Trojan.Encoder.29487

Technical Information

To ensure autorun and distribution

Creates or modifies the following files

%ALLUSERSPROFILE%\start menu\programs\startup\@_read_to_recover_files_@.txt
%APPDATA%\microsoft\excel\xlstart\@_read_to_recover_files_@.txt
%APPDATA%\microsoft\word\startup\@_read_to_recover_files_@.txt
%HOMEPATH%\start menu\programs\startup\@_read_to_recover_files_@.txt

Malicious functions

To complicate detection of its presence in the operating system,

deletes volume shadow copies.

Executes the following

'<SYSTEM32>\taskkill.exe' /F /IM sql*
'<SYSTEM32>\taskkill.exe' /F /IM agent*
'<SYSTEM32>\taskkill.exe' /F /IM backup*
'<SYSTEM32>\taskkill.exe' /F /IM vm*

Reads files which store third party applications passwords

%APPDATA%\thunderbird\profiles.ini
<LS_APPDATA>\google\chrome\user data\default\login data
<LS_APPDATA>\google\chrome\user data\default\cookies
<LS_APPDATA>\chromium\user data\default\web data
%HOMEPATH%\desktop\uep_form_786_bulletin_1726i602.doc
%HOMEPATH%\desktop\sdszfo.docx
%HOMEPATH%\desktop\nwfieldnotes1966.docx
%HOMEPATH%\desktop\join.avi
%HOMEPATH%\desktop\hadac_newsletter_july_2010_final.docx
%HOMEPATH%\desktop\fi51.doc
%HOMEPATH%\desktop\february_catalogue__2015.doc
%HOMEPATH%\desktop\dashborder_192.bmp
%HOMEPATH%\desktop\contosoroot.cer
%HOMEPATH%\desktop\contoso_1.cer
%HOMEPATH%\desktop\archer.avi
%HOMEPATH%\desktop\aoc_saq_d_v3_merchant.docx
%HOMEPATH%\desktop\testcertificate.cer
%HOMEPATH%\desktop\sdksampleunprivdeveloper.cer
<LS_APPDATA>\google\chrome\user data\default\web data
<LS_APPDATA>\nichrome\user data\default\web data

Modifies file system

Creates the following files

%ALLUSERSPROFILE%\00000000.pky
%TEMP%\pyl1.tmp\translations\ast\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\as\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\as\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\ar\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\ar\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\af\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\af\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\lib\xml\parsers\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\bg\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\lib\xml\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\lib\wubi\frontends\win32\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\lib\wubi\frontends\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\lib\wubi\backends\win32\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\lib\wubi\backends\common\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\lib\wubi\backends\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\lib\wubi\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\lib\xml\sax\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\lib\sets\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\bg\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\de\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\da\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\da\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\cy\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\cy\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\csb\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\csb\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\cs\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\lib\winui\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\ast\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\crh\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\ca\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\ca\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\bs\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\bs\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\br\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\br\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\bo\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\crh\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\bo\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\lib\urlgrabber\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\lib\openpgp\sap\util\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\el\@_read_to_recover_files_@.txt
%TEMP%\<INETFILES>\@_read_to_recover_files_@.txt
%TEMP%\lilo.1120\@_read_to_recover_files_@.txt
%TEMP%\hsperfdata_user\@_read_to_recover_files_@.txt
%TEMP%\<INETFILES>\content.ie5\ibwpozo7\@_read_to_recover_files_@.txt
%TEMP%\<INETFILES>\content.ie5\g1qjk5mv\@_read_to_recover_files_@.txt
%TEMP%\<INETFILES>\content.ie5\chyzclen\@_read_to_recover_files_@.txt
%TEMP%\<INETFILES>\content.ie5\4xoboj8j\@_read_to_recover_files_@.txt
%TEMP%\<INETFILES>\content.ie5\@_read_to_recover_files_@.txt
%TEMP%\outlook logging\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\de\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\temporary directory 2 for omni.ja_20150820125829.zip\chrome\en-gb\@_read_to_recover_files_@.txt
%TEMP%\temporary directory 2 for omni.ja_20150820125829.zip\chrome\@_read_to_recover_files_@.txt
%TEMP%\temporary directory 2 for omni.ja_20150820125829.zip\@_read_to_recover_files_@.txt
%TEMP%\temporary directory 1 for omni.ja_20150820125829.zip\chrome\en-gb\locale\branding\@_read_to_recover_files_@.txt
%TEMP%\temporary directory 1 for omni.ja_20150820125829.zip\chrome\en-gb\locale\@_read_to_recover_files_@.txt
%TEMP%\temporary directory 1 for omni.ja_20150820125829.zip\chrome\en-gb\@_read_to_recover_files_@.txt
%TEMP%\temporary directory 1 for omni.ja_20150820125829.zip\chrome\@_read_to_recover_files_@.txt
%TEMP%\temporary directory 2 for omni.ja_20150820125829.zip\chrome\en-gb\locale\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\cs\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\bin\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\lib\crypto\publickey\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\lib\crypto\util\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\lib\openpgp\sap\msg\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\lib\openpgp\sap\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\lib\openpgp\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\lib\logging\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\lib\encodings\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\lib\ctypes\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\lib\bittorrent\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\lib\openpgp\sap\pkt\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\bin\formats\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\data\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\lib\crypto\cipher\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\lib\crypto\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\lib\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\data\images\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\data\custom-installation\packages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\data\custom-installation\hooks\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\data\custom-installation\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\lib\crypto\hash\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\61\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\el\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\mk\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\lv\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\lv\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\lt\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\lt\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\ku\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\ku\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\ko\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\mk\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\ko\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\kn\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\kk\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\kk\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\kab\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\kab\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\ka\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\ka\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\jv\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\kn\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\jv\@_read_to_recover_files_@.txt
%TEMP%\temporary directory 1 for omni.ja_20150820125829.zip\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\ja\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\oc\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\nn\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\nn\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\nl\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\nl\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\ne\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\ne\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\nb\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\ml\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\ml\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\my\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\mt\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\mt\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\ms\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\ms\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\mr\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\mr\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\mo\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\my\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\mo\@_read_to_recover_files_@.txt
%TEMP%\temporary directory 2 for omni.ja_20150820125829.zip\chrome\en-gb\locale\browser-region\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\it\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\hr\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\fa\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\fa\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\eu\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\eu\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\et\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\et\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\es\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\fi\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\es\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\eo\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\en_gb\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\en_gb\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\en_ca\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\en_ca\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\en_au\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\en_au\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\en\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\eo\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\ja\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\en\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\fi\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\it\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\is\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\is\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\id\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\id\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\hu\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\hu\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\hr\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\fr\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\fr\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\hi\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\he\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\he\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\gu\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\gu\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\gl\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\gl\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\fy\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\hi\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\fy\@_read_to_recover_files_@.txt
%TEMP%\opera installer\@_read_to_recover_files_@.txt
%TEMP%\microsoft visual c++ 2010 x86 redistributable setup_10.0.30319\@_read_to_recover_files_@.txt
%TEMP%\microsoft .net framework 4 setup_4.0.30319\@_read_to_recover_files_@.txt
<LS_APPDATA>\steam\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\0\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\@_read_to_recover_files_@.txt
<LS_APPDATA>\steam\htmlcache\@_read_to_recover_files_@.txt
<LS_APPDATA>\mozilla\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\10\@_read_to_recover_files_@.txt
<LS_APPDATA>\mozilla\firefox\profiles\22ie2h77.default\thumbnails\@_read_to_recover_files_@.txt
<LS_APPDATA>\qip\@_read_to_recover_files_@.txt
<LS_APPDATA>\opera software\opera stable\cache\@_read_to_recover_files_@.txt
<LS_APPDATA>\opera software\opera stable\@_read_to_recover_files_@.txt
<LS_APPDATA>\opera software\@_read_to_recover_files_@.txt
<LS_APPDATA>\nichrome\user data\default\@_read_to_recover_files_@.txt
<LS_APPDATA>\nichrome\user data\@_read_to_recover_files_@.txt
<LS_APPDATA>\nichrome\@_read_to_recover_files_@.txt
<LS_APPDATA>\qip\qip 2005\@_read_to_recover_files_@.txt
<LS_APPDATA>\qip\qip 2005\users\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\11\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\21\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\22\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\29\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\28\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\27\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\26\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\25\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\24\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\23\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\3\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\12\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\13\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\2\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\19\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\18\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\17\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\16\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\15\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\14\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\20\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\oc\lc_messages\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\30\@_read_to_recover_files_@.txt
<LS_APPDATA>\mozilla\firefox\profiles\22ie2h77.default\cache2\entries\@_read_to_recover_files_@.txt
<LS_APPDATA>\microsoft\dbgclr\@_read_to_recover_files_@.txt
<LS_APPDATA>\microsoft\internet explorer\services\@_read_to_recover_files_@.txt
<LS_APPDATA>\microsoft\internet explorer\@_read_to_recover_files_@.txt
<LS_APPDATA>\microsoft\imjp9_0\@_read_to_recover_files_@.txt
<LS_APPDATA>\microsoft\imjp8_1\@_read_to_recover_files_@.txt
<LS_APPDATA>\microsoft\imjp12\@_read_to_recover_files_@.txt
<LS_APPDATA>\microsoft\ime12\@_read_to_recover_files_@.txt
<LS_APPDATA>\microsoft\forms\@_read_to_recover_files_@.txt
<LS_APPDATA>\mozilla\firefox\profiles\22ie2h77.default\safebrowsing\@_read_to_recover_files_@.txt
<LS_APPDATA>\microsoft\msdn\7.0\@_read_to_recover_files_@.txt
<LS_APPDATA>\microsoft\credentials\s-1-5-21-1229272821-842925246-1060284298-1003\@_read_to_recover_files_@.txt
<LS_APPDATA>\microsoft\credentials\@_read_to_recover_files_@.txt
<LS_APPDATA>\microsoft\cd burning\@_read_to_recover_files_@.txt
<LS_APPDATA>\microsoft\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\pnacl\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\widevinecdm\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\swiftshader\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\swreporter\@_read_to_recover_files_@.txt
<LS_APPDATA>\microsoft\dbgclr\7.1\@_read_to_recover_files_@.txt
<LS_APPDATA>\mozilla\firefox\profiles\22ie2h77.default\startupcache\@_read_to_recover_files_@.txt
<LS_APPDATA>\microsoft\media player\@_read_to_recover_files_@.txt
<LS_APPDATA>\microsoft\office\groove\@_read_to_recover_files_@.txt
<LS_APPDATA>\microsoft\office\@_read_to_recover_files_@.txt
<LS_APPDATA>\mozilla\firefox\profiles\22ie2h77.default\cache2\doomed\@_read_to_recover_files_@.txt
<LS_APPDATA>\mozilla\firefox\profiles\22ie2h77.default\cache2\@_read_to_recover_files_@.txt
<LS_APPDATA>\mozilla\firefox\profiles\22ie2h77.default\offlinecache\@_read_to_recover_files_@.txt
<LS_APPDATA>\mozilla\firefox\profiles\22ie2h77.default\@_read_to_recover_files_@.txt
<LS_APPDATA>\mozilla\firefox\profiles\@_read_to_recover_files_@.txt
<LS_APPDATA>\mozilla\firefox\mozilla firefox\updates\0\@_read_to_recover_files_@.txt
<LS_APPDATA>\mozilla\firefox\mozilla firefox\updates\@_read_to_recover_files_@.txt
<LS_APPDATA>\microsoft\office\12.0\@_read_to_recover_files_@.txt
<LS_APPDATA>\mozilla\firefox\mozilla firefox\@_read_to_recover_files_@.txt
<LS_APPDATA>\microsoft\msdn\@_read_to_recover_files_@.txt
<LS_APPDATA>\microsoft help\@_read_to_recover_files_@.txt
<LS_APPDATA>\microsoft\windows media\9.0\@_read_to_recover_files_@.txt
<LS_APPDATA>\microsoft\windows media\@_read_to_recover_files_@.txt
<LS_APPDATA>\microsoft\outlook\@_read_to_recover_files_@.txt
<LS_APPDATA>\microsoft\office\onetconfig\@_read_to_recover_files_@.txt
<LS_APPDATA>\microsoft\office\groove\user\@_read_to_recover_files_@.txt
<LS_APPDATA>\microsoft\office\groove\system\@_read_to_recover_files_@.txt
<LS_APPDATA>\mozilla\firefox\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\nb\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\31\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\34\@_read_to_recover_files_@.txt
<LS_APPDATA>\thunderbird\profiles\cr5sc40q.default\cache\e\@_read_to_recover_files_@.txt
<LS_APPDATA>\thunderbird\profiles\cr5sc40q.default\cache\d\@_read_to_recover_files_@.txt
<LS_APPDATA>\thunderbird\profiles\cr5sc40q.default\cache\c\@_read_to_recover_files_@.txt
<LS_APPDATA>\thunderbird\profiles\cr5sc40q.default\cache\b\@_read_to_recover_files_@.txt
<LS_APPDATA>\thunderbird\profiles\cr5sc40q.default\cache\a\@_read_to_recover_files_@.txt
<LS_APPDATA>\thunderbird\profiles\cr5sc40q.default\cache\9\@_read_to_recover_files_@.txt
<LS_APPDATA>\thunderbird\profiles\cr5sc40q.default\cache\8\@_read_to_recover_files_@.txt
<LS_APPDATA>\thunderbird\profiles\cr5sc40q.default\cache\7\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\32\@_read_to_recover_files_@.txt
<LS_APPDATA>\thunderbird\profiles\cr5sc40q.default\cache\6\@_read_to_recover_files_@.txt
<LS_APPDATA>\thunderbird\profiles\cr5sc40q.default\cache\4\@_read_to_recover_files_@.txt
<LS_APPDATA>\thunderbird\profiles\cr5sc40q.default\cache\3\@_read_to_recover_files_@.txt
<LS_APPDATA>\thunderbird\profiles\cr5sc40q.default\cache\2\@_read_to_recover_files_@.txt
<LS_APPDATA>\thunderbird\profiles\cr5sc40q.default\cache\1\@_read_to_recover_files_@.txt
<LS_APPDATA>\thunderbird\profiles\cr5sc40q.default\cache\0\@_read_to_recover_files_@.txt
<LS_APPDATA>\thunderbird\profiles\cr5sc40q.default\cache\@_read_to_recover_files_@.txt
<LS_APPDATA>\thunderbird\profiles\cr5sc40q.default\@_read_to_recover_files_@.txt
<LS_APPDATA>\thunderbird\profiles\@_read_to_recover_files_@.txt
<LS_APPDATA>\thunderbird\profiles\cr5sc40q.default\cache\5\@_read_to_recover_files_@.txt
<LS_APPDATA>\thunderbird\mozilla thunderbird\@_read_to_recover_files_@.txt
<LS_APPDATA>\thunderbird\@_read_to_recover_files_@.txt
<LS_APPDATA>\thunderbird\profiles\cr5sc40q.default\cache2\entries\@_read_to_recover_files_@.txt
<LS_APPDATA>\thunderbird\profiles\cr5sc40q.default\cache2\@_read_to_recover_files_@.txt
%TEMP%\history\history.ie5\@_read_to_recover_files_@.txt
%TEMP%\history\@_read_to_recover_files_@.txt
%TEMP%\cookies\@_read_to_recover_files_@.txt
%TEMP%\cprogram filesopera\@_read_to_recover_files_@.txt
%TEMP%\adobe_admlogs\@_read_to_recover_files_@.txt
%TEMP%\7f4987fb1a6e43d69e3e94b29eb75926\@_read_to_recover_files_@.txt
%TEMP%\2.9.0.1467 (partner)\chrome\en-gb\locale\browser-region\@_read_to_recover_files_@.txt
<LS_APPDATA>\thunderbird\profiles\cr5sc40q.default\cache2\doomed\@_read_to_recover_files_@.txt
%TEMP%\2.9.0.1467 (partner)\chrome\en-gb\locale\branding\@_read_to_recover_files_@.txt
<LS_APPDATA>\thunderbird\profiles\cr5sc40q.default\cache\f\@_read_to_recover_files_@.txt
%TEMP%\2.9.0.1467 (partner)\chrome\@_read_to_recover_files_@.txt
%TEMP%\2.9.0.1467 (partner)\@_read_to_recover_files_@.txt
%TEMP%\@_read_to_recover_files_@.txt
%HOMEPATH%\local settings\history\history.ie5\mshist012017042620170427\@_read_to_recover_files_@.txt
%HOMEPATH%\local settings\history\history.ie5\@_read_to_recover_files_@.txt
%HOMEPATH%\local settings\history\@_read_to_recover_files_@.txt
<LS_APPDATA>\thunderbird\profiles\cr5sc40q.default\startupcache\@_read_to_recover_files_@.txt
%TEMP%\2.9.0.1467 (partner)\chrome\en-gb\locale\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\33\@_read_to_recover_files_@.txt
%TEMP%\2.9.0.1467 (partner)\chrome\en-gb\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\1\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\50\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\5\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\49\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\48\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\47\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\46\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\45\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\44\@_read_to_recover_files_@.txt
<LS_APPDATA>\temp\adobe\acrobat\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\43\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\41\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\40\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\4\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\39\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\38\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\37\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\36\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\35\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\42\@_read_to_recover_files_@.txt
<LS_APPDATA>\temp\{5b964e0e-b9a3-4276-9ed9-4d5a5720747a}\@_read_to_recover_files_@.txt
<LS_APPDATA>\temp\adobe\acrobat\10.0\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\54\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\52\@_read_to_recover_files_@.txt
<LS_APPDATA>\temp\adobe\@_read_to_recover_files_@.txt
<LS_APPDATA>\temp\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\muffin\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\host\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\9\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\8\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\7\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\53\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\63\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\51\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\60\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\6\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\59\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\58\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\57\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\56\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\55\@_read_to_recover_files_@.txt
<LS_APPDATA>\sun\java\deployment\cache\6.0\62\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\no\@_read_to_recover_files_@.txt
C:\msocache\all users\{90120000-002c-0409-0000-0000000ff1ce}-c\proof.fr\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\pt\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\he\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\fr\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\fil\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\fi\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\et\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\es_419\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\es\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\en_us\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\en\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\hr\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\el\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\de\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\da\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\cs\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\ca\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\bg\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\ar\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\en_gb\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_28580\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\hu\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\tr\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\th\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\sv\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\sr\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\sl\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\sk\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\ru\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\ro\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\hi\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\pl\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\no\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\nl\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\lv\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\lt\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\ko\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\ja\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\it\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\pt_br\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\id\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_28580\crx_install\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\zh_tw\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\vi\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\el\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\hr\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\hi\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\fr\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\fil\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\fi\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\es\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\en\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\hu\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\id\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\uk\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\cs\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\ca\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\bg\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\ar\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_24406\crx_install\__macosx\_locales\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_24406\crx_install\__macosx\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\da\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\pt_pt\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\it\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\ru\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\se\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\vi\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\uk\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\tr\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\th\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\sr\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\sl\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\sk\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\zh_cn\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\ja\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\ko\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\pt_pt\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\pt_br\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\pl\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\no\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\nl\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\lv\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\lt\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\ro\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\pl\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\zh_cn\@_read_to_recover_files_@.txt
%HOMEPATH%\start menu\programs\accessories\entertainment\@_read_to_recover_files_@.txt
%HOMEPATH%\start menu\programs\accessories\accessibility\@_read_to_recover_files_@.txt
%HOMEPATH%\start menu\programs\accessories\@_read_to_recover_files_@.txt
%HOMEPATH%\start menu\programs\@_read_to_recover_files_@.txt
%HOMEPATH%\start menu\@_read_to_recover_files_@.txt
%HOMEPATH%\sendto\@_read_to_recover_files_@.txt
%HOMEPATH%\recent\@_read_to_recover_files_@.txt
%HOMEPATH%\printhood\@_read_to_recover_files_@.txt
%HOMEPATH%\start menu\programs\administrative tools\@_read_to_recover_files_@.txt
%HOMEPATH%\nethood\@_read_to_recover_files_@.txt
%HOMEPATH%\my documents\my music\@_read_to_recover_files_@.txt
%HOMEPATH%\my documents\downloads\@_read_to_recover_files_@.txt
%HOMEPATH%\my documents\@_read_to_recover_files_@.txt
%HOMEPATH%\local settings\<INETFILES>\@_read_to_recover_files_@.txt
%TEMP%\{f0080ca2-80ae-4958-b6eb-e8fa916d744a}\@_read_to_recover_files_@.txt
%TEMP%\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\@_read_to_recover_files_@.txt
%TEMP%\{615bc16d-60f5-482e-91b3-b51d8130963b}\@_read_to_recover_files_@.txt
%TEMP%\{2af972c7-13b0-4978-92a8-fee26a4fb4e9}\@_read_to_recover_files_@.txt
%HOMEPATH%\my documents\my pictures\@_read_to_recover_files_@.txt
%TEMP%\{01db25f3-1b76-4d97-88c8-1c90634d88fb}\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_24406\crx_install\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\tr\@_read_to_recover_files_@.txt
C:\msocache\all users\{90120000-002c-0409-0000-0000000ff1ce}-c\proof.es\@_read_to_recover_files_@.txt
C:\msocache\all users\{90120000-002c-0409-0000-0000000ff1ce}-c\proof.en\@_read_to_recover_files_@.txt
C:\msocache\all users\{90120000-002c-0409-0000-0000000ff1ce}-c\@_read_to_recover_files_@.txt
C:\msocache\all users\{90120000-001b-0409-0000-0000000ff1ce}-c\@_read_to_recover_files_@.txt
C:\msocache\all users\{90120000-001a-0409-0000-0000000ff1ce}-c\@_read_to_recover_files_@.txt
C:\msocache\all users\{90120000-0019-0409-0000-0000000ff1ce}-c\@_read_to_recover_files_@.txt
C:\msocache\all users\{90120000-0018-0409-0000-0000000ff1ce}-c\@_read_to_recover_files_@.txt
C:\msocache\all users\{90120000-0016-0409-0000-0000000ff1ce}-c\@_read_to_recover_files_@.txt
%HOMEPATH%\start menu\programs\telegram desktop\@_read_to_recover_files_@.txt
%HOMEPATH%\start menu\programs\icq\@_read_to_recover_files_@.txt
C:\msocache\@_read_to_recover_files_@.txt
%HOMEPATH%\voip\@_read_to_recover_files_@.txt
%HOMEPATH%\userdata\ubghkdcj\@_read_to_recover_files_@.txt
%HOMEPATH%\userdata\inafedwn\@_read_to_recover_files_@.txt
%HOMEPATH%\userdata\e3unqlkn\@_read_to_recover_files_@.txt
%HOMEPATH%\userdata\09upir0l\@_read_to_recover_files_@.txt
%HOMEPATH%\userdata\@_read_to_recover_files_@.txt
%HOMEPATH%\templates\@_read_to_recover_files_@.txt
C:\msocache\all users\@_read_to_recover_files_@.txt
%HOMEPATH%\start menu\programs\winrar\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\de\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\sv\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\no\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\fi\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\eu\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\et\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\es_419\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\es\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\en_us\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\en_gb\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\fr\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\el\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\da\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\cs\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\ca\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\bg\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\ar\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_9112\crx_install\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_9112\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\de\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\th\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\zh_tw\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\fil\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\sr\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\sl\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\sk\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\ru\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\ro\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\pt_pt\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\pt_br\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\pl\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\hi\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\he\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\ms\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\lv\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\lt\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\ko\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\ja\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\it\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\id\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\hu\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\nl\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\hr\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_24406\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\zh_tw\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\zh_cn\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\cs\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\es_419\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\es\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\en_gb\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\en\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\el\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\de\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\da\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\ug\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\fi\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\zh_hk\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2064_18724\crx_install\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2064_18724\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\winboot\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\zh_tw\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\zh_tw\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\zh_hk\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\bg\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\ca\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\fil\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\nb\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\nl\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\sl\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\sk\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\ru\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\ro\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\pt_pt\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\pt_br\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\pl\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\sr\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\fr\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\hi\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\lt\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\ko\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\ja\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\it\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\id\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\hu\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\hr\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\lv\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\pl\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\sv\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\wae\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\shn\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\sr\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\sr\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\sq\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\sq\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\sl\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\sl\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\sk\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\zh_cn\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\sv\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\shn\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\ru\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\ru\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\ro\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\ro\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\pt_br\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\pt_br\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\pt\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\sk\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\zh_cn\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\ta\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\te\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\ta\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\wae\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\vi\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\vi\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\uz\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\uz\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\ur\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\ur\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\te\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\uk\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\sv\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\ug\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\tw\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\tw\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\tr\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\tr\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\th\lc_messages\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\th\@_read_to_recover_files_@.txt
%TEMP%\pyl1.tmp\translations\uk\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\pepperflash\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\th\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\vi\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\hu\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\hr\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\hi\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\he\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\fr\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\fil\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\fi\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\es\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\tr\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\en\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\de\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\da\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\cs\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\ca\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\bg\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\ar\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\zh_tw\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\el\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\zh_cn\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\vi\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\ko\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\it\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\vi\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\uk\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\tr\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\th\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\sv\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\sr\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\sl\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\ja\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\sk\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\id\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\pt_pt\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\pt_br\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\pl\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\no\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\nl\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\lv\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\lt\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\ru\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\uk\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\ro\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\et\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\fr\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\fil\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\fi\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\es\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\en\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\el\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\de\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\da\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\th\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\cs\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\bg\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\ar\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\zh_tw\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\zh_cn\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\ca\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\uk\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\tr\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\hu\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\hi\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\sv\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\sr\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\sl\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\sk\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\ru\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\ro\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\pt_pt\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\hr\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\pt_br\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\he\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\nl\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\lv\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\lt\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\ko\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\ja\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\it\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\id\@_read_to_recover_files_@.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\pl\@_read_to_recover_files_@.txt
C:\msocache\all users\{90120000-0010-0409-0000-0000000ff1ce}-c\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\evwhitelist\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\service worker\cachestorage\b5828dd7cc3b943f8890a5bb6e3b1b63e8ee8703\dfe4172c59e2ffc7eabde9582eb3d9051374d02e\index-dir\@_read_to_recover_files_@.tx...
%APPDATA%\icqm\icq\fonts\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\dll\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\database\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\@_read_to_recover_files_@.txt
%APPDATA%\icqm\@_read_to_recover_files_@.txt
%APPDATA%\icq-profile\update\splash_banner\@_read_to_recover_files_@.txt
%APPDATA%\icq-profile\update\@_read_to_recover_files_@.txt
%APPDATA%\icq-profile\base\@_read_to_recover_files_@.txt
%APPDATA%\adobe\logtransport2\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\graphics\phone\@_read_to_recover_files_@.txt
%APPDATA%\adobe\linguistics\dictionaries\adobe custom dictionary\eng\@_read_to_recover_files_@.txt
%APPDATA%\adobe\linguistics\dictionaries\adobe custom dictionary\can\@_read_to_recover_files_@.txt
%APPDATA%\adobe\linguistics\dictionaries\adobe custom dictionary\brt\@_read_to_recover_files_@.txt
%APPDATA%\adobe\linguistics\dictionaries\adobe custom dictionary\all\@_read_to_recover_files_@.txt
%APPDATA%\adobe\linguistics\dictionaries\adobe custom dictionary\@_read_to_recover_files_@.txt
%APPDATA%\adobe\linguistics\dictionaries\@_read_to_recover_files_@.txt
%APPDATA%\adobe\linguistics\@_read_to_recover_files_@.txt
%APPDATA%\icq-profile\@_read_to_recover_files_@.txt
%APPDATA%\adobe\flash player\assetcache\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\html\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\html\kz\jabber\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\html\kz\error\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\html\kz\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\html\en\loading\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\html\en\jabber\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\html\en\error\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\html\en\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\html\de\loading\@_read_to_recover_files_@.txt
%APPDATA%\adobe\headlights\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\graphics\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\html\de\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\html\cz\loading\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\html\cz\jabber\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\html\cz\error\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\html\cz\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\html\bg\loading\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\html\bg\jabber\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\html\bg\error\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\html\de\error\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\html\bg\@_read_to_recover_files_@.txt
%APPDATA%\adobe\flash player\assetcache\mc4yk349\@_read_to_recover_files_@.txt
%APPDATA%\adobe\flash player\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\html\pt\@_read_to_recover_files_@.txt
C:\documents and settings\networkservice\local settings\application data\microsoft\@_read_to_recover_files_@.txt
C:\documents and settings\networkservice\local settings\<INETFILES>\content.ie5\@_read_to_recover_files_@.txt
C:\documents and settings\networkservice\local settings\<INETFILES>\@_read_to_recover_files_@.txt
C:\documents and settings\networkservice\local settings\temp\@_read_to_recover_files_@.txt
C:\documents and settings\networkservice\local settings\history\history.ie5\@_read_to_recover_files_@.txt
C:\documents and settings\networkservice\local settings\history\@_read_to_recover_files_@.txt
C:\documents and settings\networkservice\local settings\application data\microsoft\credentials\s-1-5-20\@_read_to_recover_files_@.txt
C:\documents and settings\networkservice\local settings\application data\microsoft\credentials\@_read_to_recover_files_@.txt
C:\documents and settings\networkservice\local settings\<INETFILES>\content.ie5\ee7gwdg8\@_read_to_recover_files_@.txt
C:\documents and settings\networkservice\local settings\<INETFILES>\content.ie5\etuaii8e\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\html\kz\loading\@_read_to_recover_files_@.txt
C:\documents and settings\networkservice\cookies\@_read_to_recover_files_@.txt
C:\documents and settings\networkservice\application data\microsoft\systemcertificates\my\certificates\@_read_to_recover_files_@.txt
C:\documents and settings\networkservice\application data\microsoft\systemcertificates\my\ctls\@_read_to_recover_files_@.txt
C:\documents and settings\networkservice\application data\microsoft\systemcertificates\my\crls\@_read_to_recover_files_@.txt
C:\documents and settings\networkservice\application data\microsoft\systemcertificates\my\@_read_to_recover_files_@.txt
C:\documents and settings\networkservice\application data\microsoft\systemcertificates\@_read_to_recover_files_@.txt
C:\documents and settings\networkservice\application data\microsoft\media player\@_read_to_recover_files_@.txt
C:\documents and settings\networkservice\local settings\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\html\de\jabber\@_read_to_recover_files_@.txt
C:\documents and settings\networkservice\local settings\<INETFILES>\content.ie5\h8mbgrq8\@_read_to_recover_files_@.txt
%APPDATA%\adobe\acrobat\@_read_to_recover_files_@.txt
%APPDATA%\adobe\acrobat\10.0\@_read_to_recover_files_@.txt
%APPDATA%\adobe\acrobat\9.0\forms\@_read_to_recover_files_@.txt
%APPDATA%\adobe\acrobat\9.0\@_read_to_recover_files_@.txt
%APPDATA%\adobe\acrobat\10.0\security\crlcache\@_read_to_recover_files_@.txt
%APPDATA%\adobe\acrobat\10.0\security\@_read_to_recover_files_@.txt
%APPDATA%\adobe\acrobat\10.0\javascripts\@_read_to_recover_files_@.txt
%APPDATA%\adobe\acrobat\10.0\forms\@_read_to_recover_files_@.txt
%APPDATA%\adobe\acrobat\10.0\collab\@_read_to_recover_files_@.txt
%APPDATA%\adobe\acrobat\9.0\javascripts\@_read_to_recover_files_@.txt
C:\documents and settings\networkservice\local settings\<INETFILES>\content.ie5\z9pmdpek\@_read_to_recover_files_@.txt
%HOMEPATH%\@_read_to_recover_files_@.txt
%APPDATA%\.purple\smileys\@_read_to_recover_files_@.txt
%APPDATA%\.purple\certificates\x509\tls_peers\@_read_to_recover_files_@.txt
%APPDATA%\.purple\certificates\x509\@_read_to_recover_files_@.txt
%APPDATA%\.purple\certificates\@_read_to_recover_files_@.txt
%APPDATA%\.purple\@_read_to_recover_files_@.txt
%APPDATA%\@_read_to_recover_files_@.txt
%HOMEPATH%\.oracle_jre_usage\@_read_to_recover_files_@.txt
%APPDATA%\adobe\@_read_to_recover_files_@.txt
C:\documents and settings\default user\local settings\application data\microsoft\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\html\pt\error\@_read_to_recover_files_@.txt
%APPDATA%\microsoft\crypto\rsa\@_read_to_recover_files_@.txt
%APPDATA%\microsoft\crypto\@_read_to_recover_files_@.txt
%APPDATA%\microsoft\credentials\s-1-5-21-1229272821-842925246-1060284298-1003\@_read_to_recover_files_@.txt
%APPDATA%\microsoft\credentials\@_read_to_recover_files_@.txt
%APPDATA%\microsoft\addins\@_read_to_recover_files_@.txt
%APPDATA%\microsoft\@_read_to_recover_files_@.txt
%APPDATA%\macromedia\flash player\macromedia.com\support\flashplayer\sys\@_read_to_recover_files_@.txt
%APPDATA%\macromedia\flash player\macromedia.com\support\flashplayer\@_read_to_recover_files_@.txt
%APPDATA%\microsoft\crypto\rsa\s-1-5-21-1229272821-842925246-1060284298-1003\@_read_to_recover_files_@.txt
%APPDATA%\macromedia\flash player\macromedia.com\support\@_read_to_recover_files_@.txt
%APPDATA%\macromedia\flash player\#sharedobjects\gprus39x\@_read_to_recover_files_@.txt
%APPDATA%\macromedia\flash player\#sharedobjects\@_read_to_recover_files_@.txt
%APPDATA%\macromedia\flash player\@_read_to_recover_files_@.txt
%APPDATA%\macromedia\@_read_to_recover_files_@.txt
%APPDATA%\identities\{d6909be8-ea09-4677-9635-1238019fcabc}\@_read_to_recover_files_@.txt
%APPDATA%\identities\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\video\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\translation\@_read_to_recover_files_@.txt
%APPDATA%\macromedia\flash player\macromedia.com\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\sounds\@_read_to_recover_files_@.txt
C:\documents and settings\networkservice\application data\microsoft\internet explorer\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\smiles\statuses\vk\@_read_to_recover_files_@.txt
%APPDATA%\microsoft\protect\s-1-5-21-1229272821-842925246-1060284298-1003\@_read_to_recover_files_@.txt
%APPDATA%\microsoft\protect\@_read_to_recover_files_@.txt
%APPDATA%\microsoft\proof\@_read_to_recover_files_@.txt
%APPDATA%\microsoft\outlook\@_read_to_recover_files_@.txt
%APPDATA%\microsoft\office\recent\@_read_to_recover_files_@.txt
%APPDATA%\microsoft\office\@_read_to_recover_files_@.txt
%APPDATA%\microsoft\media player\@_read_to_recover_files_@.txt
%APPDATA%\microsoft\msdn\7.0\@_read_to_recover_files_@.txt
%APPDATA%\microsoft\dbgclr\7.1\@_read_to_recover_files_@.txt
%APPDATA%\microsoft\dbgclr\@_read_to_recover_files_@.txt
%APPDATA%\microsoft\internet explorer\quick launch\@_read_to_recover_files_@.txt
%APPDATA%\microsoft\internet explorer\@_read_to_recover_files_@.txt
%APPDATA%\microsoft\imjp9_0\@_read_to_recover_files_@.txt
%APPDATA%\microsoft\imjp8_1\@_read_to_recover_files_@.txt
%APPDATA%\microsoft\imjp12\@_read_to_recover_files_@.txt
%APPDATA%\microsoft\ime12\@_read_to_recover_files_@.txt
%APPDATA%\microsoft\excel\@_read_to_recover_files_@.txt
%APPDATA%\microsoft\document building blocks\1033\@_read_to_recover_files_@.txt
%APPDATA%\microsoft\mmc\@_read_to_recover_files_@.txt
%APPDATA%\microsoft\document building blocks\@_read_to_recover_files_@.txt
C:\documents and settings\networkservice\local settings\application data\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\smiles\statuses\jabber\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\smiles\smiles\set05\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\html\uz\loading\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\html\uz\jabber\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\html\uz\error\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\html\uz\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\html\ua\loading\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\html\ua\jabber\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\html\ua\error\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\skin_cache\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\html\ua\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\html\tr\jabber\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\html\tr\error\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\html\tr\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\html\ru\loading\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\html\ru\jabber\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\html\ru\error\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\html\ru\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\html\pt\loading\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\html\tr\loading\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\smiles\statuses\set01\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\html\pt\jabber\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\skin\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\smiles\statuses\icq\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\smiles\statuses\gtalk\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\smiles\statuses\aim\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\smiles\statuses\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\smiles\smiles\valentine\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\smiles\smiles\static_png\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\smiles\smiles\smiles\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\smiles\smiles\set06\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\smiles\flash\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\smiles\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\smiles\smiles\set03\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\smiles\smiles\koloboks\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\smiles\smiles\emoji\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\smiles\smiles\cat\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\smiles\smiles\animated\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\smiles\smiles\8march\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\smiles\smiles\set04\@_read_to_recover_files_@.txt
%APPDATA%\icqm\icq\smiles\smiles\@_read_to_recover_files_@.txt
C:\documents and settings\networkservice\application data\microsoft\credentials\s-1-5-20\@_read_to_recover_files_@.txt
C:\documents and settings\networkservice\application data\microsoft\credentials\@_read_to_recover_files_@.txt
C:\documents and settings\networkservice\application data\microsoft\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\microsoft\user account pictures\default pictures\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\package cache\{2af972c7-13b0-4978-92a8-fee26a4fb4e9}\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\package cache\{01db25f3-1b76-4d97-88c8-1c90634d88fb}\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\package cache\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\oracle\java\installcache\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\oracle\java\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\oracle\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\microsoft help\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\microsoft\msdn\7.0\1031\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\package cache\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\microsoft\media player\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\microsoft\office\data\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\microsoft\office\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\microsoft\network\downloader\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\microsoft\network\connections\pbk\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\microsoft\network\connections\cm\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\microsoft\network\connections\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\microsoft\network\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\microsoft\office\groove\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\microsoft\user account pictures\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\package cache\{a2563e55-3bec-3828-8d67-e5e8b9e8b675}v14.0.23026\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\desktop\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\documents\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\documents\my pictures\sample pictures\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\documents\my pictures\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\documents\my music\sample playlists\00107ff6\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\documents\my music\sample playlists\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\documents\my music\sample music\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\documents\my music\my playlists\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\documents\my music\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\documents\my videos\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\package cache\{a2563e55-3bec-3828-8d67-e5e8b9e8b675}v14.0.23026\packages\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\package cache\{a2563e55-3bec-3828-8d67-e5e8b9e8b675}v14.0.23026\packages\vcruntimeminimum_x86\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\sun\java\java update\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\sun\java\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\sun\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\package cache\{f0080ca2-80ae-4958-b6eb-e8fa916d744a}\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\package cache\{be960c1c-7bad-3de6-8b1a-2616fe532845}v14.0.23026\packages\vcruntimeadditional_x86\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\package cache\{be960c1c-7bad-3de6-8b1a-2616fe532845}v14.0.23026\packages\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\package cache\{be960c1c-7bad-3de6-8b1a-2616fe532845}v14.0.23026\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\drm\@_read_to_recover_files_@.txt
%APPDATA%\microsoft\publisher\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\favorites\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\microsoft\msdn\7.0\3082\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\adobe\acrobat\10.0\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\microsoft\crypto\dss\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\microsoft\crypto\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\microsoft\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\adobe\updater6\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\adobe\setup\{ac76ba86-7ad7-1033-7b44-aa1000000001}\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\adobe\setup\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\adobe\acrobat\10.0\replicate\security\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\microsoft\msdn\8.0\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\microsoft\crypto\rsa\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\adobe\acrobat\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\adobe\arm\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\adobe\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\@_read_to_recover_files_@.txt
C:\documents and settings\@_read_to_recover_files_@.txt
<Current directory>\tempwmicbatchfile.bat
%ALLUSERSPROFILE%\00000000.eky
%ALLUSERSPROFILE%\application data\adobe\acrobat\10.0\replicate\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\microsoft\media index\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\microsoft\crypto\rsa\machinekeys\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\microsoft\dbgclr\7.1\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\microsoft\crypto\rsa\s-1-5-18\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\microsoft\msdn\7.0\2052\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\microsoft\msdn\7.0\1050\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\microsoft\msdn\7.0\1049\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\microsoft\msdn\7.0\1046\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\microsoft\msdn\7.0\1042\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\microsoft\msdn\7.0\1041\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\microsoft\msdn\7.0\1040\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\microsoft\dbgclr\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\microsoft\msdn\7.0\1036\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\microsoft\crypto\dss\machinekeys\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\microsoft\msdn\7.0\1028\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\microsoft\msdn\7.0\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\microsoft\msdn\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\microsoft\msdaipp\offline\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\microsoft\msdaipp\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\microsoft\html help\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\microsoft\dbgclr\7.1\1033\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\microsoft\msdn\7.0\1033\@_read_to_recover_files_@.txt
%APPDATA%\microsoft\msdn\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\start menu\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\start menu\programs\accessories\accessibility\@_read_to_recover_files_@.txt
C:\documents and settings\localservice\application data\microsoft\systemcertificates\@_read_to_recover_files_@.txt
C:\documents and settings\localservice\application data\microsoft\media player\@_read_to_recover_files_@.txt
C:\documents and settings\localservice\application data\microsoft\internet explorer\@_read_to_recover_files_@.txt
C:\documents and settings\localservice\application data\microsoft\credentials\s-1-5-19\@_read_to_recover_files_@.txt
C:\documents and settings\localservice\application data\microsoft\credentials\@_read_to_recover_files_@.txt
C:\documents and settings\localservice\application data\microsoft\@_read_to_recover_files_@.txt
C:\documents and settings\localservice\application data\@_read_to_recover_files_@.txt
C:\documents and settings\localservice\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\start menu\programs\@_read_to_recover_files_@.txt
C:\documents and settings\default user\templates\@_read_to_recover_files_@.txt
C:\documents and settings\default user\start menu\programs\accessories\entertainment\@_read_to_recover_files_@.txt
C:\documents and settings\default user\start menu\programs\accessories\accessibility\@_read_to_recover_files_@.txt
C:\documents and settings\default user\start menu\programs\accessories\@_read_to_recover_files_@.txt
C:\documents and settings\default user\start menu\programs\@_read_to_recover_files_@.txt
C:\documents and settings\default user\start menu\@_read_to_recover_files_@.txt
C:\documents and settings\default user\sendto\@_read_to_recover_files_@.txt
C:\documents and settings\default user\recent\@_read_to_recover_files_@.txt
C:\documents and settings\default user\printhood\@_read_to_recover_files_@.txt
C:\documents and settings\default user\start menu\programs\startup\@_read_to_recover_files_@.txt
C:\documents and settings\default user\nethood\@_read_to_recover_files_@.txt
C:\documents and settings\default user\my documents\@_read_to_recover_files_@.txt
C:\documents and settings\localservice\application data\microsoft\systemcertificates\my\certificates\@_read_to_recover_files_@.txt
C:\documents and settings\localservice\application data\microsoft\systemcertificates\my\crls\@_read_to_recover_files_@.txt
C:\documents and settings\networkservice\application data\@_read_to_recover_files_@.txt
C:\documents and settings\networkservice\@_read_to_recover_files_@.txt
C:\documents and settings\localservice\local settings\<INETFILES>\content.ie5\qiszf4kx\@_read_to_recover_files_@.txt
C:\documents and settings\localservice\local settings\<INETFILES>\content.ie5\o4q6sqop\@_read_to_recover_files_@.txt
C:\documents and settings\localservice\local settings\<INETFILES>\content.ie5\mqraz07n\@_read_to_recover_files_@.txt
C:\documents and settings\localservice\local settings\<INETFILES>\content.ie5\9stcdn6y\@_read_to_recover_files_@.txt
C:\documents and settings\localservice\local settings\<INETFILES>\content.ie5\@_read_to_recover_files_@.txt
C:\documents and settings\localservice\application data\microsoft\systemcertificates\my\ctls\@_read_to_recover_files_@.txt
C:\documents and settings\localservice\local settings\<INETFILES>\@_read_to_recover_files_@.txt
C:\documents and settings\localservice\application data\microsoft\systemcertificates\my\@_read_to_recover_files_@.txt
C:\documents and settings\localservice\local settings\history\@_read_to_recover_files_@.txt
C:\documents and settings\localservice\local settings\application data\microsoft\credentials\s-1-5-19\@_read_to_recover_files_@.txt
C:\documents and settings\localservice\local settings\application data\microsoft\credentials\@_read_to_recover_files_@.txt
C:\documents and settings\localservice\local settings\application data\microsoft\@_read_to_recover_files_@.txt
C:\documents and settings\localservice\local settings\application data\@_read_to_recover_files_@.txt
C:\documents and settings\localservice\local settings\@_read_to_recover_files_@.txt
C:\documents and settings\localservice\cookies\@_read_to_recover_files_@.txt
C:\documents and settings\localservice\local settings\temp\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\start menu\programs\accessories\@_read_to_recover_files_@.txt
C:\documents and settings\localservice\local settings\history\history.ie5\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\application data\package cache\{615bc16d-60f5-482e-91b3-b51d8130963b}\@_read_to_recover_files_@.txt
C:\documents and settings\default user\application data\microsoft\internet explorer\@_read_to_recover_files_@.txt
C:\documents and settings\default user\application data\microsoft\@_read_to_recover_files_@.txt
C:\documents and settings\default user\application data\@_read_to_recover_files_@.txt
C:\documents and settings\default user\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\templates\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\start menu\programs\mirc\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\start menu\programs\winrar\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\start menu\programs\steam\@_read_to_recover_files_@.txt
C:\documents and settings\default user\local settings\<INETFILES>\content.ie5\etuaii8e\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\start menu\programs\qip 2012\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\start menu\programs\microsoft office\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\start menu\programs\microsoft .net framework sdk v1.1\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\start menu\programs\google chrome\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\start menu\programs\games\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\start menu\programs\administrative tools\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\start menu\programs\accessories\system tools\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\start menu\programs\accessories\entertainment\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\start menu\programs\accessories\communications\@_read_to_recover_files_@.txt
%ALLUSERSPROFILE%\start menu\programs\microsoft office\microsoft office tools\@_read_to_recover_files_@.txt
C:\documents and settings\default user\local settings\<INETFILES>\content.ie5\z9pmdpek\@_read_to_recover_files_@.txt
C:\documents and settings\default user\local settings\<INETFILES>\content.ie5\h8mbgrq8\@_read_to_recover_files_@.txt
C:\documents and settings\default user\application data\microsoft\systemcertificates\my\crls\@_read_to_recover_files_@.txt
C:\documents and settings\default user\application data\microsoft\systemcertificates\@_read_to_recover_files_@.txt
C:\documents and settings\default user\local settings\<INETFILES>\content.ie5\ee7gwdg8\@_read_to_recover_files_@.txt
C:\documents and settings\default user\local settings\<INETFILES>\content.ie5\@_read_to_recover_files_@.txt
C:\documents and settings\default user\local settings\<INETFILES>\@_read_to_recover_files_@.txt
C:\documents and settings\default user\local settings\temp\@_read_to_recover_files_@.txt
C:\documents and settings\default user\local settings\history\history.ie5\@_read_to_recover_files_@.txt
C:\documents and settings\default user\local settings\history\@_read_to_recover_files_@.txt
C:\documents and settings\default user\local settings\application data\microsoft\windows media\9.0\@_read_to_recover_files_@.txt
C:\documents and settings\default user\application data\microsoft\systemcertificates\my\@_read_to_recover_files_@.txt
C:\documents and settings\default user\local settings\application data\microsoft\windows media\@_read_to_recover_files_@.txt
C:\documents and settings\default user\application data\microsoft\media player\@_read_to_recover_files_@.txt
C:\documents and settings\default user\local settings\application data\@_read_to_recover_files_@.txt
C:\documents and settings\default user\local settings\@_read_to_recover_files_@.txt
C:\documents and settings\default user\favorites\@_read_to_recover_files_@.txt
C:\documents and settings\default user\desktop\@_read_to_recover_files_@.txt
C:\documents and settings\default user\cookies\@_read_to_recover_files_@.txt
C:\documents and settings\default user\application data\microsoft\systemcertificates\my\certificates\@_read_to_recover_files_@.txt
C:\documents and settings\default user\application data\microsoft\systemcertificates\my\ctls\@_read_to_recover_files_@.txt
C:\documents and settings\default user\local settings\application data\microsoft\media player\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\58\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\web applications\_crx_aohghmighlieiainnegkcijnfilokake\@_read_to_recover_files_@.txt
%APPDATA%\microsoft\systemcertificates\my\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\el\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\de\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\da\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\cs\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\ca\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\bg\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\ar\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\en_us\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_metadata\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\zh_tw\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\zh_cn\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\vi\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\uk\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\tr\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\th\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\sl\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\es\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\no\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\nl\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\ms\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\lv\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\lt\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\ko\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\ja\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\it\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\sv\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\en_gb\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\hr\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\hi\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\he\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\fr\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\fil\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\fi\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\eu\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\et\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\hu\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\es_419\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\sr\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\sk\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\pt_br\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\bg\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\en_us\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\en_gb\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\el\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\de\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\da\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\cs\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\ca\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\es\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\es_419\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\pl\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extension state\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\cache\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\caps\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\id\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\et\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\lt\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\lv\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\ro\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\pt_pt\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\pt_br\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\pl\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\no\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\nl\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\ms\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\ru\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\fi\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\fil\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\ja\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\it\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\id\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\hu\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\hi\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\he\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\fr\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\ko\@_read_to_recover_files_@.txt
%APPDATA%\microsoft\speech\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\pt_pt\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_metadata\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\zh_tw\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\zh_cn\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\vi\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\uk\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\tr\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\th\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\sv\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\css\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\sr\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\sk\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\ru\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\ro\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\pt_pt\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\pt_br\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\pl\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\nl\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\nb\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\sl\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\lv\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\lt\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\web applications\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\storage\ext\chrome-signin\def\gpucache\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\storage\ext\chrome-signin\def\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\storage\ext\chrome-signin\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\storage\ext\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\storage\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\session storage\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\service worker\database\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\images\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\html\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\service worker\cachestorage\b5828dd7cc3b943f8890a5bb6e3b1b63e8ee8703\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\service worker\cachestorage\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\service worker\cache\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\service worker\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\local storage\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\local extension settings\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\indexeddb\https_www.google.ru_0.indexeddb.leveldb\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\indexeddb\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\service worker\cachestorage\b5828dd7cc3b943f8890a5bb6e3b1b63e8ee8703\dfe4172c59e2ffc7eabde9582eb3d9051374d02e\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\gcm store\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\ar\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\ja\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\et\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.5_0\_platform_specific\x86-32_\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.5_0\_platform_specific\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.5_0\_metadata\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.5_0\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\lccekmodgklaepjeofjdjpbminllajkg\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_metadata\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\zh_tw\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\zh_cn\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\uk\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\tr\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\th\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\sv\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\sr\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\sl\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\sk\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\ru\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\vi\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\ko\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\ro\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.5_0\audio\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\it\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\id\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\hu\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\hr\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\hi\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\fr\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\fil\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\fi\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\es\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\en_gb\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\en\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\el\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\de\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\da\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\cs\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\ca\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\es_419\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\bg\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\@_read_to_recover_files_@.txt
<LS_APPDATA>\chromium\user data\default\@_read_to_recover_files_@.txt
%APPDATA%\oracle\java\jre1.8.0_60\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\au\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\@_read_to_recover_files_@.txt
%APPDATA%\sun\@_read_to_recover_files_@.txt
%APPDATA%\qipguard\@_read_to_recover_files_@.txt
%APPDATA%\qip\profiles\logs\@_read_to_recover_files_@.txt
%APPDATA%\qip\profiles\@_read_to_recover_files_@.txt
%APPDATA%\qip\@_read_to_recover_files_@.txt
%APPDATA%\mozilla\firefox\profiles\22ie2h77.default\storage\permanent\moz-safe-about+home\idb\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\@_read_to_recover_files_@.txt
%APPDATA%\opera software\opera stable\pepper data\shockwave flash\writableroot\#sharedobjects\@_read_to_recover_files_@.txt
%APPDATA%\opera software\opera stable\dictionaries\@_read_to_recover_files_@.txt
%APPDATA%\opera software\opera stable\widevinecdm\@_read_to_recover_files_@.txt
%APPDATA%\opera software\opera stable\pepper data\shockwave flash\writableroot\#sharedobjects\bpfp7kkz\macromedia.com\support\flashplayer\sys\@_read_to_recover_files_@.txt
%APPDATA%\opera software\opera stable\pepper data\shockwave flash\writableroot\#sharedobjects\bpfp7kkz\macromedia.com\support\flashplayer\@_read_to_recover_files_@.txt
%APPDATA%\opera software\opera stable\pepper data\shockwave flash\writableroot\#sharedobjects\bpfp7kkz\macromedia.com\support\@_read_to_recover_files_@.txt
%APPDATA%\opera software\opera stable\pepper data\shockwave flash\writableroot\#sharedobjects\bpfp7kkz\macromedia.com\@_read_to_recover_files_@.txt
%APPDATA%\opera software\opera stable\pepper data\shockwave flash\writableroot\#sharedobjects\bpfp7kkz\@_read_to_recover_files_@.txt
%APPDATA%\oracle\@_read_to_recover_files_@.txt
%APPDATA%\oracle\java\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\18\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\19\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\25\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\24\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\23\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\22\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\21\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\20\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\2\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\26\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\0\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\1\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\16\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\15\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\14\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\13\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\12\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\11\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\10\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\17\@_read_to_recover_files_@.txt
%APPDATA%\microsoft\systemcertificates\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\27\@_read_to_recover_files_@.txt
%APPDATA%\opera software\opera stable\pepper data\shockwave flash\cachewritableadoberoot\assetcache\@_read_to_recover_files_@.txt
%APPDATA%\mozilla\firefox\@_read_to_recover_files_@.txt
%APPDATA%\mozilla\firefox\profiles\22ie2h77.default\datareporting\@_read_to_recover_files_@.txt
%APPDATA%\mozilla\firefox\profiles\22ie2h77.default\crashes\events\@_read_to_recover_files_@.txt
%APPDATA%\mozilla\firefox\profiles\22ie2h77.default\crashes\@_read_to_recover_files_@.txt
%APPDATA%\mozilla\firefox\profiles\22ie2h77.default\bookmarkbackups\@_read_to_recover_files_@.txt
%APPDATA%\mozilla\firefox\profiles\22ie2h77.default\@_read_to_recover_files_@.txt
%APPDATA%\mozilla\firefox\profiles\@_read_to_recover_files_@.txt
%APPDATA%\mozilla\firefox\crash reports\events\@_read_to_recover_files_@.txt
%APPDATA%\opera software\opera stable\pepper data\shockwave flash\cachewritableadoberoot\assetcache\5l589s97\@_read_to_recover_files_@.txt
%APPDATA%\mozilla\firefox\profiles\22ie2h77.default\gmp-gmpopenh264\@_read_to_recover_files_@.txt
%APPDATA%\mozilla\extensions\@_read_to_recover_files_@.txt
%APPDATA%\mozilla\@_read_to_recover_files_@.txt
%APPDATA%\microsoft\word\@_read_to_recover_files_@.txt
%APPDATA%\microsoft\uproof\@_read_to_recover_files_@.txt
%APPDATA%\microsoft\templates\@_read_to_recover_files_@.txt
%APPDATA%\microsoft\systemcertificates\my\certificates\@_read_to_recover_files_@.txt
%APPDATA%\microsoft\systemcertificates\my\ctls\@_read_to_recover_files_@.txt
%APPDATA%\microsoft\systemcertificates\my\crls\@_read_to_recover_files_@.txt
%APPDATA%\mozilla\firefox\crash reports\@_read_to_recover_files_@.txt
%APPDATA%\opera software\opera stable\pepper data\shockwave flash\writableroot\@_read_to_recover_files_@.txt
%APPDATA%\mozilla\firefox\profiles\22ie2h77.default\gmp-gmpopenh264\1.4\@_read_to_recover_files_@.txt
%APPDATA%\mozilla\firefox\profiles\22ie2h77.default\searchplugins\@_read_to_recover_files_@.txt
%APPDATA%\mozilla\firefox\profiles\22ie2h77.default\healthreport\@_read_to_recover_files_@.txt
%APPDATA%\opera software\opera stable\pepper data\shockwave flash\cachewritableadoberoot\@_read_to_recover_files_@.txt
%APPDATA%\opera software\opera stable\pepper data\shockwave flash\@_read_to_recover_files_@.txt
%APPDATA%\opera software\opera stable\pepper data\@_read_to_recover_files_@.txt
%APPDATA%\opera software\opera stable\local storage\@_read_to_recover_files_@.txt
%APPDATA%\opera software\opera stable\extension state\@_read_to_recover_files_@.txt
%APPDATA%\opera software\opera stable\@_read_to_recover_files_@.txt
%APPDATA%\opera software\@_read_to_recover_files_@.txt
%APPDATA%\mozilla\firefox\profiles\22ie2h77.default\minidumps\@_read_to_recover_files_@.txt
%APPDATA%\mozilla\firefox\profiles\22ie2h77.default\webapps\@_read_to_recover_files_@.txt
%APPDATA%\mozilla\firefox\profiles\22ie2h77.default\gmp\@_read_to_recover_files_@.txt
%APPDATA%\mozilla\firefox\profiles\22ie2h77.default\storage\permanent\moz-safe-about+home\@_read_to_recover_files_@.txt
%APPDATA%\mozilla\firefox\profiles\22ie2h77.default\storage\permanent\chrome\idb\2918063365piupsah.files\@_read_to_recover_files_@.txt
%APPDATA%\mozilla\firefox\profiles\22ie2h77.default\storage\permanent\chrome\idb\@_read_to_recover_files_@.txt
%APPDATA%\mozilla\firefox\profiles\22ie2h77.default\storage\permanent\chrome\@_read_to_recover_files_@.txt
%APPDATA%\mozilla\firefox\profiles\22ie2h77.default\storage\permanent\@_read_to_recover_files_@.txt
%APPDATA%\mozilla\firefox\profiles\22ie2h77.default\storage\@_read_to_recover_files_@.txt
%APPDATA%\mozilla\firefox\profiles\22ie2h77.default\sessionstore-backups\@_read_to_recover_files_@.txt
%APPDATA%\mozilla\firefox\profiles\22ie2h77.default\storage\permanent\moz-safe-about+home\idb\818200132aebmoouht.files\@_read_to_recover_files_@.txt
<LS_APPDATA>\google\chrome\user data\default\databases\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\28\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\30\@_read_to_recover_files_@.txt
%HOMEPATH%\desktop\@_read_to_recover_files_@.txt
%HOMEPATH%\cookies\@_read_to_recover_files_@.txt
%APPDATA%\mirc\sounds\@_read_to_recover_files_@.txt
%APPDATA%\mirc\scripts\@_read_to_recover_files_@.txt
%APPDATA%\mirc\logs\@_read_to_recover_files_@.txt
%APPDATA%\mirc\downloads\@_read_to_recover_files_@.txt
%APPDATA%\mirc\channels\@_read_to_recover_files_@.txt
%APPDATA%\mirc\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\29\@_read_to_recover_files_@.txt
%APPDATA%\yandex\@_read_to_recover_files_@.txt
%APPDATA%\thunderbird\profiles\cr5sc40q.default\minidumps\@_read_to_recover_files_@.txt
%APPDATA%\thunderbird\profiles\cr5sc40q.default\@_read_to_recover_files_@.txt
%APPDATA%\thunderbird\profiles\@_read_to_recover_files_@.txt
%APPDATA%\thunderbird\crash reports\@_read_to_recover_files_@.txt
%APPDATA%\thunderbird\@_read_to_recover_files_@.txt
%APPDATA%\telegram desktop\tdata\dumps\@_read_to_recover_files_@.txt
%APPDATA%\telegram desktop\tdata\d877f783d5d3ef8c\@_read_to_recover_files_@.txt
%APPDATA%\telegram desktop\tdata\@_read_to_recover_files_@.txt
%APPDATA%\winrar\@_read_to_recover_files_@.txt
%APPDATA%\telegram desktop\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\tmp\si\@_read_to_recover_files_@.txt
<LS_APPDATA>\@_read_to_recover_files_@.txt
%HOMEPATH%\favorites\links\@_read_to_recover_files_@.txt
<LS_APPDATA>\chromium\user data\@_read_to_recover_files_@.txt
<LS_APPDATA>\chromium\@_read_to_recover_files_@.txt
<LS_APPDATA>\cef\user data\dictionaries\@_read_to_recover_files_@.txt
<LS_APPDATA>\cef\user data\@_read_to_recover_files_@.txt
<LS_APPDATA>\cef\@_read_to_recover_files_@.txt
<LS_APPDATA>\applicationhistory\@_read_to_recover_files_@.txt
<LS_APPDATA>\adobe\updater6\install\@_read_to_recover_files_@.txt
%HOMEPATH%\local settings\@_read_to_recover_files_@.txt
<LS_APPDATA>\adobe\updater6\@_read_to_recover_files_@.txt
%HOMEPATH%\favorites\@_read_to_recover_files_@.txt
<LS_APPDATA>\adobe\acrobat\9.0\cache\@_read_to_recover_files_@.txt
<LS_APPDATA>\adobe\acrobat\9.0\@_read_to_recover_files_@.txt
<LS_APPDATA>\adobe\acrobat\10.0\cache\search\@_read_to_recover_files_@.txt
<LS_APPDATA>\adobe\acrobat\10.0\cache\@_read_to_recover_files_@.txt
<LS_APPDATA>\adobe\acrobat\10.0\@_read_to_recover_files_@.txt
<LS_APPDATA>\adobe\acrobat\@_read_to_recover_files_@.txt
<LS_APPDATA>\adobe\@_read_to_recover_files_@.txt
<LS_APPDATA>\adobe\color\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\3\@_read_to_recover_files_@.txt
<LS_APPDATA>\adobe\acrobat\9.0\updater\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\47\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\46\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\45\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\44\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\43\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\42\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\41\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\40\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\log\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\4\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\38\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\37\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\36\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\35\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\34\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\33\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\32\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\31\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\39\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\tmp\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\security\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\50\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\49\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\9\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\8\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\7\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\63\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\62\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\61\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\60\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\5\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\6\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\48\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\57\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\56\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\55\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\54\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\53\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\52\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\51\@_read_to_recover_files_@.txt
%APPDATA%\sun\java\deployment\cache\6.0\59\@_read_to_recover_files_@.txt
C:\msocache\all users\{90120000-0030-0000-0000-0000000ff1ce}-c\@_read_to_recover_files_@.txt

Modifies user data files (Trojan.Encoder).

Miscellaneous

Searches for the following windows

ClassName: '' WindowName: ''

Creates and executes the following

'<SYSTEM32>\cmd.exe' /C tasklist.exe /FO CSV' (with hidden window)
'<SYSTEM32>\cmd.exe' /C taskkill.exe /F /IM sql*' (with hidden window)
'<SYSTEM32>\cmd.exe' /C taskkill.exe /F /IM agent*' (with hidden window)
'<SYSTEM32>\cmd.exe' /C taskkill.exe /F /IM backup*' (with hidden window)
'<SYSTEM32>\cmd.exe' /C taskkill.exe /F /IM vm*' (with hidden window)
'<SYSTEM32>\cmd.exe' /C WMIC PROCESS WHERE Name=\"<File name>.exe\" call SetPriority 128' (with hidden window)

Executes the following

'<SYSTEM32>\cmd.exe' /C tasklist.exe /FO CSV
'<SYSTEM32>\tasklist.exe' /FO CSV
'<SYSTEM32>\cmd.exe' /C taskkill.exe /F /IM sql*
'<SYSTEM32>\cmd.exe' /C wmic shadowcopy delete
'<SYSTEM32>\cmd.exe' /C taskkill.exe /F /IM agent*
'<SYSTEM32>\cmd.exe' /C taskkill.exe /F /IM backup*
'<SYSTEM32>\cmd.exe' /C taskkill.exe /F /IM vm*
'<SYSTEM32>\cmd.exe' /C WMIC PROCESS WHERE Name=\"<File name>.exe\" call SetPriority 128
'<SYSTEM32>\wbem\wmic.exe' PROCESS WHERE Name=\"<File name>.exe\" call SetPriority 128

TECHNOLOGIES

TERMINOLOGIE

COURS ET EDU

MYTHES

Technical Information

Recommandations pour le traitement

Free trial