico.5byo6u
from %APPDATA%\icqm\icq\smiles\statuses\set01\gotovlu.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\gotovlu.ico.u1d2hf
from %APPDATA%\icqm\icq\smiles\statuses\set01\gulau.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\gulau.ico.u1d2hf
from %APPDATA%\icqm\icq\smiles\statuses\set01\ia_inoplanet_razum.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\ia_inoplanet_razum.ico.vodx2yi
from %APPDATA%\icqm\icq\smiles\statuses\set01\ia_krivetko.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\ia_krivetko.ico.ne03a
from %APPDATA%\icqm\icq\smiles\statuses\set01\98.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\98.ico.ur70db
from %APPDATA%\icqm\icq\smiles\statuses\set01\ia_poteralsa.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\ia_poteralsa.ico.y5ji0
from %APPDATA%\icqm\icq\smiles\statuses\set01\ia_utko.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\ia_utko.ico.igehlo
from %APPDATA%\icqm\icq\smiles\statuses\set01\igrau.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\igrau.ico.igehlo
from %APPDATA%\icqm\icq\smiles\statuses\set01\kuru.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\kuru.ico.xjhtdz
from %APPDATA%\icqm\icq\smiles\statuses\set01\kut.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\kut.ico.xjhtdz
from %APPDATA%\icqm\icq\smiles\statuses\set01\music.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\music.ico.xjhtdz
from %APPDATA%\icqm\icq\smiles\statuses\set01\na_rabote.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\na_rabote.ico.aicbsn7
from %APPDATA%\icqm\icq\smiles\statuses\set01\doma.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\doma.ico.timz7
from %APPDATA%\icqm\icq\smiles\statuses\set01\em.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\em.ico.timz7
from %APPDATA%\icqm\icq\smiles\statuses\set01\dnd_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\dnd_xp.ico.btlt
from %APPDATA%\icqm\icq\smiles\statuses\set01\dnd.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\dnd.ico.btlt
from %APPDATA%\icqm\icq\smiles\statuses\set01\cherep.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\cherep.ico.igfsocl
from %APPDATA%\icqm\icq\smiles\statuses\set01\94_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\94_xp.ico.u11gtwb
from %APPDATA%\icqm\icq\smiles\statuses\set01\95.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\95.ico.u11gtwb
from %APPDATA%\icqm\icq\smiles\statuses\set01\95_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\95_xp.ico.u11gtwb
from %APPDATA%\icqm\icq\smiles\statuses\set01\96.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\96.ico.rpp2
from %APPDATA%\icqm\icq\smiles\statuses\set01\96_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\96_xp.ico.rpp2
from %APPDATA%\icqm\icq\smiles\statuses\set01\97.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\97.ico.4qhx3
from %APPDATA%\icqm\icq\smiles\statuses\set01\na_vstreche.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\na_vstreche.ico.aicbsn7
from %APPDATA%\icqm\icq\smiles\statuses\set01\ia_soshl_asuma.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\ia_soshl_asuma.ico.6ccq9w
from %APPDATA%\icqm\icq\smiles\statuses\set01\97_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\97_xp.ico.4qhx3
from %APPDATA%\icqm\icq\smiles\statuses\set01\99.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\99.ico.lefgyt
from %APPDATA%\icqm\icq\smiles\statuses\set01\99_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\99_xp.ico.lefgyt
from %APPDATA%\icqm\icq\smiles\statuses\set01\belka.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\belka.ico.olzitrs
from %APPDATA%\icqm\icq\smiles\statuses\set01\boleu.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\boleu.ico.ccqvnad
from %APPDATA%\icqm\icq\smiles\statuses\set01\chat.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\chat.ico.ccqvnad
from %APPDATA%\icqm\icq\smiles\statuses\set01\chat_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\chat_xp.ico.igfsocl
from %APPDATA%\icqm\icq\smiles\statuses\set01\94.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\94.ico.xbp9cjk
from %APPDATA%\icqm\icq\smiles\statuses\set01\98_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\98_xp.ico.ur70db
from %APPDATA%\icqm\icq\smiles\statuses\set01\pivo.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\pivo.ico.vued
from %APPDATA%\icqm\icq\smiles\statuses\set01\pivo_bit.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\pivo_bit.ico.vued
from %APPDATA%\icqm\icq\smiles\statuses\set01\pu_kofe.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\pu_kofe.ico.vued
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_44.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_44.ico.7ulhyh
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_45.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_45.ico.p0ytm8
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_49.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_49.ico.p0ytm8
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_50.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_50.ico.cwdxloe
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_away.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_away.ico.cwdxloe
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_away_big.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_away_big.ico.cwdxloe
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_away_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_away_xp.ico.slko
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_connecting.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_connecting.ico.nc9b
from %APPDATA%\icqm\icq\smiles\statuses\set01\93_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\93_xp.ico.xbp9cjk
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_connecting_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_connecting_xp.ico.nc9b
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_invisible.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_invisible.ico.azhf
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_invisible_big.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_invisible_big.ico.azhf
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_invisible_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_invisible_xp.ico.wtcy1
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_invisible_xp_big.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_invisible_xp_big.ico.wtcy1
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_mobile.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_mobile.ico.vmeicob
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_offline.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_offline.ico.o5gody
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_43.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_43.ico.7ulhyh
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_30.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_30.ico.oszfce
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_42.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_42.ico.7ulhyh
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_29.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_29.ico.7owbec
from %APPDATA%\icqm\icq\smiles\statuses\set01\rabotau.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\rabotau.ico.p9p2
from %APPDATA%\icqm\icq\smiles\statuses\set01\rocket.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\rocket.ico.p9p2
from %APPDATA%\icqm\icq\smiles\statuses\set01\seekfriends.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\seekfriends.ico.mmhjf
from %APPDATA%\icqm\icq\smiles\statuses\set01\seekfriends_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\seekfriends_xp.ico.mmhjf
from %APPDATA%\icqm\icq\smiles\statuses\set01\splu.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\splu.ico.yl7yr
from %APPDATA%\icqm\icq\smiles\statuses\set01\splu_bit.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\splu_bit.ico.yl7yr
from %APPDATA%\icqm\icq\smiles\statuses\set01\star.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\star.ico.yl7yr
from %APPDATA%\icqm\icq\smiles\statuses\set01\11_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\11_xp.ico.x3by
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_40.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_40.ico.uhdbu
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_32.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_32.ico.oszfce
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_33.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_33.ico.ct73hf
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_34.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_34.ico.ct73hf
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_35.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_35.ico.bblq
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_36.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_36.ico.avmh
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_37.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_37.ico.qjyiv
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_38.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_38.ico.qjyiv
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_41.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_41.ico.uhdbu
from %APPDATA%\icqm\icq\smiles\smiles\set03\unknw.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\unknw.gif.kfzc5io
from %APPDATA%\icqm\icq\smiles\statuses\set01\93.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\93.ico.ysjso
from %APPDATA%\icqm\icq\smiles\statuses\set01\87_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\87_xp.ico.ysx99do
from %APPDATA%\icqm\icq\smiles\statuses\set01\65.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\65.ico.erwcn4
from %APPDATA%\icqm\icq\smiles\statuses\set01\65_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\65_xp.ico.erwcn4
from %APPDATA%\icqm\icq\smiles\statuses\set01\66.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\66.ico.zxifb3i
from %APPDATA%\icqm\icq\smiles\statuses\set01\66_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\66_xp.ico.zxifb3i
from %APPDATA%\icqm\icq\smiles\statuses\set01\67.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\67.ico.zxifb3i
from %APPDATA%\icqm\icq\smiles\statuses\set01\67_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\67_xp.ico.0vxeipd
from %APPDATA%\icqm\icq\smiles\statuses\set01\58_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\58_xp.ico.l72cx9j
from %APPDATA%\icqm\icq\smiles\statuses\set01\68.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\68.ico.0vxeipd
from %APPDATA%\icqm\icq\smiles\statuses\set01\69.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\69.ico.cfq2
from %APPDATA%\icqm\icq\smiles\statuses\set01\69_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\69_xp.ico.cfq2
from %APPDATA%\icqm\icq\smiles\statuses\set01\70.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\70.ico.cfq2
from %APPDATA%\icqm\icq\smiles\statuses\set01\70_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\70_xp.ico.cfq2
from %APPDATA%\icqm\icq\smiles\statuses\set01\71.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\71.ico.euiu6
from %APPDATA%\icqm\icq\smiles\statuses\set01\71_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\71_xp.ico.euiu6
from %APPDATA%\icqm\icq\smiles\statuses\set01\64.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\64.ico.jqxyyd
from %APPDATA%\icqm\icq\smiles\statuses\set01\64_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\64_xp.ico.jqxyyd
from %APPDATA%\icqm\icq\smiles\statuses\set01\63_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\63_xp.ico.rwf1sw
from %APPDATA%\icqm\icq\smiles\statuses\set01\63.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\63.ico.rwf1sw
from %APPDATA%\icqm\icq\smiles\statuses\set01\62_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\62_xp.ico.fko9d
from %APPDATA%\icqm\icq\smiles\statuses\set01\13.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\13.ico.qctc
from %APPDATA%\icqm\icq\smiles\statuses\set01\13_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\13_xp.ico.fzka
from %APPDATA%\icqm\icq\smiles\statuses\set01\56.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\56.ico.hftlwl
from %APPDATA%\icqm\icq\smiles\statuses\set01\56_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\56_xp.ico.hftlwl
from %APPDATA%\icqm\icq\smiles\statuses\set01\57.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\57.ico.euc8c0
from %APPDATA%\icqm\icq\smiles\statuses\set01\57_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\57_xp.ico.euc8c0
from %APPDATA%\icqm\icq\smiles\statuses\set01\72.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\72.ico.knsrou
from %APPDATA%\icqm\icq\smiles\statuses\set01\68_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\68_xp.ico.0vxeipd
from %APPDATA%\icqm\icq\smiles\statuses\set01\58.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\58.ico.l72cx9j
from %APPDATA%\icqm\icq\smiles\statuses\set01\59_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\59_xp.ico.l72cx9j
from %APPDATA%\icqm\icq\smiles\statuses\set01\60.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\60.ico.9mosthl
from %APPDATA%\icqm\icq\smiles\statuses\set01\60_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\60_xp.ico.9mosthl
from %APPDATA%\icqm\icq\smiles\statuses\set01\61.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\61.ico.9mosthl
from %APPDATA%\icqm\icq\smiles\statuses\set01\61_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\61_xp.ico.xhgr
from %APPDATA%\icqm\icq\smiles\statuses\set01\62.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\62.ico.fko9d
from %APPDATA%\icqm\icq\smiles\statuses\set01\12_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\12_xp.ico.x3by
from %APPDATA%\icqm\icq\smiles\statuses\set01\59.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\59.ico.l72cx9j
from %APPDATA%\icqm\icq\smiles\statuses\set01\72_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\72_xp.ico.knsrou
from %APPDATA%\icqm\icq\smiles\statuses\set01\73.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\73.ico.r1nl2n
from %APPDATA%\icqm\icq\smiles\statuses\set01\73_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\73_xp.ico.r1nl2n
from %APPDATA%\icqm\icq\smiles\statuses\set01\84.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\84.ico.jz1sv
from %APPDATA%\icqm\icq\smiles\statuses\set01\84_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\84_xp.ico.jz1sv
from %APPDATA%\icqm\icq\smiles\statuses\set01\85.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\85.ico.uaqtcx
from %APPDATA%\icqm\icq\smiles\statuses\set01\85_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\85_xp.ico.uaqtcx
from %APPDATA%\icqm\icq\smiles\statuses\set01\86.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\86.ico.uaqtcx
from %APPDATA%\icqm\icq\smiles\statuses\set01\86_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\86_xp.ico.lffzgw7
from %APPDATA%\icqm\icq\smiles\statuses\set01\87.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\87.ico.lffzgw7
from %APPDATA%\icqm\icq\smiles\statuses\set01\88.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\88.ico.c7q2
from %APPDATA%\icqm\icq\smiles\statuses\set01\92_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\92_xp.ico.ysjso
from %APPDATA%\icqm\icq\smiles\statuses\set01\88_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\88_xp.ico.c7q2
from %APPDATA%\icqm\icq\smiles\statuses\set01\89.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\89.ico.iid2ng
from %APPDATA%\icqm\icq\smiles\statuses\set01\89_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\89_xp.ico.iid2ng
from %APPDATA%\icqm\icq\smiles\statuses\set01\90.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\90.ico.uravwie
from %APPDATA%\icqm\icq\smiles\statuses\set01\90_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\90_xp.ico.elbt
from %APPDATA%\icqm\icq\smiles\statuses\set01\91.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\91.ico.3frvm
from %APPDATA%\icqm\icq\smiles\statuses\set01\91_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\91_xp.ico.3frvm
from %APPDATA%\icqm\icq\smiles\statuses\set01\83_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\83_xp.ico.jz1sv
from %APPDATA%\icqm\icq\smiles\statuses\set01\11.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\11.ico.8wlfqgb
from %APPDATA%\icqm\icq\smiles\statuses\set01\83.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\83.ico.r1fve
from %APPDATA%\icqm\icq\smiles\statuses\set01\77_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\77_xp.ico.yvauk1
from %APPDATA%\icqm\icq\smiles\statuses\set01\74.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\74.ico.r1nl2n
from %APPDATA%\icqm\icq\smiles\statuses\set01\74_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\74_xp.ico.r1nl2n
from %APPDATA%\icqm\icq\smiles\statuses\set01\75.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\75.ico.zk4s1vw
from %APPDATA%\icqm\icq\smiles\statuses\set01\75_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\75_xp.ico.zk4s1vw
from %APPDATA%\icqm\icq\smiles\statuses\set01\76.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\76.ico.vqjzh
from %APPDATA%\icqm\icq\smiles\statuses\set01\76_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\76_xp.ico.erb90
from %APPDATA%\icqm\icq\smiles\statuses\set01\77.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\77.ico.erb90
from %APPDATA%\icqm\icq\smiles\statuses\set01\92.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\92.ico.3frvm
from %APPDATA%\icqm\icq\smiles\statuses\set01\82.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\82.ico.r1fve
from %APPDATA%\icqm\icq\smiles\statuses\set01\78_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\78_xp.ico.tgta6lf
from %APPDATA%\icqm\icq\smiles\statuses\set01\79.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\79.ico.tgta6lf
from %APPDATA%\icqm\icq\smiles\statuses\set01\79_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\79_xp.ico.tgta6lf
from %APPDATA%\icqm\icq\smiles\statuses\set01\80.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\80.ico.xtp0
from %APPDATA%\icqm\icq\smiles\statuses\set01\80_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\80_xp.ico.xtp0
from %APPDATA%\icqm\icq\smiles\statuses\set01\81.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\81.ico.bn7il
from %APPDATA%\icqm\icq\smiles\statuses\set01\81_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\81_xp.ico.bn7il
from %APPDATA%\icqm\icq\smiles\statuses\set01\82_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\82_xp.ico.r1fve
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_away_xp_big.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_away_xp_big.ico.slko
from %APPDATA%\icqm\icq\smiles\smiles\set03\smile.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\smile.gif.qseusme
from %APPDATA%\icqm\icq\smiles\smiles\set03\man_in_love.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\man_in_love.gif.cmepe
from %APPDATA%\icqm\icq\smiles\mrasmileslang_bg.xml to %APPDATA%\icqm\icq\smiles\mrasmileslang_bg.xml.ytdlpi
from %APPDATA%\icqm\icq\smiles\mrasmileslang_cz.xml to %APPDATA%\icqm\icq\smiles\mrasmileslang_cz.xml.ob61
from %APPDATA%\icqm\icq\smiles\mrasmileslang_de.xml to %APPDATA%\icqm\icq\smiles\mrasmileslang_de.xml.ob61
from %APPDATA%\icqm\icq\smiles\mrasmileslang_en.xml to %APPDATA%\icqm\icq\smiles\mrasmileslang_en.xml.9fwh1
from %APPDATA%\icqm\icq\smiles\mrasmileslang_kz.xml to %APPDATA%\icqm\icq\smiles\mrasmileslang_kz.xml.9fwh1
from %APPDATA%\icqm\icq\smiles\mrasmileslang_pt.xml to %APPDATA%\icqm\icq\smiles\mrasmileslang_pt.xml.adl9a
from %APPDATA%\icqm\icq\smiles\flash\missyou.swf to %APPDATA%\icqm\icq\smiles\flash\missyou.swf.0twdp
from %APPDATA%\icqm\icq\smiles\mrasmileslang_ru.xml to %APPDATA%\icqm\icq\smiles\mrasmileslang_ru.xml.fuyd0h
from %APPDATA%\icqm\icq\smiles\mrasmileslang_ua.xml to %APPDATA%\icqm\icq\smiles\mrasmileslang_ua.xml.59d2l1
from %APPDATA%\icqm\icq\smiles\mrasmileslang_uz.xml to %APPDATA%\icqm\icq\smiles\mrasmileslang_uz.xml.59d2l1
from %APPDATA%\icqm\icq\smiles\skin.txt to %APPDATA%\icqm\icq\smiles\skin.txt.5v9zvx9
from %APPDATA%\icqm\icq\smiles\smiles\8march\car.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\car.gif.q9it8
from %APPDATA%\icqm\icq\smiles\smiles\8march\cat.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\cat.gif.q9it8
from %APPDATA%\icqm\icq\smiles\smiles\8march\cookie.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\cookie.gif.q9it8
from %APPDATA%\icqm\icq\smiles\flash\wf_love_srazila.swf to %APPDATA%\icqm\icq\smiles\flash\wf_love_srazila.swf.tjvcud
from %APPDATA%\icqm\icq\smiles\flash\zadolbal.swf to %APPDATA%\icqm\icq\smiles\flash\zadolbal.swf.6iezykp
from %APPDATA%\icqm\icq\smiles\flash\wf_love_sdaus.swf to %APPDATA%\icqm\icq\smiles\flash\wf_love_sdaus.swf.c549b
from %APPDATA%\icqm\icq\smiles\flash\tank.swf to %APPDATA%\icqm\icq\smiles\flash\tank.swf.cidax
from %APPDATA%\icqm\icq\smiles\flash\sorry.swf to %APPDATA%\icqm\icq\smiles\flash\sorry.swf.6geg
from %APPDATA%\icqm\icq\smiles\flash\krizis.swf to %APPDATA%\icqm\icq\smiles\flash\krizis.swf.batmw
from %APPDATA%\icqm\icq\smiles\flash\laugh.swf to %APPDATA%\icqm\icq\smiles\flash\laugh.swf.batmw
from %APPDATA%\icqm\icq\smiles\flash\likeu.swf to %APPDATA%\icqm\icq\smiles\flash\likeu.swf.qfktcs
from %APPDATA%\icqm\icq\smiles\flash\love_bear_hugs.swf to %APPDATA%\icqm\icq\smiles\flash\love_bear_hugs.swf.1rb8xjb
from %APPDATA%\icqm\icq\smiles\flash\love_bear_kiss.swf to %APPDATA%\icqm\icq\smiles\flash\love_bear_kiss.swf.22fcbal
from %APPDATA%\icqm\icq\smiles\flash\love_bear_rose.swf to %APPDATA%\icqm\icq\smiles\flash\love_bear_rose.swf.ufil
from %APPDATA%\icqm\icq\smiles\smiles\8march\doll.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\doll.gif.dwgxk
from %APPDATA%\icqm\icq\smiles\mrasmileslang_tr.xml to %APPDATA%\icqm\icq\smiles\mrasmileslang_tr.xml.fuyd0h
from %APPDATA%\icqm\icq\smiles\flash\mad dog.swf to %APPDATA%\icqm\icq\smiles\flash\mad dog.swf.vyx8z
from %APPDATA%\icqm\icq\smiles\flash\rosy.swf to %APPDATA%\icqm\icq\smiles\flash\rosy.swf.tkaexjg
from %APPDATA%\icqm\icq\smiles\flash\serdze.swf to %APPDATA%\icqm\icq\smiles\flash\serdze.swf.q7ktd
from %APPDATA%\icqm\icq\smiles\flash\skratch.swf to %APPDATA%\icqm\icq\smiles\flash\skratch.swf.ehtlyq
from %APPDATA%\icqm\icq\smiles\flash\smeh.swf to %APPDATA%\icqm\icq\smiles\flash\smeh.swf.3ypatmi
from %APPDATA%\icqm\icq\smiles\flash\sobaka.swf to %APPDATA%\icqm\icq\smiles\flash\sobaka.swf.ytvm
from %APPDATA%\icqm\icq\smiles\flash\sobaka_strelyaet.swf to %APPDATA%\icqm\icq\smiles\flash\sobaka_strelyaet.swf.n11dq
from %APPDATA%\icqm\icq\smiles\flash\kot_wow.swf to %APPDATA%\icqm\icq\smiles\flash\kot_wow.swf.8z9q
from %APPDATA%\icqm\icq\smiles\flash\rabotaet.swf to %APPDATA%\icqm\icq\smiles\flash\rabotaet.swf.tkaexjg
from %APPDATA%\icqm\icq\smiles\smiles\8march\drink.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\drink.gif.dwgxk
from %APPDATA%\icqm\icq\smiles\smiles\8march\flowers.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\flowers.gif.mqw0a0
from %APPDATA%\icqm\icq\smiles\smiles\8march\hug.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\hug.gif.mqw0a0
from %APPDATA%\icqm\icq\smiles\smiles\animated\fingal.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\fingal.gif.p8esmsx
from %APPDATA%\icqm\icq\smiles\smiles\animated\flowr.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\flowr.gif.djxho
from %APPDATA%\icqm\icq\smiles\smiles\animated\gg.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\gg.gif.gpibqi
from %APPDATA%\icqm\icq\smiles\smiles\animated\gg2.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\gg2.gif.gpibqi
from %APPDATA%\icqm\icq\smiles\smiles\animated\gift.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\gift.gif.gpibqi
from %APPDATA%\icqm\icq\smiles\smiles\animated\history.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\history.gif.wegdxg
from %APPDATA%\icqm\icq\smiles\smiles\animated\hungry.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\hungry.gif.wegdxg
from %APPDATA%\icqm\icq\smiles\smiles\animated\love.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\love.gif.9cwxp5p
from %APPDATA%\icqm\icq\smiles\flash\kot_spasibo.swf to %APPDATA%\icqm\icq\smiles\flash\kot_spasibo.swf.8z9q
from %APPDATA%\icqm\icq\smiles\smiles\animated\pistolet.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\pistolet.gif.ang0
from %APPDATA%\icqm\icq\smiles\smiles\animated\poison.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\poison.gif.ang0
from %APPDATA%\icqm\icq\smiles\smiles\animated\rainbow.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\rainbow.gif.qhz32
from %APPDATA%\icqm\icq\smiles\smiles\animated\red.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\red.gif.ffqis
from %APPDATA%\icqm\icq\smiles\smiles\animated\sad.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\sad.gif.ffqis
from %APPDATA%\icqm\icq\smiles\smiles\animated\sing.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\sing.gif.ffqis
from %APPDATA%\icqm\icq\smiles\smiles\animated\skuka.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\skuka.gif.r9uqaj
from %APPDATA%\icqm\icq\smiles\smiles\animated\fight.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\fight.gif.89cvyqg
from %APPDATA%\icqm\icq\smiles\smiles\animated\angel.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\angel.gif.0qkd
from %APPDATA%\icqm\icq\smiles\smiles\animated\eat.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\eat.gif.89cvyqg
from %APPDATA%\icqm\icq\smiles\smiles\8march\sunburn.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\sunburn.gif.opsxvjm
from %APPDATA%\icqm\icq\smiles\smiles\8march\joy.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\joy.gif.hxi2ytb
from %APPDATA%\icqm\icq\smiles\smiles\8march\love.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\love.gif.6zgimhm
from %APPDATA%\icqm\icq\smiles\smiles\8march\mad.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\mad.gif.od6vzvt
from %APPDATA%\icqm\icq\smiles\smiles\8march\new_dress.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\new_dress.gif.9ewg
from %APPDATA%\icqm\icq\smiles\smiles\8march\perfume.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\perfume.gif.hobhonl
from %APPDATA%\icqm\icq\smiles\smiles\8march\ring.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\ring.gif.7sttepz
from %APPDATA%\icqm\icq\smiles\smiles\8march\shoes.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\shoes.gif.7sttepz
from %APPDATA%\icqm\icq\smiles\smiles\animated\sleep.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\sleep.gif.lja4li9
from %APPDATA%\icqm\icq\smiles\smiles\animated\dance.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\dance.gif.jytidld
from %APPDATA%\icqm\icq\smiles\smiles\animated\appl.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\appl.gif.wzaxr
from %APPDATA%\icqm\icq\smiles\smiles\animated\beauty.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\beauty.gif.wzaxr
from %APPDATA%\icqm\icq\smiles\smiles\animated\beer.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\beer.gif.gdk0bd
from %APPDATA%\icqm\icq\smiles\smiles\animated\blew.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\blew.gif.qh9gkn
from %APPDATA%\icqm\icq\smiles\smiles\animated\book.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\book.gif.qh9gkn
from %APPDATA%\icqm\icq\smiles\smiles\animated\could.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\could.gif.qh9gkn
from %APPDATA%\icqm\icq\smiles\smiles\animated\cry.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\cry.gif.jytidld
from %APPDATA%\icqm\icq\smiles\smiles\animated\devil.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\devil.gif.89cvyqg
from %APPDATA%\icqm\icq\smiles\smiles\animated\kiss.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\kiss.gif.9cwxp5p
from %APPDATA%\icqm\icq\smiles\flash\kot_obida.swf to %APPDATA%\icqm\icq\smiles\flash\kot_obida.swf.gwyr5ga
from %APPDATA%\icqm\icq\smiles\flash\drako_snegyrka.swf to %APPDATA%\icqm\icq\smiles\flash\drako_snegyrka.swf.rftj
from %APPDATA%\icqm\icq\database\citylist_uz.csv to %APPDATA%\icqm\icq\database\citylist_uz.csv.k6qt
from %APPDATA%\icqm\icq\dll\altergeo.msi to %APPDATA%\icqm\icq\dll\altergeo.msi.xd0qv9
from %APPDATA%\icqm\icq\fonts\segoesc.ttf to %APPDATA%\icqm\icq\fonts\segoesc.ttf.s1ckc24
from %APPDATA%\icqm\icq\graphics\phone\agent_offline.bmp to %APPDATA%\icqm\icq\graphics\phone\agent_offline.bmp.bzeugo0
from %APPDATA%\icqm\icq\graphics\phone\agent_offline_inv.bmp to %APPDATA%\icqm\icq\graphics\phone\agent_offline_inv.bmp.bzeugo0
from %APPDATA%\icqm\icq\graphics\phone\agent_online.bmp to %APPDATA%\icqm\icq\graphics\phone\agent_online.bmp.bzeugo0
from %APPDATA%\ghisler\wincmd.ini to %APPDATA%\ghisler\wincmd.ini.vkltmo0
from %APPDATA%\icqm\icq\graphics\phone\agent_online_inv.bmp to %APPDATA%\icqm\icq\graphics\phone\agent_online_inv.bmp.bzeugo0
from %APPDATA%\icqm\icq\graphics\phone\icq_offline_inv.bmp to %APPDATA%\icqm\icq\graphics\phone\icq_offline_inv.bmp.qczc9za
from %APPDATA%\icqm\icq\graphics\phone\icq_online.bmp to %APPDATA%\icqm\icq\graphics\phone\icq_online.bmp.qczc9za
from %APPDATA%\icqm\icq\graphics\phone\icq_online_inv.bmp to %APPDATA%\icqm\icq\graphics\phone\icq_online_inv.bmp.qczc9za
from %APPDATA%\icqm\icq\graphics\phone\phone.bmp to %APPDATA%\icqm\icq\graphics\phone\phone.bmp.1dng
from %APPDATA%\icqm\icq\graphics\phone\phone_inv.bmp to %APPDATA%\icqm\icq\graphics\phone\phone_inv.bmp.uyy4k
from %APPDATA%\icqm\icq\graphics\phone\screen-busy-mouse.bmp to %APPDATA%\icqm\icq\graphics\phone\screen-busy-mouse.bmp.ziloa
from %APPDATA%\icqm\icq\database\citylist_tr.csv to %APPDATA%\icqm\icq\database\citylist_tr.csv.8p7inqc
from %APPDATA%\icqm\icq\database\citylist_ua.csv to %APPDATA%\icqm\icq\database\citylist_ua.csv.tezh
from %APPDATA%\icqm\icq\database\citylist_ru.csv to %APPDATA%\icqm\icq\database\citylist_ru.csv.caz3yzh
from %APPDATA%\icqm\icq\database\citylist_kz.csv to %APPDATA%\icqm\icq\database\citylist_kz.csv.olefso
from %APPDATA%\icqm\icq\database\citylist_en.csv to %APPDATA%\icqm\icq\database\citylist_en.csv.l27hj
from %APPDATA%\adobe\acrobat\dc\preferences\defaultheuristics.dat to %APPDATA%\adobe\acrobat\dc\preferences\defaultheuristics.dat.dzoo
from %APPDATA%\adobe\acrobat\dc\security\addressbook.acrodata to %APPDATA%\adobe\acrobat\dc\security\addressbook.acrodata.yawn7y5
from %APPDATA%\adobe\acrobat\dc\security\crlcache\0fded5ceb68c302b1cdb2bddd9d0000e76539cb0.crl to %APPDATA%\adobe\acrobat\dc\security\crlcache\0fded5ceb68c302b1cdb2bddd9d0000e76539cb0.crl.geqs
from %APPDATA%\adobe\acrobat\dc\security\crlcache\ce338828149963dcea4cd26bb86f0363b4ca0ba5.crl to %APPDATA%\adobe\acrobat\dc\security\crlcache\ce338828149963dcea4cd26bb86f0363b4ca0ba5.crl.geqs
from %APPDATA%\adobe\acrobat\dc\tmdocs.sav to %APPDATA%\adobe\acrobat\dc\tmdocs.sav.uikj0qc
from %APPDATA%\adobe\acrobat\dc\tmgrpprm.sav to %APPDATA%\adobe\acrobat\dc\tmgrpprm.sav.uikj0qc
from %APPDATA%\icqm\icq\graphics\phone\screen-busy.bmp to %APPDATA%\icqm\icq\graphics\phone\screen-busy.bmp.ziloa
from %APPDATA%\icqm\icq\graphics\phone\icq_offline.bmp to %APPDATA%\icqm\icq\graphics\phone\icq_offline.bmp.bzeugo0
from %APPDATA%\adobe\logtransport2\logtransport2.cfg to %APPDATA%\adobe\logtransport2\logtransport2.cfg.vkltmo0
from %APPDATA%\icq-profile\base\opt.dbs to %APPDATA%\icq-profile\base\opt.dbs.lvacwd
from %APPDATA%\icq-profile\installerlang.xml to %APPDATA%\icq-profile\installerlang.xml.nx2sxbc
from %APPDATA%\icq-profile\update\languages.aff to %APPDATA%\icq-profile\update\languages.aff.nx2sxbc
from %APPDATA%\icq-profile\update\languages.dict to %APPDATA%\icq-profile\update\languages.dict.fm2r
from %APPDATA%\icq-profile\update\languages.hash to %APPDATA%\icq-profile\update\languages.hash.ryr3
from %APPDATA%\icq-profile\update\ver.txt to %APPDATA%\icq-profile\update\ver.txt.ryr3
from %APPDATA%\adobe\acrobat\dc\jscache\globsettings to %APPDATA%\adobe\acrobat\dc\jscache\globsettings.m2yhq
from %APPDATA%\icq-profile\base\mra.dbs to %APPDATA%\icq-profile\base\mra.dbs.baccg0
from %APPDATA%\icqm\icq\graphics\phone\screen-decline-mouse.bmp to %APPDATA%\icqm\icq\graphics\phone\screen-decline-mouse.bmp.pnnwpy
from %APPDATA%\icqm\icq\graphics\phone\screen-decline.bmp to %APPDATA%\icqm\icq\graphics\phone\screen-decline.bmp.dksoncn
from %APPDATA%\icqm\icq\graphics\phone\screen-offline-inv.bmp to %APPDATA%\icqm\icq\graphics\phone\screen-offline-inv.bmp.o1oob
from %APPDATA%\icqm\icq\smiles\flash\canthearu.swf to %APPDATA%\icqm\icq\smiles\flash\canthearu.swf.6sdz
from %APPDATA%\icqm\icq\smiles\flash\chillout.swf to %APPDATA%\icqm\icq\smiles\flash\chillout.swf.cekd3
from %APPDATA%\icqm\icq\smiles\flash\devochka.swf to %APPDATA%\icqm\icq\smiles\flash\devochka.swf.cekd3
from %APPDATA%\icqm\icq\smiles\flash\drako_bolnoy.swf to %APPDATA%\icqm\icq\smiles\flash\drako_bolnoy.swf.8t9ws
from %APPDATA%\icqm\icq\smiles\flash\drako_koster.swf to %APPDATA%\icqm\icq\smiles\flash\drako_koster.swf.qncpto
from %APPDATA%\icqm\icq\smiles\flash\drako_love.swf to %APPDATA%\icqm\icq\smiles\flash\drako_love.swf.qncpto
from %APPDATA%\icqm\icq\smiles\flash\drako_opyatnica.swf to %APPDATA%\icqm\icq\smiles\flash\drako_opyatnica.swf.rftj
from %APPDATA%\icqm\icq\smiles\flash\drako_zombie.swf to %APPDATA%\icqm\icq\smiles\flash\drako_zombie.swf.vmor6
from %APPDATA%\icqm\icq\smiles\flash\kot_nedutza.swf to %APPDATA%\icqm\icq\smiles\flash\kot_nedutza.swf.eonns89
from %APPDATA%\icqm\icq\smiles\flash\duh.swf to %APPDATA%\icqm\icq\smiles\flash\duh.swf.93hzh
from %APPDATA%\icqm\icq\smiles\flash\gangsta.swf to %APPDATA%\icqm\icq\smiles\flash\gangsta.swf.wsw7iet
from %APPDATA%\icqm\icq\smiles\flash\guby.swf to %APPDATA%\icqm\icq\smiles\flash\guby.swf.wsw7iet
from %APPDATA%\icqm\icq\smiles\flash\information.swf to %APPDATA%\icqm\icq\smiles\flash\information.swf.fagd2gp
from %APPDATA%\icqm\icq\smiles\flash\joy.swf to %APPDATA%\icqm\icq\smiles\flash\joy.swf.rtxt
from %APPDATA%\icqm\icq\smiles\flash\kisses.swf to %APPDATA%\icqm\icq\smiles\flash\kisses.swf.rtxt
from %APPDATA%\icqm\icq\smiles\flash\kot_cool.swf to %APPDATA%\icqm\icq\smiles\flash\kot_cool.swf.77lp
from %APPDATA%\icqm\icq\smiles\flash\boo.swf to %APPDATA%\icqm\icq\smiles\flash\boo.swf.llyt
from %APPDATA%\icqm\icq\html\pt\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\pt\loading\progress_agent.gif.xcyl8
from %APPDATA%\icqm\icq\smiles\flash\bodun.swf to %APPDATA%\icqm\icq\smiles\flash\bodun.swf.ehlmz5f
from %APPDATA%\icqm\icq\html\kz\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\kz\loading\progress_agent.gif.hl7r1wt
from %APPDATA%\icqm\icq\graphics\phone\screen-offline.bmp to %APPDATA%\icqm\icq\graphics\phone\screen-offline.bmp.spcjjq
from %APPDATA%\icqm\icq\graphics\phone\screen-online-inv.bmp to %APPDATA%\icqm\icq\graphics\phone\screen-online-inv.bmp.fei5
from %APPDATA%\icqm\icq\graphics\phone\screen-online.bmp to %APPDATA%\icqm\icq\graphics\phone\screen-online.bmp.pfnuq
from %APPDATA%\icqm\icq\html\bg\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\bg\loading\progress_agent.gif.mrxgq4q
from %APPDATA%\icqm\icq\html\cz\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\cz\loading\progress_agent.gif.igipw
from %APPDATA%\icqm\icq\html\de\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\de\loading\progress_agent.gif.jkd6
from %APPDATA%\icqm\icq\html\en\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\en\loading\progress_agent.gif.4ipe
from %APPDATA%\icqm\icq\smiles\flash\kot_goodbye.swf to %APPDATA%\icqm\icq\smiles\flash\kot_goodbye.swf.muspkc4
from %APPDATA%\icqm\icq\smiles\flash\beback.swf to %APPDATA%\icqm\icq\smiles\flash\beback.swf.07yswg
from %APPDATA%\icqm\icq\html\ru\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\ru\loading\progress_agent.gif.zm0o
from %APPDATA%\icqm\icq\html\tr\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\tr\loading\progress_agent.gif.47pijwy
from %APPDATA%\icqm\icq\html\ua\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\ua\loading\progress_agent.gif.vaottd
from %APPDATA%\icqm\icq\html\uz\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\uz\loading\progress_agent.gif.lcljqax
from %APPDATA%\icqm\icq\smiles\flash\akitaka.swf to %APPDATA%\icqm\icq\smiles\flash\akitaka.swf.5n66
from %APPDATA%\icqm\icq\smiles\flash\angel.swf to %APPDATA%\icqm\icq\smiles\flash\angel.swf.8ilro
from %APPDATA%\icqm\icq\smiles\flash\bad_cold.swf to %APPDATA%\icqm\icq\smiles\flash\bad_cold.swf.07yswg
from %APPDATA%\icqm\icq\smiles\flash\beer.swf to %APPDATA%\icqm\icq\smiles\flash\beer.swf.ehlmz5f
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\drinks.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\drinks.gif.fgajl8
from %APPDATA%\icqm\icq\smiles\smiles\set03\shok.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\shok.gif.ax7fdw
from %APPDATA%\icqm\icq\smiles\smiles\animated\victory.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\victory.gif.9zbo
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\25a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\25a.gif.oy5by
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\26a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\26a.gif.oy5by
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\27a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\27a.gif.hnkynl
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\28a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\28a.gif.hnkynl
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\29a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\29a.gif.hnkynl
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\30a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\30a.gif.hnkynl
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\11a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\11a.gif.kxfc
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\31a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\31a.gif.whvnbks
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\33a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\33a.gif.whvnbks
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\34a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\34a.gif.whvnbks
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\36a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\36a.gif.ll0f
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\37.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\37.gif.ll0f
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\38a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\38a.gif.ll0f
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\39a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\39a.gif.ll0f
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\23a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\23a.gif.oy5by
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\24a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\24a.gif.oy5by
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\22a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\22a.gif.7ufod
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\21a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\21a.gif.7ufod
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\20a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\20a.gif.7ufod
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\03a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\03a.gif.gwqic2
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\04b.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\04b.gif.gwqic2
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\06a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\06a.gif.gwqic2
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\07a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\07a.gif.q3uuxvk
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\08a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\08a.gif.kxfc
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\09a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\09a.gif.kxfc
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\40a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\40a.gif.5sj3
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\32a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\32a.gif.whvnbks
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\10a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\10a.gif.kxfc
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\13a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\13a.gif.zgu4v
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\14a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\14a.gif.zgu4v
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\15a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\15a.gif.zgu4v
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\16a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\16a.gif.zgu4v
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\17a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\17a.gif.7ufod
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\19a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\19a.gif.7ufod
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\02.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\02.gif.gwqic2
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\12a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\12a.gif.zgu4v
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\41b.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\41b.gif.5sj3
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\42a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\42a.gif.5sj3
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\43a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\43a.gif.5sj3
from %APPDATA%\icqm\icq\smiles\smiles\set03\dirol.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\dirol.gif.eupv
from %APPDATA%\icqm\icq\smiles\smiles\set03\drinks.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\drinks.gif.6o8j
from %APPDATA%\icqm\icq\smiles\smiles\set03\facepalm.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\facepalm.gif.6o8j
from %APPDATA%\icqm\icq\smiles\smiles\set03\fool.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\fool.gif.6o8j
from %APPDATA%\icqm\icq\smiles\smiles\set03\give_rose.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\give_rose.gif.cmepe
from %APPDATA%\icqm\icq\smiles\smiles\set03\good.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\good.gif.cmepe
from %APPDATA%\icqm\icq\smiles\smiles\set03\kiss_mini.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\kiss_mini.gif.cmepe
from %APPDATA%\icqm\icq\smiles\smiles\set03\mocking.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\mocking.gif.cmepe
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\01.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\01.gif.gwqic2
from %APPDATA%\icqm\icq\smiles\smiles\set03\music.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\music.gif.92znl
from %APPDATA%\icqm\icq\smiles\smiles\set03\nea.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\nea.gif.92znl
from %APPDATA%\icqm\icq\smiles\smiles\set03\pardon.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\pardon.gif.92znl
from %APPDATA%\icqm\icq\smiles\smiles\set03\rofl.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\rofl.gif.92znl
from %APPDATA%\icqm\icq\smiles\smiles\set03\rolleyes.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\rolleyes.gif.ax7fdw
from %APPDATA%\icqm\icq\smiles\smiles\set03\sad.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\sad.gif.ax7fdw
from %APPDATA%\icqm\icq\smiles\smiles\set03\scratch_one-s_head.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\scratch_one-s_head.gif.ax7fdw
from %APPDATA%\icqm\icq\smiles\smiles\set03\diablo.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\diablo.gif.eupv
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\52a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\52a.gif.8trqh
from %APPDATA%\icqm\icq\smiles\smiles\set03\dance.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\dance.gif.eupv
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\51a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\51a.gif.8trqh
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\44a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\44a.gif.xwvcm
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\45a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\45a.gif.xwvcm
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\46a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\46a.gif.xwvcm
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\47a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\47a.gif.xwvcm
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\48a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\48a.gif.xwvcm
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\49a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\49a.gif.xwvcm
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\50a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\50a.gif.8trqh
from %APPDATA%\icqm\icq\smiles\smiles\animated\tongue.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\tongue.gif.9zbo
from %APPDATA%\icqm\icq\smiles\smiles\set03\cray.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\cray.gif.0bjgoy
from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\53a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\53a.gif.8trqh
from %APPDATA%\icqm\icq\smiles\smiles\s008.gif to %APPDATA%\icqm\icq\smiles\smiles\s008.gif.prahp
from %APPDATA%\icqm\icq\smiles\smiles\set03\angel.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\angel.gif.prahp
from %APPDATA%\icqm\icq\smiles\smiles\set03\bad.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\bad.gif.prahp
from %APPDATA%\icqm\icq\smiles\smiles\set03\biggrin.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\biggrin.gif.prahp
from %APPDATA%\icqm\icq\smiles\smiles\set03\blum.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\blum.gif.0bjgoy
from %APPDATA%\icqm\icq\smiles\smiles\set03\blush.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\blush.gif.0bjgoy
from %APPDATA%\icqm\icq\smiles\smiles\set03\crazy.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\crazy.gif.0bjgoy
from %APPDATA%\icqm\icq\smiles\smiles\set03\shout.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\shout.gif.qseusme
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\yes.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\yes.gif.9oz3wj
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\rofl.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\rofl.gif.zjjyz
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\kissing.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\kissing.gif.fj53gr
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\laughing out loud (lol).gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\laughing out loud (lol).gif.0iqxfi2
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\laughing.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\laughing.gif.0iqxfi2
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\listening to music.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\listening to music.gif.hpkq8z8
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\mad.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\mad.gif.hpkq8z8
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\nothing to say.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\nothing to say.gif.hpkq8z8
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\blinking.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\blinking.gif.onzuf9
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\sad.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\sad.gif.3onhkqr
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\smile.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\smile.gif.l4rf
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\stop.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\stop.gif.l4rf
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\surprised.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\surprised.gif.l4rf
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\thank you.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\thank you.gif.l4rf
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\thumbs up.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\thumbs up.gif.53jbp
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\tongue out.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\tongue out.gif.53jbp
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\kiss.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\kiss.gif.u8ixv
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\kissed.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\kissed.gif.fj53gr
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\in love.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\in love.gif.u8ixv
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\gross.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\gross.gif.u8ixv
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\falling asleep.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\falling asleep.gif.kwfj
from %APPDATA%\icqm\icq\smiles\smiles\cat\cat_attack.gif to %APPDATA%\icqm\icq\smiles\smiles\cat\cat_attack.gif.8bj31rp
from %APPDATA%\icqm\icq\smiles\smiles\cat\cat_hand.gif to %APPDATA%\icqm\icq\smiles\smiles\cat\cat_hand.gif.0urq
from %APPDATA%\icqm\icq\smiles\smiles\cat\cat_lick.gif to %APPDATA%\icqm\icq\smiles\smiles\cat\cat_lick.gif.dpxh
from %APPDATA%\icqm\icq\smiles\smiles\cat\cat_meow.gif to %APPDATA%\icqm\icq\smiles\smiles\cat\cat_meow.gif.kd1qav4
from %APPDATA%\icqm\icq\smiles\smiles\cat\cat_mouse.gif to %APPDATA%\icqm\icq\smiles\smiles\cat\cat_mouse.gif.kd1qav4
from %APPDATA%\icqm\icq\smiles\smiles\cat\cat_paper.gif to %APPDATA%\icqm\icq\smiles\smiles\cat\cat_paper.gif.8aijq8t
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\air_kiss.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\air_kiss.gif.ixbdm
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\scream.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\scream.gif.3onhkqr
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\angel.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\angel.gif.lifkg
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\bomb.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\bomb.gif.bjbrcm3
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\can't say-shut up.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\can't say-shut up.gif.10yst
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\cool.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\cool.gif.z5ryk
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\crying.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\crying.gif.r8oz
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\devil.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\devil.gif.2sobfuo
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\drinking.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\drinking.gif.kwfj
from %APPDATA%\icqm\icq\smiles\smiles\animated\wonder.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\wonder.gif.weaj5
from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\blushing.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\blushing.gif.c1qc7p
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\bad.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\bad.gif.ixbdm
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\biggrin.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\biggrin.gif.ixbdm
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\blum1.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\blum1.gif.ixbdm
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\lol.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\lol.gif.4qaf
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\mad.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\mad.gif.4qaf
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\man_in_love.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\man_in_love.gif.4qaf
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\mocking.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\mocking.gif.zjjyz
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\music.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\music.gif.zjjyz
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\nea.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\nea.gif.zjjyz
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\pardon.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\pardon.gif.zjjyz
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\sad.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\sad.gif.6h8xo
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\yahoo.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\yahoo.gif.9oz3wj
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\scratch_one-s_head.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\scratch_one-s_head.gif.6h8xo
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\shok.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\shok.gif.olgqe
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\shout.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\shout.gif.olgqe
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\smile.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\smile.gif.olgqe
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\sorry.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\sorry.gif.olgqe
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\unknown.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\unknown.gif.olgqe
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\wacko1.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\wacko1.gif.9oz3wj
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\kiss3.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\kiss3.gif.4qaf
from %APPDATA%\icqm\icq\smiles\smiles\animated\smile.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\smile.gif.lja4li9
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\kiss.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\kiss.gif.4qaf
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\diablo.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\diablo.gif.fgajl8
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\blush.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\blush.gif.ixbdm
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\bomb.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\bomb.gif.8srqnv
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\bye2.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\bye2.gif.8srqnv
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\cool.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\cool.gif.8srqnv
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\crazy.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\crazy.gif.8srqnv
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\cry.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\cry.gif.fgajl8
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\dance.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\dance.gif.fgajl8
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\wink.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\wink.gif.9oz3wj
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\ireful.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\ireful.gif.j88bqf3
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\gamer.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\gamer.gif.qtjojev
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\girl_angel.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\girl_angel.gif.qtjojev
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\give_heart.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\give_heart.gif.qtjojev
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\give_rose.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\give_rose.gif.qtjojev
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\good.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\good.gif.j88bqf3
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\hang1.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\hang1.gif.j88bqf3
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\hi.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\hi.gif.j88bqf3
from %APPDATA%\icqm\icq\smiles\smiles\koloboks\i_am_so_happy.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\i_am_so_happy.gif.j88bqf3
from %APPDATA%\icqm\icq\smiles\statuses\set01\status_offline_xp.ico to %APPDATA%\icqm\icq\smiles\statuses\set01\status_offline_xp.ico.qywf

Modifies user data files (Trojan.Encoder).

Changes user data files extensions (Trojan.Encoder).

Network activity

TCP

HTTP GET requests

http://91.##8.114.37/auth/login

HTTP POST requests

http://91.##8.114.4/sepa/tracker/itxuid.cgi
http://91.##8.114.25/mcxxspx.jspx?lb#############
http://91.##8.114.26/edit/create/qxehrymne.jspx?tk##########
http://91.##8.114.31/pajxpgeo.aspx?bk####################
http://91.##8.114.32/account/qyirqmt.phtml?g=#############################
http://91.##8.114.37/news/signin/hbuvftpa.asp?lh#####
http://91.##8.114.38/eheurvkkc.jsp?wh#########################
http://91.##8.114.77/update/payout/ouduwsnxf.do?sl#############################
http://91.##8.114.79/sepa/ugrvbyxror.aspx?x=##############################################

Miscellaneous

Creates and executes the following

'<SYSTEM32>\wbem\wmic.exe' shadowcopy delete' (with hidden window)

Executes the following

'<SYSTEM32>\vssvc.exe'
'<SYSTEM32>\svchost.exe' -k swprv

Technologies

Begriffe

Schulung und Training

Mythen

Technical Information

Curing recommendations

Free trial